Privacy Policy
This Privacy Policy explains how Growwipeeco.ddd ("we", "us", "our") collect, hold, use, and disclose personal information when you visit growwipeeco.world or contact us. We handle personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act"), the Australian Privacy Principles (APPs) in Schedule 1 of the Privacy Act, and the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act.
Where you access our website from the European Economic Area (EEA) or United Kingdom, we also process personal data in line with the General Data Protection Regulation (GDPR) (EU) 2016/679 and UK GDPR where applicable. This policy should be read with our Cookie Policy and Terms of Use.
1. Who We Are (APP 1 — Open and Transparent Management)
Entity name: Growwipeeco.ddd
Physical address: Alexandra Parade, Alexandra Headland QLD 4572, Australia
Email: infocenter@growwipeeco.world
Phone: +61 424 288 106
Privacy enquiries: Use the contact details above with the subject line "Privacy enquiry".
We are committed to managing personal information openly and transparently. This policy sets out our practices so you can make informed choices about sharing your information with us.
2. Scope and Applicability of the Privacy Act
The Privacy Act generally applies to organisations with an annual turnover of more than AUD $3 million, and to certain smaller organisations including those that trade in personal information or provide a health service. Regardless of whether the Privacy Act legally applies to us, we adopt the APPs as our standard for handling personal information and aim to meet the same transparency and accountability expectations.
Our website is operated from Queensland, Australia. Australian law is the primary framework for this policy.
3. What Personal Information We Collect (APP 3 & APP 5)
"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined in section 6 of the Privacy Act.
We may collect the following types of personal information:
- Identity and contact details: Name and email address when you submit our contact form or email us directly.
- Communication content: The message you send us, including any optional details about your interest in our screen-quitting programs.
- Consent records: Confirmation that you agreed to our Privacy Policy when submitting the contact form, and whether you separately opted in to occasional program updates by email (optional checkbox; unchecked by default).
- Technical information: IP address, browser type, device type, operating system, referring URL, pages viewed, and approximate visit duration — collected through cookies, server logs, and similar technologies where permitted (see our Cookie Policy).
- Cookie preferences: Your choices regarding analytics and marketing cookies, stored in your browser's local storage.
- Telephone records: If you call us, we may keep a record of your number and the substance of your enquiry.
Sensitive information: We do not actively seek to collect sensitive information as defined in the Privacy Act (including health information, racial or ethnic origin, political opinions, or biometric data). Please do not include medical or other sensitive details in contact form messages. If you voluntarily provide sensitive information, we will only use or disclose it with your consent or where permitted by law, and we may delete it if it is not necessary for our functions.
4. How We Collect Personal Information
We collect personal information:
- Directly from you — when you complete our contact form, email us, call us, register interest in a program event, or communicate with us in writing.
- Automatically — when you browse our website, through cookies and server logs (subject to your cookie preferences for non-essential tracking).
- From third parties — only where reasonably necessary, such as hosting providers generating server logs or analytics providers (with your consent for analytics/marketing cookies).
If we receive unsolicited personal information that we did not solicit and is not reasonably necessary for our functions, we will destroy or de-identify it as soon as practicable, in accordance with APP 4.
5. Why We Collect, Use, and Disclose Personal Information (APP 6)
We collect, hold, use, and disclose personal information only for purposes that are reasonably necessary for, or directly related to, our functions of providing information about programs for quitting screens before sleep and responding to enquiries.
Specific purposes include:
- Responding to your contact form submissions, emails, and phone calls.
- Providing information about our screen-off program, no-screen activities, micro-programs, ritual quiz, and event registrations.
- Operating, maintaining, securing, and improving our website.
- Understanding website usage through analytics (only with your consent for analytics cookies).
- Measuring outreach and delivering relevant content through marketing technologies (only with your consent for marketing cookies).
- Complying with legal obligations, responding to lawful requests from courts or regulators, and establishing or defending legal claims.
- Managing privacy and data breach notifications under the NDB scheme.
We will not use or disclose your personal information for a secondary purpose unless you consent, you would reasonably expect the use or disclosure, or an exception under the Privacy Act applies (such as required or authorised by law).
We may disclose personal information to:
- Service providers who assist with website hosting, email delivery, IT support, and analytics — only to the extent needed to perform their services and subject to confidentiality obligations.
- Professional advisers (such as lawyers or accountants) where reasonably necessary.
- Government agencies, regulators, or law enforcement when required or authorised by Australian law.
We do not sell personal information.
6. Direct Marketing (APP 7 & Spam Act 2003)
We may send you information about our screen-quitting programs by email only if you have consented or if you would reasonably expect to receive such communications based on your enquiry, and only where permitted under the Spam Act 2003 (Cth).
Every commercial electronic message we send will:
- Clearly identify Growwipeeco.ddd as the sender.
- Include our contact details.
- Contain a functional unsubscribe facility or instructions to opt out.
