Skip to content
Legal

Privacy Policy

Last updated: [DATE] · Applies to validly.com.au and the Validly platform
Draft for review. This is a working draft prepared around the Australian Privacy Principles. It must be reviewed by a qualified privacy lawyer before publication and is not legal advice.

Validly ("we", "us", "our") helps Australian businesses keep their compliance documents valid, ready, and easy to share. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. The information we collect

We collect information needed to provide proof-readiness services, including account information, business records, and usage information used to operate and secure the service.

2. How we use it

We use personal information to operate the service: to track document validity, send reminders, fulfil document requests, generate and share proof packs, secure your account, provide support, and meet our legal obligations.

3. Sensitive information

Where you record sensitive information about an individual, you confirm you have the authority and a lawful basis to do so. For checks such as WWCC and police checks, Validly's default is to capture status and expiry rather than retain a stored image.

4. Disclosure and our service providers

We share personal information only as needed to run the service - with vetted providers for hosting, file storage, and email delivery - or where required by law.

5. Where your data is stored

Validly hosts data in Australia (Sydney region). Where a provider may process limited data outside Australia, we take reasonable steps to ensure comparable protection consistent with APP 8.

6. Security

We take reasonable steps to protect personal information, including encryption in transit and at rest, additional encryption of sensitive identifiers, role-based access controls, private file storage with time-limited links, and audit logging.

12. Contact us

For privacy questions or to make a request, contact us at [PRIVACY EMAIL]. If you are not satisfied with our response, you may contact the OAIC at oaic.gov.au.