SafeWize is committed to protecting the privacy of our clients and website visitors in accordance with Australian privacy law.
SafeWize Pty Ltd ("SafeWize", "we", "us", or "our") operates the SafeWize platform — a psychosocial hazard compliance service for Australian businesses. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 of that Act.
By accessing our website, purchasing a subscription, or using any SafeWize service, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our services.
Applicable law: This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where applicable, we also comply with the Work Health and Safety Act 2011 (Cth) and relevant state and territory WHS legislation regarding the handling of workplace psychosocial hazard data.
We collect personal information that is necessary to provide our compliance services. The types of information we collect depend on how you interact with SafeWize.
| Category | Examples | How Collected |
|---|---|---|
| Account & Identity | Full name, email address, business name, ABN, job title | Registration form, checkout |
| Billing & Payment | Billing address, payment method details (tokenised via Stripe) | Checkout process |
| Workplace Information | Industry sector, employee count, business location, risk assessment responses | Onboarding, platform use |
| Usage Data | Pages visited, features accessed, documents downloaded, AI coach queries | Automatically via server logs and analytics |
| Communications | Support enquiries, email correspondence, feedback submissions | Email, contact forms |
| Survey Responses | Anonymous employee psychosocial survey data (aggregated, not individually identified) | Google Forms integration |
We do not intentionally collect sensitive information (as defined in the Privacy Act) such as health records, racial or ethnic origin, political opinions, or criminal history. If such information is provided incidentally through support communications, it will be handled with the highest level of care and not used for any secondary purpose.
We use the personal information we collect for the following primary purposes:
To create and manage your SafeWize account, provide access to your compliance dashboard, deliver your industry Risk Kit documents, and facilitate your psychosocial hazard compliance program.
To process subscription payments, issue invoices, manage renewals, and handle refund requests in accordance with our Terms of Service.
To analyse usage patterns, identify areas for product improvement, develop new features, and maintain the security and reliability of our platform. This analysis uses aggregated, de-identified data wherever possible.
To send transactional emails (account confirmations, receipts, renewal reminders), compliance update notifications, and — where you have opted in — product news and educational content. You may unsubscribe from marketing communications at any time.
To comply with applicable laws, respond to lawful requests from government authorities, and enforce our Terms of Service.
We will not use your personal information for any purpose that is incompatible with the primary purpose for which it was collected, unless you have provided consent or an exception under the Privacy Act applies.
SafeWize does not sell, rent, or trade your personal information to third parties. We may disclose your information to the following categories of service providers who assist us in delivering our services:
| Third Party | Purpose | Location |
|---|---|---|
| Stripe Inc. | Payment processing and subscription management | United States (Privacy Shield / SCCs) |
| Google LLC | Document storage (Google Drive), survey collection (Google Forms), email (Gmail) | United States / Global (SCCs) |
| OpenAI LP | AI Compliance Coach — processing of natural language queries to provide compliance guidance | United States (SCCs) |
| Zapier Inc. | Workflow automation for client onboarding and notifications | United States (SCCs) |
| Hosting Provider | Web server infrastructure and data storage | Australia / Singapore |
Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles, including through contractual arrangements (Standard Contractual Clauses) or relying on adequacy decisions.
We may also disclose your information where required by law, court order, or to protect the rights, property, or safety of SafeWize, our clients, or the public.
SafeWize takes the security of your personal information seriously. We implement a range of technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or destruction.
These measures include: TLS/HTTPS encryption for all data in transit; access controls limiting data access to authorised personnel on a need-to-know basis; tokenised payment processing via Stripe (we do not store full card numbers on our servers); and regular security reviews of our platform and infrastructure.
Important: While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you provide your information at your own risk. If you become aware of any security concern, please contact us immediately at privacy@safewize.com.au.
SafeWize uses Google Drive to host and deliver your compliance documents, templates, and Risk Kit materials. When you access a document through your SafeWize dashboard, you are redirected to a Google Drive link that creates a personal copy in your own Google account.
The following applies to your use of Google Drive through our platform:
Documents shared via Google Drive "Make a Copy" links are copied to your personal Google Drive. SafeWize does not retain access to documents once they have been copied to your account. Google's own Privacy Policy governs how Google handles data stored in Google Drive.
We do not use Google Drive to store personally identifiable information about your employees. Survey data collected via Google Forms is stored in Google Sheets accessible only to authorised SafeWize administrators and your nominated account holder.
All payment transactions on the SafeWize platform are processed by Stripe Inc., a PCI DSS Level 1 certified payment processor. SafeWize does not store, process, or transmit full credit card numbers on our servers.
When you enter payment details on our checkout page, that information is transmitted directly to Stripe using their secure JavaScript library. Stripe returns a tokenised reference that we store to manage your subscription. Your full card details are never accessible to SafeWize staff.
For information about how Stripe handles your payment data, please refer to Stripe's Privacy Policy.
SafeWize provides an AI Compliance Coach powered by OpenAI's language model technology. When you interact with the AI Compliance Coach, your queries and conversation history are transmitted to OpenAI's API for processing.
Please be aware of the following when using the AI Compliance Coach:
The text of your queries and the conversation context are sent to OpenAI's servers for processing. Do not include sensitive personal information about employees (such as names, health information, or identifying details) in your AI coach queries.
OpenAI processes your queries in accordance with their Privacy Policy. SafeWize uses the OpenAI API under terms that restrict OpenAI from using API inputs to train their models by default.
The AI Compliance Coach provides general compliance guidance and educational information only. It does not constitute legal advice. For specific legal matters, you should consult a qualified Australian workplace health and safety lawyer or HR professional.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to your personal information:
| Right | Description |
|---|---|
| Access | You have the right to request access to the personal information we hold about you. We will respond to access requests within 30 days. |
| Correction | If you believe personal information we hold is inaccurate, out of date, incomplete, irrelevant, or misleading, you may request that we correct it. |
| Deletion | You may request deletion of your personal information. We will comply unless we are required to retain the information by law or for legitimate business purposes (e.g., tax records). |
| Opt-Out of Marketing | You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. |
| Complaints | You have the right to make a complaint about our handling of your personal information. See Section 12 for details. |
To exercise any of these rights, please contact us at privacy@safewize.com.au. We may need to verify your identity before processing your request.
Our website uses cookies and similar technologies to improve your browsing experience and analyse how our platform is used. Cookies are small text files stored on your device.
We use the following types of cookies:
Essential cookies are necessary for the platform to function (e.g., maintaining your session and login state). These cannot be disabled without affecting platform functionality.
Analytics cookies help us understand how visitors interact with our website, which pages are most visited, and where users encounter difficulties. We use this data in aggregate, anonymised form to improve our service.
You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features of the SafeWize platform.
We retain personal information for as long as necessary to provide our services and comply with our legal obligations. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & profile data | Duration of subscription + 7 years | Service delivery, legal obligations |
| Billing & transaction records | 7 years from transaction date | Australian tax law (ATO requirements) |
| Usage logs | 12 months | Security monitoring, service improvement |
| AI coach conversation history | Session duration only (not persisted server-side) | Privacy by design |
| Support communications | 3 years from last contact | Service continuity |
Upon account cancellation or expiry, we will de-identify or delete your personal information within 90 days, except where retention is required by law.
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how we have handled your personal information, please contact our Privacy Officer:
Email: privacy@safewize.com.au
Website: safewize.com.au
Postal: SafeWize Pty Ltd, Australia
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify active subscribers of material changes via email. The current version of this policy is always available at safewize.com.au/privacy.html.
Our team is committed to transparency and protecting your data. If you have any questions or concerns, we're here to help.
Contact Our Privacy Officer