Privacy Policy

We are committed to protecting your privacy. This Privacy Policy explains the kinds of personal information we collect, why we collect it, how we use and disclose it, and how you can contact us about our handling of your information. It is intended to align with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where they apply to us.

This policy is a practical draft and may need adjustment for your specific circumstances. You should obtain independent legal advice to confirm it meets your obligations.

1. Who we are

The Services are supplied by Rollout Labs Pty Ltd (ABN 16 698 232 852, ACN 698 232 852). Our public website is at rolloutlabs.ai.

For privacy questions, contact us at hello@rolloutlabs.ai.

2. Scope of this policy

This policy applies to:

• Visitors to our website;
• Prospective and current clients who enquire about or purchase our Services;
• Representatives of corporate clients and individual subscribers, where relevant.

Some client engagements may also be governed by a separate agreement (for example, a statement of work or master services agreement). Where there is inconsistency that affects personal information handling, the more specific contract terms may prevail for that engagement, but only where permitted by law.

3. What personal information we collect

The personal information we collect depends on how you interact with us. It may include:

• Identity and contact details: name, email address, phone number, job title, company name;
• Account and engagement details: enquiry content, meeting notes, proposal and billing records;
• Payment information: billing address and transaction references. Card numbers and similar data are typically collected directly by our payment processor; we do not store full card numbers on our own systems;
• Service and technical materials: when you engage us for code review or related Services, you may provide access to source code, repositories, documentation, logs, credentials (which you should share securely), sample data, or cloud environments. Some of this information may include personal information if it appears in your systems or datasets;
• Communications: emails, messages, and support tickets;
• Technical and usage data (website): IP address, device and browser type, general location derived from IP, pages viewed, and approximate time on site.

We do not seek to collect sensitive information unless it is reasonably necessary and you consent, or another exception under the APPs applies.

4. How we collect personal information

We collect personal information:

• Directly from you when you submit forms, email us, sign an agreement, or pay for Services;
• From third parties you authorise (for example, your hosting or tooling provider);
• Automatically through cookies and similar technologies on our website (see section 6).

5. Why we use personal information

We use personal information for purposes that are reasonably necessary for our business, including to:

• Respond to enquiries and provide proposals;
• Deliver the Services, including reviewing code, configurations, and related artefacts you provide;
• Invoice, process payments, recover amounts owed, and meet tax or accounting obligations;
• Operate and improve our website, analytics, and security;
• Communicate operational updates, changes to terms or policies, and (where permitted by law) service information;
• Comply with applicable laws, regulations, and lawful requests;
• Resolve disputes and enforce our agreements.

If we rely on consent for a particular use, you may withdraw consent by contacting us, subject to contractual or legal constraints.

6. Cookies, analytics, and similar technologies

Our website may use cookies and similar technologies. We use Google Analytics to understand aggregate traffic and usage patterns. Google may process technical and usage data according to its own policies.

You can control cookies through your browser settings. Blocking essential cookies may affect site functionality. For more on how Google uses information from sites that use its services, see Google’s documentation.

7. Disclosure of personal information

We may disclose personal information to:

• Service providers who assist us (for example: hosting and infrastructure, email delivery, form handling, scheduling, payment processing, accounting, collaboration tools). They are authorised to use personal information only as needed to perform services for us;
• Professional advisers (lawyers, accountants, insurers);
• Authorities where required or permitted by law.

We maintain an internal register of vendor categories we rely on and update customer-facing disclosures as our stack or practices change. You may request a current high-level list of subprocessor categories by emailing hello@rolloutlabs.ai.

8. Overseas disclosure

Many technology suppliers process data in Australia and overseas (often including the United States and other regions). Where we disclose personal information to overseas recipients, we take steps that are reasonable in the circumstances to ensure overseas handling complies with the APPs, subject to the Privacy Act.

By using our website or Services and providing personal information to us, you acknowledge that your information may be disclosed to overseas recipients where necessary to operate our business, unless we agree otherwise in writing.

9. Security

We implement reasonable technical and organisational measures appropriate to the nature of the information we hold, including access controls, secure communication where practicable, and reliance on reputable vendors. No method of transmission or storage is completely secure.

10. Retention

We retain personal information only as long as reasonably necessary for the purposes in section 5, including to meet legal, accounting, or reporting requirements. Client materials provided for engagements may be deleted or returned according to the engagement terms or on request, subject to our need to retain certain records.

11. Access, correction, and complaints

You may request access to or correction of personal information we hold about you by emailing hello@rolloutlabs.ai. We will respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Links to third-party sites

Our website may link to third-party sites and tools. Their privacy practices are governed by their own policies. We are not responsible for those practices.

13. Children

Our Services are not directed to children, and we do not knowingly collect personal information from children.

14. Changes to this policy

We may update this Privacy Policy from time to time by publishing a revised version on this page and updating the “Last updated” date. Where changes are material and we have your contact details, we will provide additional notice if required by law.

---

For the complementary website terms that govern use of our Services, see our Terms of Service.