Howhandles your information

1.
Who we are and what this policy covers
________, ABN ________ (we, us, our) respects your privacy. This policy explains how we collect, use, store and disclose personal information, and how you can get access to it or have it corrected. We handle personal in
2.
What we collect
We only collect personal information that we reasonably need to run our business. Depending on your dealings with us, that may include your name, your business name, your postal and email addresses, your phone number, yo
3.
How we collect it
We usually collect personal information directly from you, when you fill in a form on our website, place an order, email or call us, sign a document with us, or pay us. Sometimes we collect it from someone else, for exa
4.
Why we use it
We use personal information to do the things you would expect. That is to quote, take and fulfil your order or engagement, to invoice you and chase payment, to answer your questions and handle complaints, to keep our rec
5.
Marketing
If you have dealt with us or asked to hear from us, we may send you emails or text messages about our work, offers and news. Every message includes an unsubscribe link or a reply to stop instruction, and we act on it pro

Not buying today? Take the free checklist.

One page, every document a business like yours ends up needing.

Privacy Policy

$49 one-off, GST included

The privacy policy your website needs, written to the Privacy Act 1988 and the Australian Privacy Principles. It says what you collect, why, who you give it to and how someone gets it back or corrected. Plain English, no clauses about California.

$49 when checkout opens. Join the availability list.

Use it when

You have a website, a booking form or a mailing list and no privacy policy
You collect names, emails, phone numbers, photos or payment details
A client, an insurer or a platform has asked to see your privacy policy
Your current policy was copied from overseas and mentions the wrong laws

Not for

Your terms of sale, and it is not a data breach response plan.

What it covers

1.
Who we are and what this policy covers
Tells people whose policy this is and which law you are following, which Australian Privacy Principle 1 requires you to do.
2.
What we collect
Lists what you actually collect so nobody is surprised, and flags sensitive information for extra consent.
3.
How we collect it
Being upfront about third party sources is required, and it is the part most copied policies leave out.
4.
Why we use it
Sticking to the purpose you collected it for is the rule under Australian Privacy Principle 6, and saying so builds trust.
5.
Marketing
Gives everyone a real way to stop your marketing, which the Spam Act requires and which stops fines.

Show all 14 clauses

6.
Who we share it with
Naming the kinds of providers you use is honest and stops a nasty surprise if someone asks where their data sits.
7.
Sending information overseas
If your software stores data overseas you have to say so, and most small businesses are in that position without realising.
8.
Our website, cookies and analytics
Explains cookies and tracking in words a normal person understands instead of two pages of legal filler.
9.
Keeping it secure and how long we keep it
Sets a real retention period and commits you to the notifiable breach rules, which apply whether your policy mentions them or not.
10.
Getting access and asking for a correction
Australian Privacy Principles 12 and 13 give people these rights, so give them one address and a real timeframe.
11.
Complaints and disputes
Talk to you first, then mediation, then court or the OAIC, and nothing blocks the regulator.
12.
When you stop dealing with us
Leaving does not mean your records vanish, and this says plainly what happens to them.
13.
Governing law
Fixes whose law applies, which matters if your site is read from anywhere.
14.
This policy in full
One dated version on your site, so nobody can wave an old PDF at you.

You will be asked for

Your business name, Your ABN, Your state or territory, What you call the people whose information you hold, Your website address, Who handles privacy questions, Privacy contact email, Your postal address, Do you collect health or other sensitive information, Do you send marketing emails or texts, Do you use website analytics or advertising pixels, Countries your software providers are in, How many years you keep records, Date this policy takes effect. Takes about five minutes.

Written for: Just starting, Service business, Online store, Consultant or agency, Hospitality and retail, Trades, First hire. Version 1, updated 2026-09-18. You get PDF and Word, and any update to this document for 12 months.

Legitkit provides document templates and general information, not legal advice. Legitkit is not a law firm and does not employ lawyers. Documents are written for the general run of Australian small businesses and may not suit your situation. For advice on your situation, see a lawyer.

Businesses like yours also needed

$69
Website Terms and Conditions of Sale
The terms that sit on your website and govern every order you take. They cover orders, prices, delivery, returns and refunds the way the Australian Consumer Law actually requires. No copied American refund policy that a regulator can fine you for.
$79
Service Agreement
The agreement you send a client before you start work. It sets the price, the payment terms, what is in scope and what happens if either side walks away. Written for Australian law and the 2023 unfair contract terms rules.