You may opt out of marketing emails at any time by using the unsubscribe link or contacting us. We will honour opt-out requests within a reasonable period, normally within 5 business days. Withdrawal of consent for marketing does not affect our ability to send transactional or administrative messages related to your enquiry.
Marketing cookies and tracking are used only with your explicit consent via our cookie banner. See our Cookie Policy.
7. Cross-Border Disclosure of Personal Information (APP 8)
Some of our service providers (such as website hosting, email, or analytics platforms) may store or process personal information outside Australia, including in the United States, European Union, or other countries.
Before disclosing personal information overseas, we take reasonable steps under APP 8 to ensure the recipient does not breach the APPs in relation to that information. These steps may include using providers that commit to privacy standards comparable to the APPs, and including contractual clauses requiring confidentiality, security, and lawful processing. For EEA/UK data, we use appropriate safeguards such as Standard Contractual Clauses where required under GDPR.
By providing personal information to us, you acknowledge that your information may be disclosed to overseas recipients in the circumstances described above. You may contact us for more information about the countries in which recipients are likely to be located.
8. Data Quality, Retention, and Security (APP 10 & APP 11)
Quality: We take reasonable steps to ensure personal information we collect is accurate, up to date, and complete. Please notify us if your contact details change or if information we hold is incorrect.
Retention: We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law:
- Contact form and correspondence records: up to 24 months from last contact, unless a longer period is required for legal or regulatory reasons.
- Analytics data: up to 26 months from collection, or sooner if you withdraw consent.
- Cookie consent records: up to 12 months, after which we will seek renewed consent.
- Server and security logs: up to 90 days, unless needed for investigating an incident.
When personal information is no longer needed, we take reasonable steps to destroy or de-identify it securely.
Security: We implement reasonable technical and organisational safeguards under APP 11, including HTTPS encryption, access controls, secure hosting, and limiting access to personal information to those who need it. No system is completely secure; we work to minimise risks but cannot eliminate them entirely.
9. Notifiable Data Breaches (NDB Scheme)
If a data breach is likely to result in serious harm to affected individuals, we will comply with the NDB scheme under Part IIIC of the Privacy Act by preparing a statement about the breach, notifying the Office of the Australian Information Commissioner (OAIC) as soon as practicable, and notifying affected individuals with recommended steps to limit harm. If you believe your personal information held by us has been compromised, contact us immediately.
10. Access to and Correction of Personal Information (APP 12 & APP 13)
You have the right to request access to personal information we hold about you, subject to exceptions under the Privacy Act. You may also request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. If we disagree with a correction request, we will provide written reasons and note your request on our records where appropriate.
How to request access or correction: Email infocenter@growwipeeco.world with the subject "Privacy access request" or "Privacy correction request". We may need to verify your identity before releasing information.
We will respond within a reasonable period, and in any event within 30 days for most requests. We will not charge a fee for making a request unless the Privacy Act permits a charge for providing access (we will notify you in advance if a charge applies).
11. Anonymity and Pseudonymity (APP 2)
Where lawful and practicable, you may interact with us anonymously or using a pseudonym — for example, by browsing our website without submitting the contact form. However, if you contact us or register for an event, we may need your name and contact details to respond. We will inform you if anonymity is not practicable in a given situation.
12. Cookies and Online Tracking
Our use of cookies and similar technologies is described in our Cookie Policy. Where cookies collect personal information, the APPs apply. Non-essential analytics and marketing cookies are activated only with your consent through our cookie banner.
13. Children's Privacy
Our website is intended for a general audience. We do not knowingly collect personal information from children under 15 without parental or guardian consent. If you are a parent or guardian and believe your child has provided personal information to us, please contact us and we will take reasonable steps to delete that information.
14. Complaints and Regulatory Contacts
If you have a complaint about how we handle your personal information, contact us first so we can try to resolve it. We will acknowledge your complaint within 7 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may lodge a complaint with:
- Office of the Australian Information Commissioner (OAIC) — privacy matters under the Privacy Act.
Website: oaic.gov.au/privacy/privacy-complaints | Phone: 1300 363 992 - Australian Communications and Media Authority (ACMA) — spam or commercial electronic messages under the Spam Act 2003.
Website: acma.gov.au/report-spam
EEA/UK residents may also lodge a complaint with their local data protection supervisory authority.
15. International Visitors and GDPR
If you are located in the EEA or UK, you may have additional rights under GDPR including data portability, restriction of processing, and the right to object to processing based on legitimate interests. Legal bases for processing include consent (Art. 6(1)(a)), contractual necessity (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), and legitimate interests (Art. 6(1)(f)) where balanced against your rights. Contact us to exercise GDPR rights.
16. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be brought to your attention where required by law.
17. Contact Us
Email: infocenter@growwipeeco.world
Address: Alexandra Parade, Alexandra Headland QLD 4572, Australia
Phone: +61 424 288 106