Privacy Policy

Information We Collect

We collect different types of information depending on how you interact with our platform. Being transparent about this helps you make informed decisions about using our services.

Personal Information You Provide

When you sign up for elynothrae or use our forecasting tools, you share information directly with us:

• Name, email address, and contact details when you create an account
• Financial information you input into our budget forecasting tools
• Business details if you're using our services for commercial purposes
• Payment information when you subscribe to paid features (processed securely through third-party payment processors)
• Messages you send through our contact forms or support channels

Information We Collect Automatically

Like most online services, we gather some data automatically when you visit our site:

• Device information—browser type, operating system, device identifiers
• Usage data showing how you interact with our platform and which features you use
• Log data including IP addresses, access times, and pages viewed
• Cookie data that helps us remember your preferences and improve your experience

How We Use Your Information

Your data helps us provide and improve our budget forecasting services. Here's what we do with it:

We never sell your personal information to third parties. That's not what we're about. Your financial data stays private and is used solely to provide the services you've signed up for.

Data Sharing and Disclosure

We share your information only when necessary and always with appropriate safeguards in place.

Service Providers

We work with trusted third-party companies that help us operate our platform. These include cloud hosting providers, payment processors, and analytics services. Each provider is carefully selected and contractually obligated to protect your data.

Legal Requirements

Sometimes we're required by Australian law to disclose information. This might happen in response to court orders, government investigations, or to protect someone's safety. We'll always notify you unless legally prohibited from doing so.

Business Transfers

If elynothrae is acquired or merged with another company, your information would transfer as part of that transaction. We'd notify you beforehand and explain any changes to how your data is handled.

Your Privacy Rights

Under Australian privacy law (specifically the Privacy Act 1988 and Australian Privacy Principles), you have several rights regarding your personal information:

• Access: You can request a copy of all personal information we hold about you. We'll provide this within 30 days.
• Correction: If any of your information is inaccurate or outdated, you can ask us to correct it.
• Deletion: You can request that we delete your account and associated data. Some information may need to be retained for legal compliance.
• Data Portability: You can request your data in a structured, commonly used format to transfer elsewhere.
• Withdrawal of Consent: Where we rely on your consent to process data, you can withdraw that consent at any time.
• Complaint: If you're concerned about how we've handled your information, you can lodge a complaint with us or with the Office of the Australian Information Commissioner.

To exercise any of these rights, contact us at info@elynothrae.com. We'll respond promptly and guide you through the process.

Data Security Measures

Protecting your financial information is something we take seriously. Here's how we do it:

Technical Safeguards

• End-to-end encryption for data transmission using industry-standard TLS protocols
• Encrypted storage of sensitive financial data at rest
• Regular security audits and vulnerability assessments
• Multi-factor authentication options for account access
• Automated backup systems with secure off-site storage

Operational Safeguards

• Limited employee access to personal data based on role requirements
• Comprehensive staff training on data protection and privacy practices
• Incident response procedures for potential data breaches
• Regular review and updates of our security protocols

While we implement robust security measures, no system is completely immune to threats. We stay vigilant and continuously work to strengthen our defenses against evolving risks.

Data Retention

We keep your information only as long as needed for legitimate business purposes or legal requirements.

When we delete data, we do so securely and permanently. Backup copies are removed during our regular backup rotation cycles, typically within 90 days.

Cookies and Tracking Technologies

We use cookies and similar technologies to make our platform work smoothly and understand how people use it.

Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality like logging in and accessing your forecasts
• Performance Cookies: Help us understand which features are most useful and identify technical issues
• Functionality Cookies: Remember your preferences and settings to personalize your experience
• Analytics Cookies: Provide insights into how visitors use our site so we can improve it

You can control cookies through your browser settings. Keep in mind that disabling certain cookies might affect how well our platform works for you.

Third-Party Services

We integrate with several third-party services to provide complete functionality. These partners have their own privacy policies:

• Payment processors handle transaction data according to PCI DSS standards
• Cloud hosting providers store data in Australian data centers with strict security protocols
• Analytics services help us understand platform usage while respecting user privacy
• Email service providers manage our communications infrastructure

We carefully vet all third-party services and ensure they meet Australian privacy standards. However, we're not responsible for their privacy practices once data leaves our direct control.

International Data Transfers

Your data is primarily stored and processed within Australia. In some cases, service providers may process data in other countries with adequate privacy protections.

When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by Australian authorities
• Verification that receiving countries have adequate privacy protections
• Additional security measures for sensitive financial data

If you have concerns about international data transfers, contact us to discuss your specific situation.

Children's Privacy

elynothrae is designed for adults managing personal or business finances. We don't knowingly collect information from children under 18.

If we discover that we've inadvertently collected data from someone under 18, we'll delete it promptly. Parents or guardians who believe their child has provided information to us should contact us immediately.

Changes to This Policy

We update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you through:

• Email notification to your registered address
• Prominent notice on our platform
• Updated "Last Modified" date at the top of this policy

Continued use of our services after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account and stop using our services.

Complaints and Disputes

If you're unhappy with how we've handled your personal information, please let us know. We're committed to resolving issues fairly and quickly.

Our complaint process:

• Submit your complaint to info@elynothrae.com with detailed information about your concern
• We'll acknowledge receipt within 2 business days
• Our privacy team will investigate and respond within 30 days
• If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner

The OAIC can be reached at enquiries@oaic.gov.au or 1300 363 992. They provide independent oversight and can investigate privacy complaints.