Privacy Notice

Scope of this notice

This notice explains how RAIReady handles personal information when you visit our website, make an enquiry, communicate with us, or use a RAIReady service or platform workspace made available by your organisation.

RAIReady approaches privacy in the Australian context, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. This notice does not expand or limit rights or obligations under applicable law.

Information we collect

The information we collect depends on how you interact with us.

• Enquiry details, including your name, work email, organisation and the message you submit.
• Account and professional details provided to access a client workspace, such as your name, email, role and organisation.
• Assurance records entered by authorised users, including assessments, evidence, findings, decisions, activity history and supplier information. These records may contain personal information where a client chooses to include it.
• Technical and usage information needed to operate, secure and diagnose the service, such as device, browser, access and error information.
• Communications and support records when you contact us or participate in an assurance engagement.

Why we collect and use it

Please do not include unnecessary sensitive information in a public enquiry. Client organisations are responsible for deciding what information their authorised users place in their workspace.

• To respond to enquiries and discuss an assurance need or engagement.
• To provide, administer, secure and support the RAIReady platform and advisory services.
• To authenticate users, apply organisation-based access controls and maintain accountable activity records.
• To deliver requested notifications, reports and service communications.
• To improve reliability and user experience, investigate incidents and meet legal or contractual obligations.

How information is shared

We do not sell personal information. We may disclose it only where reasonably required to provide and protect the service, meet an engagement, or comply with law.

• To authorised people within the organisation whose workspace contains the record.
• To service providers supporting hosting, authentication, email delivery, monitoring and other service operations, under appropriate contractual arrangements.
• To professional advisers, regulators, law enforcement or other parties where required or authorised by law.
• In connection with a business restructuring or transfer, subject to appropriate confidentiality and privacy protections.

Overseas handling

Some technology service providers may store or process information outside Australia. The countries involved can vary with the provider and service configuration. RAIReady takes reasonable steps appropriate to the circumstances to assess providers and protect information, while recognising that overseas recipients may be subject to different privacy laws.

Security and retention

RAIReady uses administrative, technical and organisational safeguards appropriate to the nature of the information, including access controls and organisation-based separation. No internet service can guarantee absolute security.

We retain personal information for as long as reasonably needed for the purpose collected, to provide the service, preserve an accountable assurance record, resolve disputes, or meet legal and contractual requirements. We delete or de-identify information when it is no longer required, where reasonably practicable and lawful.

Access, correction and complaints

You may ask to access or correct personal information RAIReady holds about you. We may need to verify your identity and may decline or limit a request where permitted by law, explaining why where required.

To make a request or privacy complaint, email contact@raiready.com with enough detail for us to understand and investigate it. We will acknowledge and respond within a reasonable period. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.

Website data and links

The website may use necessary storage, logs or similar technologies to operate sessions, security and core functionality. Links to third-party websites are governed by those parties' own privacy practices, not this notice.

Changes and contact

We may update this notice as our services, providers or legal obligations change. The current version and update date will appear on this page. Privacy enquiries, requests and complaints can be sent to contact@raiready.com.