Privacy Policy

At Stephanie Redi trading as Simple Solutions Studio, ABN 63 620 695 148 (we, us, or our), we are committed to protecting your privacy and making sure your personal information is secure to the best of our ability.

This Privacy Policy explains how we collect, use, store and disclose your information to comply with the Privacy Act 1988 (Cth) and includes recent amendments made to the Act under the Privacy and Other Legislation Amendment Bill 2024 (Cth).

When you visit our website or social media accounts, interact with us to use our services and/or buy any products from us and provide us with your information, you agree to the collection of that information and our use of it as set out in this privacy policy.

The types of personal information we may collect about you include:

• your name, images and complete contact details
• your age and/or date of birth
• payment details
• any customer survey results and customer service history
• website access and usage information
• information required for automated decision making processes (including where we use artificial intelligence or other software)
• business information provided through our service questionnaires, including details about your operations, workflows, tools, team structure, and revenue
• call recordings and transcripts from discovery calls, scoping calls, and other client meetings
• additional personal information that you or a third party provide to us

We may collect, hold, use and disclose personal information to:

• provide access to and use our website and services
• communicate with you
• conduct administrative activities such as invoicing and record keeping
• conduct marketing, analytics and research
• fulfil legal obligations and respond to disputes
• prepare diagnostic reports, analysis, and recommendations as part of our service delivery
• consider employment applications

We may disclose personal information to:

• third party service providers to enable them to provide their services
• our employees and contractors
• our existing or potential agents or business partners
• sponsors or promoters of any competition we run
• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred
• credit reporting agencies, courts, tribunals, and regulatory authorities, in the event you fail to pay for goods or services we have provided to you
• courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or to establish, exercise, or defend our legal rights
• third parties, including agents or sub-contractors, who assist us in providing information, products, services, or direct marketing to you. This may include parties located, or that store data, outside of Australia
• third parties for collection and processing of data, such as Google Analytics or other relevant businesses. This may include parties that store data outside of Australia

In particular, we use the following third-party platforms which may process your personal information:

Each of these platforms is subject to its own privacy terms.

By providing us with personal information, you consent to the disclosure of your information outside of Australia and acknowledge that we are not required to ensure that overseas recipients handle that personal information in compliance with the Privacy Act (Act) and the Australian Privacy Principles (APPs).

Note the Act and the APPs may not regulate third parties overseas. If any third party engages in any act or practice that contravenes the APPs, it would not be accountable under the Act.

Information classified as "Sensitive Information" has a higher level of protection under the APPs. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information.

We only collect Sensitive Information with your explicit consent or where required by law. If we need to collect Sensitive Information we will inform you of the specific reason and obtain your consent before doing so.

So long as you consent, your sensitive information (if we hold any) may only be used and disclosed for purposes relating to the primary purpose for which the sensitive information was collected.

We record discovery calls, scoping calls, and other client meetings to support accurate note-taking and internal reference. An AI-powered notetaking tool is used during these calls, which may produce automated transcripts or summaries.

You will be informed that a call is being recorded at the start of the session. By continuing the call, you consent to the recording.

Call recordings and transcripts are used solely for internal purposes such as note-taking and quality review, and are not shared with third parties except as required by the notetaking platform's own terms of service. You may request access to or deletion of your recording at any time by contacting us at steph@simplesolutionsstudio.com.au.

If a data breach occurs that is likely to result in serious harm, we will:

• assess the breach within 30 days as required under the Notifiable Data Breaches (NDB) Scheme
• notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable
• provide details on the nature of the breach and actions taken to mitigate harm

At all times, you have the right to:

• request access to your personal data
• correct inaccurate or outdated information
• request deletion of your personal information, subject of course to our legal obligations
• opt out of receiving marketing communications at any time by using the unsubscribe function in our emails or by contacting us directly. We will comply with the Spam Act 2003 (Cth) and will not send marketing communications without your express or inferred consent

Your personal information may be transferred to an overseas jurisdiction with substantially similar data protection laws such as the United States of America, the United Kingdom, or countries within the European Union (EU). These countries have data protection laws which protect personal information in a way that is at least substantially similar to the APPs, and there will be mechanisms available to you to enforce the protection of your personal information under that overseas law.

We take reasonable steps to ensure overseas recipients handle personal information in accordance with APPs. Where personal information is transferred outside Australia, we will ensure appropriate safeguards, such as contractual obligations or data protection agreements, are in place where required.

We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

We cannot guarantee the security of any information transmitted to or by us over the Internet. The transmission and exchange of information is carried out at your own risk. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that the personal information we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.

We use cookies and tracking technologies to enhance user experience and measure website performance. By using our website and social media accounts, you consent to the use of our cookies.

While cookies don't tell us your email address, they do allow third parties, like Google and Facebook, to track you as part of our retargeting campaigns. If and when you choose to provide our website with personal information, this information may be linked to the data stored in the cookie. You can manage or disable cookies through your web browser settings.

Web beacons monitor the behaviour on our website and collect data about your web page viewing. We also use Google Analytics to collect and process data from time to time.

We do not have any control over third party websites and we are not responsible for the protection and privacy of any personal information that you provide whilst visiting them. Third party websites are not governed by this Privacy Policy, even if you followed a link from our website.

We may update this privacy policy as laws change. The latest version will always be available on our website.

This Privacy Policy should be read in conjunction with our AI Use Policy, which sets out how we use artificial intelligence tools in our business operations, including in the preparation of client reports, call recording and notetaking, and internal automation workflows.

For any questions or notices, please contact our Privacy Officer:

Simple Solutions Studio is operated by Stephanie Redi, ABN 63 620 695 148, based in Melbourne, Victoria, Australia, serving service-based founders across Australia.