Privacy Policy

01 Applicable Law

We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained within it. We have elected to comply with the APPs in full as a matter of good practice regardless of our current turnover, and to prepare for business growth.

Our service is an advisory checklist tool. We do not intentionally collect sensitive personal information as defined under the Privacy Act — we do not ask about health, finances, legal matters, or the identity of the deceased. We request that you do not provide sensitive personal information to us. The information we collect is limited to what is necessary to generate and deliver your checklist.

We also comply with the Spam Act 2003 (Cth) in relation to any electronic communications we send.

02 Information We Collect

We collect only the minimum information necessary to provide the service. We do not intentionally collect physical information, government identifiers, sensitive personal information, or any information about the deceased person.

Information you provide directly

When you purchase and complete a checklist, you provide:

• Your email address — used to deliver your checklist, order confirmation, and any communications you have opted into
• Your Australian state or territory — used to tailor the checklist to your jurisdiction
• Your selections from the checklist categories — used to generate a personalised PDF
• Your opt-in preference — captured on the post-payment confirmation page if you choose to receive future communications about related products

Your checklist responses are high-level category selections only. We do not ask you to enter names, account numbers, asset values, your relationship to the deceased, or any other identifying or sensitive details. We request that you do not include such information in any free-text fields.

Payment information

Payment is processed by Stripe, a third-party payment provider. We do not collect, store, or have access to your credit card number, bank details, or any payment credentials. Your payment details are handled entirely by Stripe and are governed by their own privacy policy.

Technical and usage information

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on the site
• Referring website or traffic source
• Device type

This information is collected via cookies and analytics tools (see Section 7) and is used in aggregate to understand how visitors use the website. It is not linked to your identity or checklist purchase.

03 How We Use Your Information

We use the information we collect for the following purposes:

• To generate and deliver your personalised checklist by email
• To process your payment via Stripe
• To send you a receipt or order confirmation
• To contact you about related products and services from What To Do After Loss, if you have explicitly opted in via the post-payment confirmation page
• To respond to any queries or support requests you submit
• To improve the website and the quality of our service
• To comply with applicable laws and regulations

We will not contact you for marketing or promotional purposes unless you have explicitly opted in to receive such communications. You may withdraw your consent at any time by using the unsubscribe link included in any marketing email we send, or by contacting us via the contact form on this website. Unsubscribe requests will be processed within 5 business days.

04 Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

• Service providers — We use trusted third-party tools including Stripe (payment processing), Brevo (email delivery), and our website hosting provider. These providers access your information only to the extent necessary to perform their function and are required to handle it in accordance with applicable privacy law.
• Legal obligations — We may disclose information if required to do so by law, court order, or in response to a lawful request from a government authority.
• Business transfer — In the event the business is sold or transferred, personal information may be transferred to the new owner, who would be bound by this policy or a materially equivalent one.

Some of our service providers may store or process personal information outside Australia, including in jurisdictions such as the European Union or the United States (for example, Brevo for email delivery, Stripe for payment processing, and our hosting and analytics providers). Where this occurs, we take reasonable steps to ensure those providers handle your information consistently with the APPs.

05 Email Communications

We use Brevo, a third-party email service provider, to deliver your checklist and manage any post-purchase correspondence.

Upon purchase you will receive:

• Your personalised checklist PDF, delivered immediately to the email address you provided
• An order confirmation

We do not send follow-up emails as a matter of course. If you choose to opt in on the post-payment confirmation page, we may contact you on an occasional basis about related products and services from What To Do After Loss that we believe may be genuinely useful to you.

Opt-in is explicit, unticked by default, and entirely voluntary. You may unsubscribe from any future communications at any time using the unsubscribe link included in every email. Your checklist will be delivered regardless of whether you opt in.

06 Storage and Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include secure hosting environments, encrypted data transmission (SSL/TLS), and restricting access to personal information to authorised personnel only.

We retain your email address and checklist selections for up to 24 months from the date of purchase, or longer if required for legal or dispute resolution purposes. We do not retain payment information.

No method of data transmission or storage is completely secure. While we implement appropriate safeguards, we cannot guarantee absolute security.

07 Cookies and Analytics

Our website uses cookies — small files stored on your device — to support website functionality and to understand how visitors use the site.

• Essential cookies — Required for the website to function, including form submission and checkout processes
• Analytics cookies — Used to collect information about how visitors interact with the site. Cookies generally do not directly identify you, but may be linked to device or usage data. This information is used in aggregate and is not linked to individuals

You may configure your browser to refuse cookies or to alert you when cookies are set. Disabling cookies may affect the functionality of the website.

08 Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights:

• Access — You may request access to the personal information we hold about you
• Correction — You may request that inaccurate, incomplete, or outdated information be corrected
• Deletion — You may request that we delete your personal information, subject to any legal obligations we have to retain it
• Withdrawal of consent — You may withdraw opt-in consent for marketing communications at any time
• Complaints — You have the right to make a complaint if you believe we have handled your information contrary to the APPs

To exercise any of these rights, please contact us via our contact page. We may require you to verify your identity before processing your request. We will respond within a reasonable timeframe and in accordance with our legal obligations.

09 Complaints

If you have a complaint about how we have handled your personal information, please contact us in the first instance. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10 Limitation of Liability

To the maximum extent permitted by law, What To Do After Loss excludes all liability for any loss or damage — whether direct, indirect, incidental, or consequential — arising from your use of this website or your reliance on the checklist content.

We do not exclude any rights or guarantees that cannot be excluded under the Australian Consumer Law. Where our liability cannot be excluded, it is limited to the fullest extent permitted by law.

11 Intellectual Property

All content on this website, including but not limited to the checklist templates, written content, design, and structure, is the intellectual property of What To Do After Loss and is protected by applicable copyright and intellectual property laws.

Upon purchase, you are granted a personal, non-transferable, non-exclusive licence to use your checklist for your own private purposes. You may not reproduce, distribute, resell, or modify the checklist or any part of this website’s content without our prior written consent.

12 Contact Us

If you have any questions about this Privacy Policy or how your information is handled, please contact us via our contact page.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Where a change is material, we will take reasonable steps to notify existing customers.