Privacy Policy

Last updated: 1 June 2026

This Privacy Policy explains how Washshoulderan.world (“we”, “us”, “our”) handles personal information in accordance with the Privacy Act 1988 (Cth), all 13 Australian Privacy Principles (APPs), emerging 2026 expectations for algorithmic and AI transparency, and — where applicable — the EU General Data Protection Regulation (GDPR).

This document is written in plain language (APP 1). A summary of how we meet each APP appears in section 15. Our AI and automated systems disclosure is in section 16.

1. Who we are (APP 1 — open and transparent management)

We are the entity responsible for personal information collected through https://washshoulderan.world/ and related pages.

Business name: Washshoulderan.world
Address: 3 Morna Cl, Elermore Vale NSW 2287, Australia
Email: supportuse@washshoulderan.world
Phone: +61 421 193 909

For privacy enquiries, access requests, or complaints, contact us using the details above with “Privacy” in the subject line.

2. Scope

This policy applies to personal information we collect when you:

visit or browse our website;
use interactive tools (calculators, day planner) that run in your browser;
submit our contact form;
manage cookie preferences;
communicate with us by email or phone.

Our Cookie Policy explains how we use cookies and similar technologies.

3. What personal information we collect (APP 1, APP 3)

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Contact details — name, email address, message content, and the fact that you gave consent on the contact form.
Technical and usage data — IP address, date and time of access, browser and device type, operating system, referring URL, pages viewed, and general location inferred from IP (e.g. city/region).
Cookie and preference data — records of your cookie choices (stored locally in your browser and, where applicable, on our systems).
Communications — copies of correspondence if you contact us.

We do not intentionally collect sensitive information (as defined in the Privacy Act), such as health records, racial or ethnic origin, or political opinions. Please do not send sensitive information via the contact form unless necessary; if you do, you consent to our handling it for the purpose you provide it.

Interactive tools on this site process inputs in your browser; we do not receive calculator or “Plan My Day” inputs unless you voluntarily send them to us (e.g. in an email).

4. How we collect information (APP 3, APP 5)

Directly from you (contact form, email, phone).
Automatically through server logs and cookies when you use the site.
From service providers that host or support the website (see section 8).

Where reasonable, you may interact with limited parts of the site without identifying yourself (APP 2). The contact form and certain features require identification. Pseudonyms are accepted in messages unless we need your real name to respond to a legal or privacy request.

We do not ask for government related identifiers (such as Medicare, tax file number, or driver licence) through this website (APP 9).

5. Why we collect, use, and disclose information (APP 6)

We collect and use personal information only where reasonably necessary for:

responding to enquiries and providing customer support;
operating, securing, and improving the website;
analytics and understanding how visitors use content (only with your consent for non-essential cookies);
marketing measurement if you consent to marketing cookies;
complying with legal obligations and resolving disputes;
establishing or defending legal claims.

We do not sell your personal information.

GDPR legal bases (where applicable): consent (non-essential cookies, optional marketing); legitimate interests (site security, responding to requests); legal obligation; performance of steps at your request before entering a contract.

6. Direct marketing (APP 7, Spam Act 2003)

We will not send you marketing email or SMS unless you have consented or we are otherwise permitted by law. If we send commercial electronic messages, they will identify us, include our contact details, and contain a functional unsubscribe facility. You may opt out at any time by using the unsubscribe link or emailing us.

7. Storage, security, and retention (APP 11)

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Measures may include HTTPS encryption, access controls, secure hosting, and limiting staff access.

No online transmission is completely secure. You are responsible for keeping your email account secure.

Typical retention periods:

Contact form and email enquiries — up to 24 months, or longer if required for legal or dispute purposes;
Server and security logs — typically up to 90 days;
Cookie consent records — up to 12 months;
Records we must keep by law — as required by applicable legislation.

When information is no longer needed, we take reasonable steps to destroy or de-identify it.

We take reasonable steps to ensure personal information we collect is accurate, up to date, and complete (APP 10), including correcting records when you notify us of an error.

8. Disclosure to third parties and overseas recipients (APP 6, APP 8)

We may disclose personal information to:

website hosting and IT service providers;
email and communication service providers;
analytics or advertising partners — only if you consent to those cookies;
professional advisers (lawyers, accountants) where necessary;
regulators or law enforcement when required or authorised by law.

Some providers may store or process data outside Australia (for example in the United States, European Union, or Singapore). Where we disclose information overseas, we take reasonable steps to ensure overseas recipients handle information in accordance with APP 8, such as contractual clauses, adequacy decisions, or your consent where appropriate.

Before we enable third-party analytics or marketing tools, we will describe them in our Cookie Policy.

