Privacy Policy

Last updated: 5 October 2026

Cured Compliance Pty Ltd (ABN 97 179 655 366) (“Cured Compliance”, “we”, “our” or “us”) respects your privacy. This policy explains how we collect, use, store and disclose personal information when you visit our website, enquire about our services or use the Cured Compliance platform.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What personal information we collect

Depending on how you deal with us, we may collect:

• Enquiries and demo requests: your name, email address and phone number, and anything else you tell us.
• Customer accounts: business name, ABN or ACN, business and postal addresses, and the names, email addresses and phone numbers of owners, managers and billing contacts.
• Platform users: the names, roles, login details, email addresses and mobile numbers of staff your business adds to the platform. This includes digital signatures, photos and the entries staff make on checklists and records.
• Compliance records: records your business keeps in the platform, such as temperature logs, cleaning and production records, and traceability records. These can include the names of suppliers, customers and staff.
• Billing information: invoices and payment details. Card payments are processed by our payment provider and we do not store full card numbers.
• Website usage: IP address, device and browser type, pages visited, referring website, and the date and time of your visit. This is collected through cookies and similar technologies (see below).

Temperature sensor readings and equipment data are generally information about your business, not about individuals.

Sensitive information

We do not ask for sensitive information (such as health information) about you. If your business uses the platform to record staff health declarations or similar records required under food safety standards, that information is collected by your business, and we hold it on your business’s behalf to provide the service. We only use it for that purpose.

How we collect personal information

We collect personal information:

• directly from you, for example when you fill in our enquiry form, call or email us, or use the platform;
• from your employer or business, when they set you up as a platform user; and
• automatically, through cookies and similar technologies when you use our website or platform.

Where it is lawful and practicable, you can deal with us anonymously or using a pseudonym, for example when browsing our website or making a general enquiry. We cannot provide a platform account without identifying information.

Why we collect, hold and use personal information

We use personal information to:

• respond to enquiries and arrange demonstrations;
• provide, support and improve the Cured Compliance platform, including sending temperature and compliance alerts by SMS, email, voice call and in-app notification;
• set up and manage customer accounts and user access;
• issue invoices and manage payments;
• send service updates and, with your consent, news and marketing about our products;
• understand how our website is used so we can improve it; and
• meet our legal obligations, including tax and record-keeping laws.

If you do not provide the information we ask for, we may not be able to respond to your enquiry or provide our services.

Automated processing and AI

The platform uses automated processing, including artificial intelligence, to analyse your business’s compliance records and produce audit summaries, compliance scores, reports and alerts. These outputs help your business manage its own compliance. We do not use them to make decisions that significantly affect the rights or interests of any individual. Your business remains responsible for reviewing the outputs and acting on them.

Direct marketing

We may send you marketing emails or messages about our products and services where you have agreed to receive them, or where the law otherwise allows. Every marketing message includes a way to unsubscribe, and you can also ask us to stop by contacting us. We comply with the Spam Act 2003 (Cth). We do not sell or rent personal information to anyone.

Who we disclose personal information to

We may disclose personal information to:

• service providers who help us run our business, such as cloud hosting (DigitalOcean and Microsoft Azure), SMS, voice and email delivery, payment processing, website analytics, customer relationship management and AI processing providers;
• the business that set up your platform account, for example your employer;
• auditors, food safety authorities or other third parties when your business directs us to share records with them;
• our professional advisers, such as accountants and lawyers; and
• government agencies and others where we are required or authorised by law to do so.

Our service providers may only use personal information to provide services to us.

Overseas disclosure

Cured Compliance platform data, including your business’s compliance records and user accounts, is stored in Australia, in DigitalOcean’s Sydney data centre. Our website and enquiry forms are hosted on Microsoft Azure. Some of our service providers, including website analytics (Google), email, SMS and AI providers, may store or process information outside Australia, including in the United States. Before we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs.

Cookies and website technologies

Our website uses:

• Google Tag Manager and Google Analytics to measure visits and understand how the website is used;
• marketing automation tracking (Mautic), which records the pages you visit. If you have submitted a form or clicked a link in one of our emails, this activity may be linked to your contact details;
• embedded YouTube videos on our Media page, which may set cookies when played; and
• content delivery networks (unpkg.com, cdnjs.cloudflare.com and Microsoft Azure storage) that serve scripts, icons and videos. These receive your IP address when your browser loads the files.

You can block or delete cookies in your browser settings. Some parts of the website may not work properly if you do.

How we protect personal information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include encrypted connections (HTTPS), access controls and role-based permissions, server-side audit trails and regular backups.

If we experience a data breach that is likely to result in serious harm, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

How long we keep personal information

We keep personal information only for as long as we need it for the purposes in this policy, or as long as the law requires. Financial records are kept for at least five years under tax law. Compliance records are kept for the life of your subscription and for a reasonable period afterwards so your business can meet its own record-keeping obligations. When we no longer need personal information, we take reasonable steps to destroy or de-identify it.

Accessing and correcting your personal information

You can ask for access to the personal information we hold about you, or ask us to correct it, by contacting us. We will need to verify your identity before we do. We will respond within 30 days and we do not charge for making a request. If we refuse access or correction, we will tell you why in writing and how you can complain.

If your personal information is in records your employer keeps on the platform, we may refer your request to your employer.

Complaints

If you have a concern about how we have handled your personal information, please contact us first. We will acknowledge your complaint promptly and aim to respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992

Contact us

Privacy Officer, Cured Compliance Pty Ltd
Mary Valley, Queensland, Australia
Email: info@curedcompliance.com
Phone: 0427 594 365

Changes to this policy

We may update this policy from time to time. The current version will always be published on this page, with the date it was last updated.