Privacy Policy

Your privacy matters to us. This policy explains how we handle your information.

Last updated: 26 December 2025

Overview

Business Review 360 ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our employee innovation platform.

We operate under Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Information We Collect

We collect information that you provide directly to us when using our service:

  • Account Information: Name, email address, and password when you create an account
  • Organisation Information: Organisation name, subdomain, and branding preferences
  • Content: Ideas, comments, and votes you submit through the platform
  • Usage Data: Information about how you interact with our service, including login times and feature usage

Information We Do Not Collect

We do not collect sensitive information such as financial details, health information, or government identifiers unless specifically required for billing purposes.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process your account registration and manage your subscription
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyse trends and usage
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

Data Sharing

We do not sell your personal information. We do not share, rent, or trade your personal data with third parties for their marketing purposes.

We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorise us to share your information
  • Service providers: With third-party vendors who assist us in operating our platform (such as payment processors and hosting providers), subject to confidentiality agreements
  • Legal requirements: When required by law, court order, or governmental authority
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Row-level security ensuring complete data isolation between organisations
  • Regular security assessments and monitoring
  • Access controls limiting data access to authorised personnel

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you wish to cancel your account or request that we delete your information, please contact us.

Your Rights

Under Australian privacy law, you have the right to:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

Data Deletion Requests

We honour all data deletion requests. If you would like us to delete your personal information, please contact us at info@businessreview360.au. We will process your request within 30 days and confirm once your data has been permanently removed from our systems.

Cookies and Tracking

We use essential cookies required for the operation of our platform, such as authentication tokens. We do not use third-party advertising or tracking cookies.

International Data Transfers

Our services are hosted in Australia. If you access our services from outside Australia, please be aware that your information may be transferred to, stored, and processed in Australia where our servers are located.

Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: