Privacy Policy

Effective date: 1 July 2025

This Privacy Policy describes how McQuillen Interactive Pty Ltd ("SimpleValidations", "we", "our", or "us") handles personal information when you visit our marketing site or request early access to the SimpleValidations beta (collectively, the "Services"). We run a small, invite-only Django application and collect only the data necessary to operate the waitlist and keep the site secure.

1. Scope and Responsibility

SimpleValidations acts as the data controller for information we collect through the marketing site and beta waitlist. If we process personal information for a customer in the future, we will do so solely under that customer's instructions.

2. Information We Collect

  • Waitlist signups. When you submit the beta waitlist form we collect your email address and store technical context captured automatically by the form, including the section of the site you used, referral URL, user agent, IP address, and timestamps.
  • Communications. Messages you send to daniel@simplevalidations.com along with any information you choose to include.
  • Operational logs. Heroku, our hosting provider, records device information, IP addresses, URLs requested, and error details in rotating application logs to help us troubleshoot issues.
  • Analytics. We use PostHog Cloud EU to understand aggregated website usage. PostHog sets first-party cookies or local storage identifiers and receives usage metadata (such as page views, approximate location derived from IP address, and device type). PostHog operates on infrastructure located in the European Union.

3. How We Use Information

  • Manage the beta waitlist, including sending welcome emails and product updates;
  • Operate, monitor, and secure the Services, including analysing performance and preventing abuse;
  • Respond to questions or support requests;
  • Improve the marketing experience by reviewing aggregated analytics; and
  • Comply with legal obligations and enforce our agreements.

4. How We Share Information

We do not sell personal information. We share information only with trusted service providers that help us deliver the Services:

  • Hosting. Heroku (Salesforce, Inc.) provides infrastructure and log aggregation for the marketing site and beta waitlist.
  • Email delivery. Postmark (Wildbit LLC) sends transactional messages such as beta welcome emails on our behalf.
  • Analytics. PostHog Cloud EU (PostHog, Inc.) processes pseudonymised usage data under our instructions.

We may also disclose information if required by law, to protect rights or safety, or in connection with a business transaction. Each provider is bound by agreements that limit their use of the data to what is necessary to support us.

5. Data Retention

We retain waitlist records and related metadata until you ask us to delete them or until we no longer need the information to operate the beta programme. Operational logs rotate automatically and are kept for a short period consistent with Heroku's default retention. Analytics data is aggregated and retained by PostHog according to its EU service commitments.

6. Security

We limit access to waitlist data to the small SimpleValidations team, enforce authentication on the admin, and rely on Heroku's managed security controls (including encryption in transit and at rest). No internet service can be completely secure, so please use a strong, unique email account password.

7. Your Rights and Choices

You may request access to, correction of, or deletion of your personal information by emailing privacy@simplevalidations.com. You can unsubscribe from waitlist emails at any time using the link in the message or by contacting us directly. Depending on your location, you may also have rights to object to or restrict certain processing, or to lodge a complaint with a supervisory authority.

8. Australian Privacy Obligations

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles when handling personal information. That includes taking reasonable steps to inform you why we collect data, keeping it secure, and allowing access or correction on request. Our core application runs on Heroku infrastructure located in the United States, and analytics data is processed by PostHog in the European Union; by using the Services you consent to these overseas disclosures. We only work with providers that agree to safeguard the information we share with them.

If you have concerns about our handling of personal information, contact us first so we can work to resolve the issue. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/ or by calling 1300 363 992.

9. Cookies and Analytics Controls

PostHog uses first-party cookies or browser storage to measure how visitors engage with the marketing site. These cookies do not power advertising or track you across unrelated sites. You can block or delete cookies through your browser settings or contact us to opt out of analytics for your device.

10. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post an update on this page and adjust the effective date. Your continued use of the Services after the changes take effect means you accept the revised Policy.

12. Contact Us

For questions or concerns about this Privacy Policy, email us at privacy@simplevalidations.com or write to McQuillen Interactive Pty Ltd, Unit 7, 3 Bolinda Street, Bentleigh, Victoria 3204, Australia.