Privacy policy
Last updated 12 August 2026
Reflectal Pty Ltd (ACN 673 183 205) ("Reflectal", "we", "us" or "our") respects your privacy and is committed to protecting your personal information. This policy explains how we handle personal information collected through our website at reflectal.au, including when you make an enquiry or subscribe to our updates.
It is written to meet our obligations under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where it applies to people in the European Union, the European Economic Area and the United Kingdom, the General Data Protection Regulation (GDPR).
What this policy covers
This policy applies only to the Reflectal public website at reflectal.au and the sandbox demonstration environment at inside.reflectal.au, and to your dealings with us as a visitor, enquirer, subscriber or invited sandbox reviewer. It does not apply to the Reflectal platform at reflectal.io, which has its own privacy policy: if you use the platform as a customer or participant, the handling of information within that service is governed by the separate agreement and privacy arrangement provided to you at that time.
The personal information we collect
Information you provide to us
When you complete our enquiry form we collect your name and work email address, and, if you choose to provide them, your phone number and organisation, together with the content of your message. When you subscribe to our mailing list we collect your email address. If you contact us directly, we collect the information you include in that correspondence.
Information collected automatically
We use a privacy-first, cookieless analytics tool to understand how the website is used. It records aggregate, technical information such as the pages visited, the approximate country a visit comes from, the type of device and browser, and the website that referred you. It does not use cookies, does not track you across other websites, and is not used to identify you individually. Our hosting provider also keeps standard server logs for security and reliability.
Cookies
Our website does not use tracking or advertising cookies, so you will not see a cookie consent banner. We store a single setting in your own browser to remember your choice of the accessibility view. It stays on your device, is not sent to us, and is not used to track you.
Why we use your information and our legal basis
We use personal information to:
- respond to your enquiry and provide the information you have asked for;
- send you our newsletter and updates, where you have asked to receive them;
- operate, maintain, secure and improve our website; and
- meet our legal and regulatory obligations.
For people protected by the GDPR, our legal bases are: your consent, for the newsletter, which you may withdraw at any time; our legitimate interests in responding to enquiries and running our website safely; and compliance with our legal obligations. Where you contact us about becoming a customer, we may also process your information to take steps at your request before entering into an arrangement.
Direct marketing
We only send marketing messages, such as our newsletter, to people who have asked to receive them. Every marketing email includes an easy way to unsubscribe, and we act on opt-out requests promptly. You can also ask us to stop at any time by emailing hello@reflectal.io. We handle marketing in line with the Australian Privacy Principles and the Spam Act 2003 (Cth).
When we share your information
We do not sell your personal information. We share it only with:
- our service providers, including the providers who host our website, deliver our emails and provide our website analytics, who process information on our behalf and only as instructed by us; and
- others where we are required or permitted by law, for example to comply with a legal obligation or to protect our rights.
Overseas disclosure and international transfers
The personal information you provide to us through the website, such as your enquiry or subscription details, is stored in Australia, in our database hosted in Sydney. Some of our other service providers operate globally, so limited technical information may be processed outside Australia: in particular, our website analytics provider may process non-identifying technical information overseas, including in the United States. If we later add an email delivery provider to handle enquiries, it may be located overseas, and we will update this policy to identify the relevant country. Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with this policy and the Australian Privacy Principles. Where the GDPR applies, any transfer of personal information outside the European Economic Area or the United Kingdom is made under an appropriate safeguard, such as the European Commission's standard contractual clauses.
How we protect your information
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include organisational measures and technical measures appropriate to the information we hold. No method of transmission or storage is completely secure, but we work to protect your information and to review our safeguards.
How long we keep your information
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires. We keep enquiry records for as long as needed to deal with your enquiry and our ongoing relationship, and we keep subscriber details until you unsubscribe or ask us to remove them.
Your rights and choices
If you are in Australia
You may ask us for access to the personal information we hold about you, and ask us to correct it if it is wrong. We will respond within a reasonable time, and there is usually no charge to make a request.
If you are protected by the GDPR
You have the right to access your personal information and to have it corrected or erased; to restrict or object to how we use it; to receive a copy in a portable form; and, where we rely on your consent, to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of anything we did before you did so.
To make any request, email us at hello@reflectal.io.
Complaints
If you have a concern about how we have handled your personal information, please contact us first at hello@reflectal.io so we can try to resolve it. If you are in Australia and are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au. If you are protected by the GDPR, you may also lodge a complaint with your local data protection supervisory authority.
Children
Our website is intended for a business audience and is not directed at children. We do not knowingly collect personal information from children.
Other websites
Our website may link to other websites that we do not control. We are not responsible for the privacy practices or content of those websites, and we encourage you to read their privacy policies.
Changes to this policy
We may update this policy from time to time. The current version will always be available on this page, with the date it was last updated shown at the top. We will make significant changes clear.
How to contact us
Reflectal Pty Ltd (ACN 673 183 205)
Email: hello@reflectal.io
Website: reflectal.au