Information We Collect
At grylontisava, we collect information to provide you with personalised expense budgeting
services. Understanding what data we gather helps you make informed decisions about
using our platform.
Personal Information
Name, email address, phone number, and postal address when you create an account
or contact us.
Financial Data
Budget categories, expense amounts, income information, and financial goals you
input into our system.
Usage Information
How you interact with our platform, including pages visited, features used, and
time spent on the service.
Device Information
IP address, browser type, operating system, and device identifiers when you access
our platform.
Automatic Data Collection
We automatically collect certain information through cookies and similar
technologies. This includes your browsing patterns, preferences, and technical data
about your device. You can control cookie settings through your browser preferences,
though disabling certain cookies might affect platform functionality.
How We Use Your Information
Your information enables us to deliver personalised budgeting tools and improve our
services. We process your data for several specific purposes under Australian Privacy
Principles.
- Provide and maintain your budgeting account and related services
- Process your financial data to generate budgeting insights and recommendations
- Communicate with you about your account, updates, and platform changes
- Respond to your support requests and customer service inquiries
- Send educational content about financial management and budgeting strategies
- Analyse usage patterns to improve platform features and user experience
- Ensure platform security and prevent fraudulent activities
- Comply with legal obligations and regulatory requirements
Marketing Communications: We may send you newsletters and educational
content about personal finance. You can unsubscribe at any time using the link provided
in our emails or by contacting us directly.
Information Sharing and Disclosure
We don't sell your personal information to third parties. However, we may share your
information in specific circumstances outlined below, always in accordance with
Australian privacy laws.
Service Providers
We work with trusted third-party service providers who help us operate our platform.
These include cloud hosting providers, email service providers, and analytics
platforms. All service providers are contractually required to protect your
information and use it solely for providing services to us.
Legal Requirements
We may disclose your information if required by law, court order, or regulatory
authority. This includes responding to subpoenas, search warrants, or other legal
processes. We'll notify you of such requests unless legally prohibited from doing so.
Business Transfers
If grylontisava is acquired by or merged with another company, your information may be
transferred as part of that transaction. We'll notify you before your information
becomes subject to a different privacy policy.
Your Privacy Rights
Under the Australian Privacy Act 1988, you have several rights regarding your personal
information. We're committed to helping you exercise these rights promptly and
transparently.
Your Rights Include:
- Access: Request a copy of the personal information we hold about
you
- Correction: Ask us to correct inaccurate or incomplete
information
- Deletion: Request deletion of your personal information, subject
to legal requirements
- Portability: Receive your data in a structured, commonly used
format
- Restriction: Request we limit how we process your
information
- Objection: Object to certain types of data processing
To exercise these rights, contact us at info@grylontisava.com or use our online request form.
We'll respond within 30 days and may require identity verification to protect your
privacy. There's no fee for most requests, though we may charge reasonable costs for
excessive or repetitive requests.
Data Security and Protection
Protecting your financial information is our top priority. We implement comprehensive
security measures designed to safeguard your data from unauthorised access, alteration,
disclosure, or destruction.
Technical Safeguards
We use industry-standard encryption protocols (TLS 1.3) to protect data in transit
and AES-256 encryption for data at rest. Our servers are hosted in secure data
centres with 24/7 monitoring, multi-factor authentication, and regular security
audits.
Access Controls
Only authorised personnel have access to your personal information, and access is
limited to what's necessary for their job functions. All employees undergo background
checks and sign confidentiality agreements. We maintain detailed access logs and
conduct regular reviews.
Incident Response
In the unlikely event of a data breach, we have procedures in place to contain the
incident, assess the impact, and notify affected users and relevant authorities as
required by law. We'll provide clear information about what happened and steps we're
taking to prevent future occurrences.
Data Retention and International Transfers
We retain your personal information only as long as necessary to provide our services
and comply with legal obligations. Different types of information have different
retention periods based on their purpose and legal requirements.
Retention Periods
- Account information: Retained while your account is active plus 7 years after
closure
- Financial data: Stored for the duration of your account plus 5 years for tax
purposes
- Communication records: Kept for 3 years from last contact
- Usage logs: Automatically deleted after 18 months
- Marketing preferences: Retained until you withdraw consent
International Data Transfers
Your information is primarily stored and processed in Australia. When we use overseas
service providers, we ensure they provide equivalent privacy protection through
contractual safeguards, certification schemes, or adequacy decisions. You'll be
notified if we plan to transfer your data to countries without adequate privacy
protections.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our platform.
Understanding how these work helps you make informed choices about your privacy
preferences.
Essential Cookies
These cookies are necessary for the platform to function properly. They enable core
features like secure login, session management, and basic navigation. You cannot opt
out of essential cookies without affecting platform functionality.
Analytics and Performance
We use analytics cookies to understand how users interact with our platform, which
helps us improve performance and user experience. This data is aggregated and
anonymised, and you can opt out through your browser settings or our privacy
preferences centre.
Managing Cookie Preferences
You can control cookie settings through your browser preferences or our privacy
settings panel. Disabling certain cookies might affect some platform features, but
won't prevent you from using core budgeting tools.
Children's Privacy and Special Circumstances
grylontisava is designed for adults who want to manage their personal finances. We don't
knowingly collect personal information from children under 18 without parental consent.
Age Restrictions
To create an account, you must be at least 18 years old or have reached the age of
majority in your jurisdiction. If we discover that someone under 18 has provided
personal information without parental consent, we'll delete that information
promptly.
Family Accounts
Parents or guardians can create accounts that include budgeting education for their
teenagers. In these cases, the adult account holder is responsible for the
information shared and has control over the teen's data usage and privacy settings.
Policy Updates and Changes
We may update this privacy policy periodically to reflect changes in our practices,
technology, or legal requirements. When we make significant changes, we'll notify you by
email and display a prominent notice on our platform. The effective date at the top of
this policy indicates when it was last updated.