This policy explains how we handle personal information when you visit The Governance Practice, Plain Governance, Plain Strategy, and Plain Risk websites, use their browser-based tools, or contact us through these websites.
Website visits
Our hosting and security providers process technical information, including IP addresses, page addresses, and request details, to deliver and protect the websites. Security cookies may also be used.
Plain Risk search terms can appear in page addresses and may be recorded in technical logs and browser history. Please keep confidential information out of site searches.
We do not currently use optional usage analytics on these websites. If this changes, we will update this policy before introducing them and limit them to action counts. We will not use analytics to collect tool entries, case details, reports, or session recordings.
Browser-based tools
The Plain Governance, Plain Strategy, and Plain Risk tools process your entries, locally opened files, and generated outputs in your browser. We do not receive or store this content through the tools.
Plain Governance temporarily saves work in your browser tab’s session storage. Plain Strategy and Plain Risk hold working entries in browser memory. Work is not saved to an online account. Use the available download or print options to keep a copy.
To remove temporary work, use the tool’s reset or clear control where available and clear the site’s stored data in your browser settings. Your browser may restore work when reopening a session. Files you download or print remain under your control.
Contact enquiries
If you email us, we receive your email address and any information you include. We use this information to respond and keep a record of the enquiry. Please send only what is needed for your enquiry.
Using a tool does not send us its contents. If you email us a work file or report, it becomes part of your correspondence with us.
Providers and storage
Our websites use OpenAI Sites and Cloudflare infrastructure. Website enquiries are handled through Microsoft 365. These providers process information to host and protect the websites or deliver and store correspondence.
Providers may process information outside Australia. Microsoft lists remote-access locations worldwide, including India, Ireland, Singapore, the United Kingdom, and the United States. Cloudflare identifies primary storage in the United States and European Economic Area, with global access and transfers. Locations depend on the service.
Further information is available in Microsoft’s remote-access country list and Cloudflare’s privacy policy.
We retain enquiry correspondence for as long as needed to deal with the enquiry and meet applicable legal obligations. Technical records are retained under our providers’ arrangements.
Access, correction, and complaints
Email julien@thegovernancepractice.com.au to request access to or correction of personal information we hold about you, or to raise a privacy concern.
We may need to verify your identity. We will respond within a reasonable time and explain any restriction on access or correction.
For a complaint, please describe what happened and the outcome you seek. We will review the matter, respond, and keep you informed if more time is needed. If it remains unresolved, the Office of the Australian Information Commissioner can advise whether it can consider your complaint.
Changes
We will update this page when our website privacy practices change.