Australia Privacy Act

Who this applies to

This page applies to customers and users located in Australia. It explains how DashboardFox handles personal data under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) that apply to the collection, use, storage, and disclosure of personal information.

This page supplements our main Privacy Policy. Read both documents together for a complete understanding of how we handle your personal information.

Applicable framework

The Privacy Act 1988 and its 13 Australian Privacy Principles govern how organisations collect, use, store, and disclose personal information about individuals. As an organisation that collects personal information from Australian individuals in the course of providing a commercial service, 5000fish, Inc. is bound by the APPs in relation to that information.

What personal information we collect and why (APP 1, APP 3)

We collect personal information that is reasonably necessary for us to provide the DashboardFox platform. This includes:

• Name and email address — to create and manage your account
• Billing name and address — to process payments and meet tax obligations
• IP address, browser, and device information — for security and fraud prevention
• Usage and analytics data — to understand how the platform is used and to improve it
• Phone number — only if you choose to enable SMS two-factor authentication
• Support communications — when you contact us for help

We collect personal information directly from you when you register for DashboardFox, set up billing, or contact us for support. We do not collect sensitive information (as defined under the Privacy Act) unless you choose to include it in your own workspace data, which remains under your control.

The full detail of what we collect and how we use it is in our Privacy Policy.

Notification at collection (APP 5)

At the point of collection, we notify you of the purpose for collecting your personal information, the types of third parties we may disclose it to, and how to access and correct it. This is done through our Privacy Policy, which is linked prominently at registration and on our website.

Use and disclosure (APP 6)

We use and disclose personal information only for the primary purpose for which it was collected — delivering the DashboardFox platform — or for directly related secondary purposes that you would reasonably expect. We do not sell personal information. We do not share personal information with third parties for advertising.

We share personal information with sub-processors who assist us in operating the Service (hosting, payments, email, support). Each sub-processor is bound by contractual data protection obligations. The full list is in our Sub-processor Registry.

Cross-border disclosure (APP 8)

DashboardFox is operated by 5000fish, Inc., a United States corporation. Personal information collected from Australian customers is transferred to and processed in the United States and, depending on the sub-processors involved, in Germany, Finland, Ireland, and other countries.

Before disclosing personal information to overseas recipients, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to that information. This is done through contractual obligations in our agreements with sub-processors.

Two of our sub-processors are based in Australia:

• Frill (product roadmap and feedback) — Australia-based, with 2021 Standard Contractual Clauses in place for any personal data transfers
• Flook (product tours) — Australia-based; Flook does not process personal information in connection with our use of the service

By using DashboardFox, you acknowledge that your personal information will be transferred to and processed in the United States and other jurisdictions, and that it may be subject to access by law enforcement or regulatory authorities in those jurisdictions under their applicable laws.

Data quality and security (APP 10, APP 11)

We take reasonable steps to ensure that personal information we collect is accurate, up to date, and complete. You can update your profile information at any time from the management portal.

We protect personal information from misuse, interference, loss, unauthorized access, modification, and disclosure through the security measures described in our Privacy Policy — including AES-256 encryption at rest, TLS 1.2+ in transit, isolated database architecture, web application firewall protection, and annual penetration testing.

Access and correction (APP 12, APP 13)

You have the right to request access to the personal information we hold about you, and to request correction of any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

To submit an access or correction request, email team@dashboardfox.com. Account owners can also update many details directly from the management portal. We will respond to access requests within 30 days.

We will not charge a fee for making an access request, or for correcting personal information. If we are unable to give you access to or correct personal information, we will give you reasons in writing.

Complaints (APP 1)

If you believe we have breached the Australian Privacy Principles in relation to your personal information, you may lodge a complaint with us by emailing team@dashboardfox.com. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001
oaic.gov.au — 1300 363 992