ScaffControl Privacy Policy
Effective: October 2026
Operator: BR Planning Alliance Pty Ltd (ABN 22 679 284 112 / ACN 679 284 112)
Product: ScaffControl software
Public URL: https://www.scaffcontrol.com.au/privacy.html
Contact: contact@scaffcontrol.com.au
This Privacy Policy explains how BR Planning Alliance Pty Ltd (ABN 22 679 284 112 / ACN 679 284 112) ("BR Planning Alliance", "we", "us", "our"), the developer and supplier of the ScaffControl software, collects, uses, discloses and protects personal information.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What this policy covers
This policy covers personal information we collect when:
- you visit our website, www.scaffcontrol.com.au;
- you contact us or make an enquiry;
- your organisation buys or renews a ScaffControl licence;
- we provide support, installation, training or other services to your organisation, whether onsite or remotely; and
- we send you information about ScaffControl.
2. Your data in the ScaffControl software
ScaffControl is software that your organisation installs and runs on its own computers. We do not host it, and the software does not send the information in it to us. This includes:
- scaffold records;
- inspection and handover records;
- hazard and incident records;
- user accounts; and
- photographs.
Your organisation (our customer) controls that information and is responsible for how it is handled. If you are a worker whose details are recorded in ScaffControl, please contact your employer or the organisation that runs the software about access to or correction of that information.
We see information in a customer's ScaffControl system only when the customer gives us access to provide support, installation, data migration or other services. When that happens, we:
- use the information only to perform the services the customer has asked for;
- do not copy it off the customer's systems unless the customer approves it in writing, and then store it securely in Australia;
- delete any copy we hold within 30 days after the services are completed, unless the customer asks us to return it or the law requires us to keep it; and
- treat it in accordance with the APPs and our confidentiality obligations to the customer.
3. Information we collect
| Category | Examples | When |
|---|---|---|
| Contact and enquiry information | Name, company, role, email address, phone number, and the content of your enquiry | When you contact us or use the website contact form |
| Customer and licence information | Your organisation's name and ABN, contact and billing details, licence edition, entitlements and term, and licence and invoice records | When your organisation buys or renews a licence |
| Licence device identifier | A technical identifier for the computer or server a licence is bound to | When a device-bound licence is issued. This identifies a machine, not a person, but we protect it as if it were personal information. |
| Support and service information | Your correspondence with us, notes of support requests, and information we need to visit your site, such as inductions, contact for site access and access arrangements | When we provide support or services |
| Website technical information | IP address, browser type, and the date and time of requests, recorded in standard web server and security logs | When you visit our website |
We collect information directly from you or from your organisation. We do not collect sensitive information (such as health information) unless it is reasonably necessary, you consent, or the law allows it. For example, a site may require us to provide induction or competency records for our own personnel.
You can contact us without giving your name. In that case, we may not be able to help with your enquiry or provide a licence.
4. How we use your information
We use personal information to:
- respond to enquiries and provide quotes;
- issue, renew and administer licences and invoices;
- provide support, installation, training and other services;
- send service notices, such as licence expiry and renewal notices and important software updates;
- keep our website and systems secure;
- improve our software and services; and
- meet our legal, tax and accounting obligations.
We use and disclose personal information only for the purpose we collected it, a related purpose you would reasonably expect, or as otherwise permitted by the APPs.
5. Marketing
We send marketing emails (for example, news about new features) only to people who have agreed to receive them. Every marketing email identifies us and includes a working unsubscribe link, as required by the Spam Act 2003 (Cth). Unsubscribing does not stop service notices about a licence your organisation holds.
6. We do not sell personal information
We do not sell, rent or trade personal information.
7. Who we disclose information to
We disclose personal information only as needed to operate our business, to:
- email and productivity providers: Google (Gmail and Google Workspace), which stores data in the United States and other countries;
- website hosting providers: Amazon Web Services, which hosts our website and contact form in Sydney, Australia, and delivers website content through servers in other countries;
- our accountant and professional advisers, for tax, accounting and legal purposes;
- subcontractors who help us deliver services, under confidentiality and privacy obligations equivalent to our own; and
- government agencies or others where required or authorised by law.
8. Overseas disclosure
Some of our providers store or process information outside Australia, mainly in the United States. Our website content is also delivered through servers in other countries. Before disclosing information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs. We do this by using established providers that are bound by contractual privacy and security commitments.
9. Cookies and analytics
Our website does not use analytics, advertising or tracking cookies. If we introduce them, we will update this policy first and tell you which tool we use and how to opt out.
10. Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects on individuals. The ScaffControl software checks licence keys automatically. That check applies to an organisation's licence and does not make decisions about individuals. If this changes, we will update this policy.
11. Security
We protect personal information using reasonable technical and organisational measures. These include access controls, multi-factor authentication on our business accounts, encrypted storage and transmission where available, and limiting access to people who need it. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
12. How long we keep information
| Information | Retention period |
|---|---|
| Enquiry and contact information (no licence purchased) | 3 years from collection |
| Licence, invoice and payment records | 7 years after the end of the financial year they relate to, as required for tax and company records |
| Support and service records | 3 years after your organisation's licence ends |
| Customer data copied for services | Deleted within 30 days after the services are completed (see section 2) |
| Website technical logs | Up to 90 days, unless needed to investigate a security incident |
At the end of the retention period, we securely delete or de-identify the information, unless the law requires us to keep it longer.
13. Data breaches
If a data breach involving personal information we hold is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme in the Privacy Act 1988 (Cth). If a suspected breach affects customer data we accessed while delivering services, we will also notify the customer within 48 hours and help it assess the breach.
14. Access and correction
You can ask for access to, or correction of, personal information we hold about you by emailing contact@scaffcontrol.com.au. We will respond within 30 days. We may need to confirm your identity first. If we refuse a request, we will explain why in writing and tell you how to complain.
For information held in your organisation's ScaffControl system, contact your organisation (see section 2).
15. Complaints
If you have a concern about how we have handled your personal information, email contact@scaffcontrol.com.au. We will acknowledge your complaint promptly and give you a substantive response within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Mail: GPO Box 5218, Sydney NSW 2001
16. Changes to this policy
We may update this policy to reflect changes to our business, software or the law. For material changes, we will email customers and people who have subscribed to our updates, and post a notice on our website at least 14 days before the change takes effect. Minor changes take effect when published. The effective date at the top of this page shows when the policy was last updated.
17. Contact us
BR Planning Alliance Pty Ltd (ABN 22 679 284 112 / ACN 679 284 112)
Developer and supplier of ScaffControl
Email: contact@scaffcontrol.com.au
Website: www.scaffcontrol.com.au