Privacy Policy

PRIVACY POLICY

Last updated: 2 September 2026

This Privacy Policy explains how EurekaLegal ("EurekaLegal", "we", "us", "our") collects, holds, uses, and discloses personal information through eurekalegal.au (the "Site"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we intend to comply with the APPs regardless of whether the small business exemption in the Privacy Act applies to us at any given time.

1. Personal Information We Collect

Depending on how you use the Site, we may collect:

- Contact details — name, email address, and, if you provide it, phone number or postal address.
- Document content — the information you type into a questionnaire to generate a Document.
- Payment information — limited billing details needed to process a transaction. Full card details are collected and processed directly by our payment provider, not stored by us.
- Account and subscription information — if you hold a Membership, this includes your login credentials, billing cycle dates, your chosen Templates, and your subscription status (active, cancelled, etc.).
- Technical information — IP address, browser and device type, pages viewed, and similar data collected automatically through cookies and analytics.
- Communications — anything you send us by email or through a contact form.

2. How We Collect It

We collect personal information directly from you when you use the questionnaire, create an account, make a purchase, subscribe to a Membership, or contact us. Some technical information is collected automatically through cookies when you browse the Site (see clause 6).

3. Why We Collect, Use, and Disclose It

We use personal information to:

- generate the Document you've requested and deliver it to you;
- process payment, including recurring Membership billing, and provide receipts;
- provide customer support and respond to enquiries;
- maintain your account and Membership, including your Template selections and billing cycle;
- detect and prevent fraud, abuse, and security incidents;
- meet our legal and regulatory obligations, including under tax and consumer law;
- improve the Site and understand how it's used;
- send you service-related communications, and, where you've opted in, marketing about our products.

We don't use the specific content of your Documents — the names, facts, and figures you enter — for any purpose beyond generating that Document, processing your order, and providing support you've requested, unless you separately agree otherwise.

4. Automated Processing

We use automated, rule-based processes in two parts of the Site, and neither involves a human reviewing your individual case:

- Document generation. The Site applies pre-set logic to the answers you provide in a questionnaire to assemble a draft document. This doesn't assess you or make any decision about your rights, eligibility, or legal position — it produces a document from your own inputs.
- Membership payment retries and cancellation. If a recurring Membership payment fails, our payment processor automatically retries the charge over the following days. If every retry fails, your Membership is automatically cancelled and your access ends — this decision is made by automated payment-processing logic, not a person.

If our use of automated tools changes in a way that could significantly affect your rights or interests, we will update this Policy to reflect it.

5. Cookies and Analytics

We use cookies and similar technologies to run the Site, remember your preferences (including your logged-in session), and understand how visitors use it. You can control or disable cookies through your browser settings, though some parts of the Site — including your account — may not work properly if you do.

6. Disclosure of Personal Information

We disclose personal information to:

- Service providers who help us run the Site, including cloud hosting, database, payment processing, and email delivery providers.
- Professional advisers, such as accountants or lawyers, where reasonably necessary.
- Law enforcement or regulators, where required or authorised by law.
- A buyer or their advisers, if we sell or transfer part or all of our business, subject to confidentiality obligations.

We do not sell your personal information to third parties, and we do not disclose the content of your Documents to anyone except as needed to deliver the Document to you and process your order.

7. Overseas Disclosure

Some of our service providers store or process data outside Australia, including in the United States. Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the APPs, including through contractual protections with our providers.

8. Data Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including encryption in transit and access controls on our systems.

9. Data Breach Notification

If we become aware of a data breach likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme.

10. Direct Marketing

We will only send you marketing communications if you've opted in, or where otherwise permitted by law. Every marketing email includes an unsubscribe option. Opting out of marketing doesn't affect service-related communications, such as order or billing notices.

11. Access and Correction

You can ask us for access to the personal information we hold about you, or ask us to correct it. Contact us at support.eurekalegal@gmail.com to make a request. We'll respond within a reasonable period.

12. How to Make a Complaint

If you think we've mishandled your personal information, contact us first at support.eurekalegal@gmail.com. If you're not satisfied with our response, you can lodge a complaint with the OAIC at oaic.gov.au.

13. Retention

Membership and document data: where your access to Documents ends because your Membership is cancelled or lapses, we retain the underlying records for up to 30 days afterward — for example, in case you contact support or resubscribe — after which they may be deleted.

Other records: we keep personal information for as long as reasonably necessary for the purposes described in this Policy, including to meet tax and financial record-keeping obligations, which under Australian law can require retention for several years regardless of when your Membership or purchase history ends. Where retention is legally required, we keep the relevant records for that period even if it's longer than 30 days.

14. Children's Privacy

The Site is intended for use by adults. We don't knowingly collect personal information from children.

15. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date at the top shows when it was last revised.

16. Contact Us

support.eurekalegal@gmail.com

For independent advice about your privacy rights, you can also contact the OAIC at oaic.gov.au or on 1300 363 992.