Privacy Policy

Go Figure Payroll Pty Ltd (ACN 698 444 834) ("Go Figure Payroll", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal information you provide through our marketing website at www.gofigurepayroll.com.au, in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

This policy covers the marketing website only. Our pay-checking product, PayCheckR (www.mypaychecker.com.au), has its own privacy policy and terms which apply when you create an account or upload payslips.

1. Information We Collect

Contact form submissions

• Name (required)
• Email address (required)
• Company (optional)
• Phone number (optional)
• The content of your message

Automatically collected

• IP address (used for rate-limiting and abuse prevention)
• Browser type, device type, and operating system
• Pages visited and timestamps
• Referrer URL

2. How We Use Your Information

• Respond to your enquiry and follow up about our payroll services
• Send you a confirmation auto-reply when you submit the contact form
• Prevent abuse of the contact form (rate limiting and bot detection)
• Understand aggregate website traffic to improve the site (no cross-site tracking, no advertising profiles)

We do not sell your personal information. We do not use it for advertising or share it with marketing networks.

3. Third-Party Services

We use the following providers to operate the marketing website:

• Vercel Inc. (USA) for hosting, content delivery, and anonymised, aggregated traffic analytics via Vercel Analytics
• Cloudflare, Inc. (USA) provides Turnstile bot protection on the contact form
• Titan SMTP (operated by Hostinger Operations UAB, with infrastructure in Lithuania, Singapore, and India) for delivering enquiry emails and auto-replies

All providers are required to maintain appropriate confidentiality and security safeguards. We share only the minimum data necessary for each provider to perform its function.

Overseas disclosure (APP 8): Some of the providers listed above store and process personal information outside Australia. The likely recipient countries are the United States (Vercel Inc., Cloudflare Inc.) and Lithuania, Singapore, and India (Hostinger Operations UAB / Titan SMTP infrastructure). Before disclosing personal information to these providers, we take reasonable steps to ensure they handle it in a way consistent with the Australian Privacy Principles, including by entering into their standard data-processing agreements, relying on their published privacy and security certifications (such as SOC 2 and ISO 27001 where applicable), and limiting disclosure to the minimum information necessary for the provider to perform its function.

4. Cookies and Tracking

• Theme preference - your light/dark mode choice is stored in browser local storage. It never leaves your device.
• Visitor analytics - we use Vercel Analytics for anonymised, aggregated page views and approximate location data. Vercel Analytics does not use third-party cookies, does not build cross-site profiles, and does not identify you personally.
• Cloudflare Turnstile - sets a temporary cookie on the contact form page to verify you're not a bot. It is removed after verification.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers.

5. Storage and Security

Contact form submissions are sent directly to our company mailbox via encrypted SMTP (TLS) and are not stored in any database we operate. We retain enquiry emails for up to 24 months after the last correspondence, after which they are deleted, unless a longer retention period is required by law (for example, where the enquiry forms part of a tax record under section 262A of the Income Tax Assessment Act 1936).

We take reasonable steps to protect information from misuse, loss, unauthorised access, modification, or disclosure, including HTTPS on all connections, rate-limiting on the contact form, and bot-protection via Turnstile.

6. Your Rights

Under Australian Privacy law you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Delete your enquiry from our records by contacting us

To make an access or correction request, email hello@gofigurepayroll.com. We will acknowledge your request within 7 days and respond within 30 days. There is no charge for access. We may refuse access in the limited circumstances permitted by APP 12.3 (for example, where giving access would unreasonably impact another person's privacy or where the request is frivolous or vexatious) and will give you written reasons if we do. If we refuse correction, we will, at your request, take reasonable steps to associate a statement with the information that it is inaccurate, out-of-date, incomplete, irrelevant, or misleading (APP 13.4).

7. Data Breaches

If we suspect an eligible data breach has occurred, we will assess the situation within 30 days as required under section 26WH of the Privacy Act 1988. If the breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act).

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Last updated" date. Continued use of the site after changes constitutes acceptance of the updated policy.

9. Contact Us