9. Notifiable Data Breaches (Privacy Act Part IIIC)

If we experience an eligible data breach that is likely to result in serious harm to individuals, we will comply with the Notifiable Data Breaches scheme: assess the incident, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) when required, and take steps to contain and remediate the breach.

10. Your rights — Australia (APP 12, APP 13)

Subject to exceptions under the Privacy Act, you may:

request access to personal information we hold about you;
request correction if information is inaccurate, out of date, incomplete, irrelevant, or misleading;
withdraw consent for optional processing (e.g. non-essential cookies) — this does not affect processing already lawfully carried out;
complain about our handling of your information (see section 12).

We will respond to access and correction requests within a reasonable period, generally within 30 days. We may need to verify your identity. We may charge a reasonable fee for manifestly unfounded or excessive requests, as permitted by law.

11. Your rights — EEA/UK visitors (GDPR)

If GDPR applies to you, you may also have rights to erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You may lodge a complaint with your local supervisory authority. Our lead contact for GDPR requests is the email address in section 1.

12. Complaints

If you believe we have interfered with your privacy, contact us first. We will acknowledge your complaint within a reasonable time and aim to resolve it within 30 days.

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001, Australia

13. Children

This website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take reasonable steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. Material changes — including new uses of AI — may be noted on the website and, where required, we will seek fresh consent for new processing activities.

15. How we comply with the 13 Australian Privacy Principles (2026)

The table below summarises our approach. For detail, see the sections referenced.

APP	Principle (summary)	Our practice
APP 1	Open and transparent management	This policy, Cookie Policy, Terms, About Us page, contact details
APP 2	Anonymity and pseudonymity	Browsing without login; pseudonyms allowed unless identity is required by law
APP 3	Collection of solicited information	Fair collection for defined purposes; consent for optional cookies
APP 4	Dealing with unsolicited information	Unsolicited data destroyed or de-identified if not needed
APP 5	Notification at collection	Explained in this policy and at contact form / cookie banner
APP 6	Use and disclosure	Only for stated purposes; no sale of personal information
APP 7	Direct marketing	Opt-in / lawful basis; unsubscribe available
APP 8	Cross-border disclosure	Reasonable steps for overseas processors (section 8)
APP 9	Government related identifiers	Not collected on this website
APP 10	Quality of personal information	Accuracy checks; correction on request
APP 11	Security	HTTPS, access controls, retention limits (section 7)
APP 12	Access	Access requests within reasonable time (section 10)
APP 13	Correction	Correction requests welcomed (section 10)

16. Artificial intelligence (AI), algorithms & automated technology (2026 transparency)

Australian regulators and international standards increasingly require clear disclosure when automated or AI systems affect what users see or receive. We describe our current and intended use below.

16.1 Current status on this website

No AI chat or automated consultation: We do not operate a live chatbot, virtual coach, or AI system that provides personalised professional, medical, legal, or financial advice on washshoulderan.ddd.
Planning tools (“Plan My Day”, “Count Your Hours”): These use fixed rules in your browser (JavaScript). They are not machine-learning models and do not train on your inputs. Data you enter is not sent to our servers unless you copy it into an email or contact form.
Website text: Articles are prepared for general education. Where human editors use assistive software (including AI drafting aids) in production, content is reviewed before publication. It remains general information only — not automated personal advice about you.
Images: Photographs and graphics on this site are used as illustration for planning and desk-work themes. We do not present AI-generated product mock-ups (e.g. synthetic interior scenes selling physical goods) on this domain. If we later publish any synthetic or AI-generated image, we will label it clearly (for example: “Illustration — AI-generated”) adjacent to the image and update this section.

16.2 If we introduce AI features later

Before launching any new AI capability (including generative images, AI chat, or personalised recommendations), we will:

update this Privacy Policy and our About Us page;
explain what the system does, what data it uses, and whether outputs are automated;
obtain consent where required under the Privacy Act and APPs;
describe how to opt out or request human review where feasible;
identify overseas AI providers if personal information is sent abroad (APP 8).

16.3 Personal information and third-party AI services

If we use third-party AI platforms (for example cloud language or image models), personal information will only be sent where necessary, under contract, and with disclosures in this policy. We will not use your contact form messages to train public AI models without explicit consent.

16.4 Automated decision-making

We do not make decisions with legal or similarly significant effects about you based solely on automated processing. Calculator outputs are informal estimates for personal planning only.

16.5 Your choices

You may contact us to ask whether AI was involved in content you received, to object to optional AI-related processing, or to request access/correction of personal information used in any future AI feature. Email supportuse@washshoulderan.world with “AI disclosure” in the subject line.