Privacy policy

Who we are

Pointshift (ABN 87 688 902 392) is a conversion consultancy based in Australia. In this policy “Pointshift”, “we”, “us” and “our” refer to Pointshift, and “you” refers to anyone whose personal information we handle.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) as they apply to us.

What we collect

Information you give us

• When you book a call: your name, email address, and your answers to booking questions, such as your company website, your role, what prompted the conversation and an indicative revenue range.
• When you contact us: anything you include in an email or message.
• During calls and engagements: business contact details and information about your business that you share with us.

Information collected automatically

• Website usage: pages viewed, time on page, clicks and scrolling, referring site, approximate location (country or city level), device, browser and operating system. This comes through cookies and similar technologies (see Cookies and analytics).

Client data in engagements

In paid engagements we may access a client’s analytics, store platform, survey responses or customer interview recordings. That access, and any personal information about the client’s own customers, is governed by the engagement agreement and handled only for that engagement. We ask clients to give us the minimum access the work needs and to share de-identified data where practical.

We do not intentionally collect sensitive information (such as health, racial or political information). Please don’t send it to us.

You can deal with us anonymously or under a pseudonym where that’s practical, for example when browsing the website. To book a call or work with us, we need your name and contact details.

How we use it

• To respond to enquiries, schedule and hold calls, and prepare proposals.
• To deliver engagements we’ve agreed with you.
• To understand how the website is used and improve it.
• To run our business, including invoicing, record keeping and meeting legal obligations.

We don’t sell personal information, and we don’t use it for purposes unrelated to the reason we collected it unless you agree or the law permits it.

Cookies and analytics

The website uses the following services. Each sets cookies or similar identifiers in your browser.

You can block or delete cookies in your browser settings, and the site will still work. Google provides a browser add-on to opt out of Google Analytics. Disabling cookies may affect the booking calendar.

Who we share it with

We share personal information only with service providers who help us run the business, and only as far as they need it, including:

• scheduling (Calendly) and video-call software;
• email, file storage and productivity software;
• analytics providers (Google and Microsoft);
• our accountant and professional advisers.

If Pointshift grows to include team members or contractors, they will access personal information only as needed for their work and under confidentiality obligations. We may also disclose information where the law requires it.

Overseas disclosure

Several of these providers store or process data outside Australia, most commonly in the United States, and may use data centres in other countries. We take reasonable steps, such as choosing established providers with published privacy and security commitments, so that your information is handled consistently with the APPs.

Storage and security

We store personal information in reputable cloud services protected by access controls and multi-factor authentication where available. We keep information only for as long as we need it for the purposes above or to meet legal and tax record-keeping obligations, then delete or de-identify it.

No system is completely secure. If a data breach is likely to cause you serious harm, we will notify you and, where required, the Office of the Australian Information Commissioner.

Access and correction

You can ask to see the personal information we hold about you, or ask us to correct or delete it. Email us and we’ll respond within 30 days. We may need to confirm your identity first. If we can’t meet a request, for example because the law requires us to keep a record, we’ll explain why.

Marketing

We won’t add you to a mailing list without your consent. If you agree to receive updates from us, every message will include an easy way to unsubscribe.

Questions and complaints

If you have a question or concern about how we’ve handled your personal information, please contact us first. We’ll acknowledge your complaint promptly and aim to resolve it within 30 days.

If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If you are in the European Union or the United Kingdom, you may have additional rights under local data protection law, including the right to object to processing and to complain to your local data protection authority.

Changes to this policy

We may update this policy as our services or the law change. The latest version will always be on this page, with the date it was last updated.