Many Australian small businesses aren't legally required to have a privacy policy, but most should have one anyway. If your site collects names, emails or phone numbers through a form, a short privacy policy builds trust and is often required by the tools you use.
The small business exemption
Under the Privacy Act, most businesses with an annual turnover of $3 million or less are currently exempt from the Australian Privacy Principles. There are important exceptions, including health service providers that hold health information and businesses that trade in personal information. Reforms are being discussed, so check the latest position with the Office of the Australian Information Commissioner. This is general information, not legal advice.
Reasons to have one anyway
- Customers increasingly expect it before filling in a form.
- Google Analytics, advertising platforms and email tools generally require you to tell visitors how data is used.
- It prepares you if the exemption changes.
What a basic policy covers
- What information you collect, such as form details and analytics.
- Why you collect it and how you use it.
- Who you share it with, if anyone.
- How it's stored and protected.
- How people can access, correct or delete their information.
- How to make a complaint.
Every Ranktide site includes a plain-English privacy page. See our own privacy policy as an example, and the website checklist.
Want this done for you? See our website design packages, or get a free audit.