Privacy Policy

Tidysite by Dropwire Digital Pty Ltd Effective: 22 June 2026 Last updated: 22 June 2026

Plain English summary. We collect the information we need to run your Tidysite — your contact details, your business details, your billing details, and the content you give us to put on your site. We use trusted third parties (named in our Sub-processor list) to host the site, take payment, and send email. Some of those run their servers overseas. We don't sell your data. You can ask to see, correct, or delete what we hold about you at any time. Email us at [email protected].

---

1. Who we are

This Privacy Policy is issued by Dropwire Digital Pty Ltd (ACN 622 001 343 | ABN 52 622 001 343) trading as Tidysite ("Tidysite", "we", "us", "our"). Our registered office is in South Australia, Australia.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For New Zealand customers and visitors, we comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs). Where this policy refers to the APPs, please read the same protection as applying under the IPPs for New Zealand individuals.

2. What this policy covers

This policy covers personal information we collect through:

• Our marketing website at tidysite.com.au and any subdomain we operate (e.g. app.tidysite.com.au, [client].build.dropwire.digital).
• Our sales and onboarding process — strategy calls, the onboarding wizard, support tickets, and email correspondence.
• The Tidysite service itself — running and updating your subscribed website.

It does not cover the privacy practices of websites we build for our customers (those are the customer's responsibility, and we'll help each customer publish their own policy as part of onboarding).

3. What we collect and why

We do not knowingly collect information from children under 18. Tidysite is sold to businesses; if you believe a child has given us personal information, contact us and we will delete it.

4. How we use your information

We use your personal information to:

• Build, host, and maintain your Tidysite;
• Take payment, send invoices and receipts, and manage your subscription;
• Respond to support requests, send service notifications, and contact you about your account;
• Send you marketing about Tidysite and related Dropwire services — you can opt out at any time using the unsubscribe link in every marketing email or by emailing us;
• Improve our service (analytics, bug reports, performance monitoring);
• Comply with our legal obligations (tax, anti-money-laundering, accounting, dispute resolution).

We do not sell your personal information. We do not let third parties use your personal information for their own purposes (other than where they're acting as a service provider for us — see §5 below).

5. Who we share your information with

We share personal information with the third-party service providers that make Tidysite work. The full list — including what each provider does and where they hold the data — is in our Sub-processor list.

The categories are:

• Hosting and infrastructure — to run your site and our portal.
• Payments — Stripe handles your card details directly.
• Email delivery — to send you receipts, system emails, and support replies.
• Scheduling and call recordings — cal.com handles your strategy-call bookings; Google Meet is used to run strategy calls and, where a call is recorded, stores the recording temporarily in Google Drive. You will always be notified before a call is recorded (Google Meet's built-in recording notice appears for all participants).
• Analytics and monitoring — Google Analytics on our marketing site; error monitoring (Sentry); uptime monitoring (UptimeRobot).
• Advertising — Meta, LinkedIn, and Google advertising pixels on our marketing site only (see Cookie & Tracking Notice).

We may also disclose personal information where we are required or permitted to do so by law, including in response to a valid legal request, to protect our rights or those of a third party, or in connection with a sale or restructure of our business (in which case we'll require the recipient to honour this policy).

6. Sending information overseas

Some of our service providers are based outside Australia. When we share your personal information with them, we are disclosing it overseas under APP 8.

Personal information may be sent to or stored in:

Before engaging an overseas provider, we take reasonable steps to satisfy ourselves that the recipient handles personal information consistently with the APPs (or, for NZ residents, the IPPs). Where local laws may require different treatment, we name those providers transparently here so you can make an informed decision about using our service.

7. How we keep your information secure

We protect personal information using:

• HTTPS encryption in transit on all our sites;
• Encrypted backups;
• Access controls and authentication on our admin systems;
• Reasonable technical and organisational safeguards proportionate to the size of our business and the sensitivity of the information.

No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988) — typically within 30 days of becoming aware. New Zealand individuals will be notified consistent with Part 6 of the Privacy Act 2020.

8. How long we keep your information

We keep personal information only as long as we need it for the purposes set out above, or as required by law. Indicative retention periods:

If you cancel and want a faster deletion than this, ask us — see §10.

9. Cookies and tracking

Our marketing website uses cookies and tracking pixels. See our Cookie & Tracking Notice for the detail and the opt-out instructions.

10. Your rights

You can ask us to:

• See the personal information we hold about you (APP 12 / IPP 6 access request);
• Correct information that's wrong or out of date (APP 13 / IPP 7 correction request);
• Delete your personal information, subject to legal retention obligations (e.g. we must keep tax records for 7 years);
• Stop sending you marketing communications (just unsubscribe, or email us);
• Export the content you've given us (we'll provide your site content in a portable format).

To make a request, email [email protected] with enough detail for us to identify you and what you're asking for. We'll respond within 30 days. There's no charge unless your request is unusually large or repeated, in which case we'll discuss costs upfront.

11. Complaints

If you think we've mishandled your personal information, please tell us first — we'd rather fix it. Email [email protected].

If you're not satisfied with our response, you can complain to:

• Australia — Office of the Australian Information Commissioner (OAIC), oaic.gov.au or 1300 363 992
• New Zealand — Office of the Privacy Commissioner, privacy.org.nz or 0800 803 909

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when we do. For material changes that affect how we use your personal information, we'll email active customers with at least 30 days' notice before the change takes effect. Continued use of Tidysite after the effective date is taken as acceptance of the updated policy.

13. Contact

Dropwire Digital Pty Ltd trading as Tidysite ACN 622 001 343 | ABN 52 622 001 343 South Australia, Australia Email: [email protected] Web: tidysite.com.au

---

This policy is published in plain English so you don't need a lawyer to read it. If anything is unclear, ask us.