Privacy Policy
1. Introduction
Openly Inclusive ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform.
We comply with:
- The Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs)
- The Disability Discrimination Act 1992 (Cth)
- General Data Protection Regulation (GDPR) where applicable
- Relevant state and territory privacy legislation
2. Information We Collect
2.1 Personal Information
We collect personal information that you provide directly to us:
- Account Information: Name, email address, password, user type (venue operator, accessibility consultant, administrator)
- Profile Information: Optional location, bio
- Venue Information: For venue operators and consultants — business name, address, contact details, venue photos, videos, and documents uploaded for assessment
- Communication Data: Messages sent through our platform, support requests
2.2 Automatically Collected Information
- Usage Data: Pages viewed, features used, time spent, search queries
- Device Information: IP address, browser type, device type, operating system
- Location Data: Approximate location based on IP address (with your consent, precise location for map features)
- Cookies and Tracking: Session data, preferences, analytics
2.3 Sensitive Information
Openly Inclusive does not collect health information, disability information, or information about any user's specific accessibility needs. We do not maintain a “disability profile” for any user. The platform serves venue operators and accessibility consultants, who provide standard business information when they sign up — name, email address, organisation name, and (for consultants) ABN/ACN and company contact details. This is “personal information” under the Privacy Act 1988 (Cth) and is handled under the Australian Privacy Principles. It is not “sensitive information” as defined in the Act.
3. How We Use Your Information
3.1 Primary Purposes
- Service Delivery: Provide and maintain our platform and process inclusivity assessments
- Venue Assessments: Process inclusivity assessments for venue operators and consultants
3.2 Secondary Purposes
- Communication: Send service updates, assessment results, community notifications
- Improvement: Analyse usage patterns, improve features, develop new services
- Safety and Security: Detect fraud, prevent abuse, protect user safety
- Legal Compliance: Meet regulatory requirements, respond to legal requests
- Research: Aggregate, anonymised data for accessibility research and advocacy
4. Information Sharing and Disclosure
4.1 Public Information
The following information is publicly visible:
- Venue names, addresses, and accessibility ratings (only if the venue operator chooses to publish their assessment)
- Aggregated, anonymised accessibility statistics
4.2 Private Information
We DO NOT share your private information except:
- With Your Consent: When you explicitly authorise sharing
- Service Providers: Trusted partners who help operate our platform (hosting, analytics, email services) under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
- Protection of Rights: To protect our rights, property, or safety, or that of users or the public
4.3 Detailed Assessment Reports
Venue assessment reports remain private to the operator or consultant who commissioned them. Openly Inclusive does not surface assessment results to a public-facing audience.
5. Data Security
5.1 Security Measures
We implement industry-standard security measures:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure authentication and password hashing
- Regular security audits and vulnerability assessments
- Access controls and staff training
- Secure backup and disaster recovery procedures
- Automated detection and blocking of unauthorized access attempts, including scraping, bots, and abnormal request patterns
- Rate limiting and monitoring for Terms of Service violations
5.2 Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain community content value
You can request deletion of your personal information at any time, subject to legal requirements and community content preservation.
6. Your Privacy Rights
6.1 Access and Correction (APP 12 & 13)
You have the right to:
- Access your personal information we hold
- Request correction of inaccurate or incomplete information
- Receive a copy of your data in a portable format
6.2 Deletion and Restriction
- Request deletion of your personal information (subject to legal obligations)
- Restrict processing of your information in certain circumstances
- Object to processing based on legitimate interests
6.3 Consent Withdrawal
- Withdraw consent for optional data collection at any time
- Opt-out of marketing communications
- Disable cookies through browser settings
- Delete your account through account settings
6.4 Exercising Your Rights
To exercise any of these rights, contact us at [email protected] or through your account settings. We will respond within 30 days.
7. Cookies and Tracking
7.1 Cookie Types
- Essential Cookies: Required for platform functionality
- Preference Cookies: Remember your settings and choices
- Analytics Cookies: Help us understand how you use the platform
- Marketing Cookies: Used for targeted advertising (optional)
7.2 Managing Cookies
You can control cookies through:
- Browser settings (block, delete, or be notified about cookies)
- Our cookie preference centre
- Opt-out of analytics tracking
8. Children's Privacy
Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries outside Australia. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions recognising equivalent privacy protection
- Your explicit consent where required
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Email notification to your registered address
- Prominent notice on our platform
- Updated "Last Updated" date at the top of this policy
Continued use of the platform after changes constitutes acceptance of the updated policy.
11. Complaints and Disputes
11.1 Internal Complaints
If you have concerns about how we handle your personal information:
- Contact our Privacy Officer at [email protected]
- We will acknowledge your complaint within 7 days
- We will investigate and respond within 30 days
- If you're not satisfied, you can escalate to external regulators
11.2 External Complaints
You can lodge a complaint with:
- Office of the Australian Information Commissioner (OAIC)
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Email: [email protected]
12. Accessibility of This Policy
We are committed to making this Privacy Policy accessible to everyone. If you need this policy in an alternative format (large print, audio, easy read, or other accessible format), please contact us at [email protected].
13. Contact Information
For questions, concerns, or requests about this Privacy Policy or our privacy practices, contact us:
- Privacy Officer: [email protected]
- General Support: [email protected]
- Postal Address: Openly Inclusive, Queensland, Australia
- Website: www.openlyinclusive.org
Last Updated: January 2026
Policy Version: 1.0
By using Openly Inclusive, you acknowledge that you have read, understood, and agree to this Privacy Policy.