privacy
Last updated 4th November 2026. This policy explains what personal information pivotworks collects, why, and what we do with it. We aim to handle personal information in line with the Australian Privacy Principles. "pivotworks", "we" and "us" means Giles C Stead trading as pivotworks, ABN 64 669 170 570.
What we collect
When you subscribe:
your name, business name, ABN, email address and billing address
your NetSuite account ID
your subscription and payment history
Card details: your card details go straight to our payment provider, Stripe. We only see the card type, the last four digits and the expiry date.
When you contact us: your name, email, company and whatever you choose to tell us.
When you visit the site: basic, non-identifying information about your visit, such as pages viewed and browser type.
What we don't collect. easyDun and our other bundles run entirely inside your NetSuite account. They don't send your NetSuite data, or your customers' details, to us.
Why we use it
to set up, bill and support your subscription
to send service emails, such as invoices, receipts, update notices and price-change notices
to answer your questions
to keep the business and tax records the law requires
to improve our products
to send you news about pivotworks, but only if you've agreed. Every marketing email has an unsubscribe link.
If you give us access to your NetSuite account. We use it only to install or support a bundle. We keep anything we see confidential, including your customers' details, and end the access when the job is done.
Who we share it with. We don't sell personal information. We share it only with:
the service providers that run our business: Stripe (payments), Framer (website and contact form), Zoho (customer records and email) and Zapier (notifications)
our accountant or other professional advisers
government bodies, when the law requires it.
Information stored overseas. Some of these providers store information outside Australia, including in the United States. Zoho stores ours in Australia. We choose providers with strong security practices.
How we keep it safe. We use two-step sign-in on every account, limit who has access, and never store card details. No system is completely secure. If a data breach is likely to cause you serious harm, we'll tell you as soon as we can, and tell the Office of the Australian Information Commissioner (OAIC) where required.
How long we keep it. Business and tax records are kept for 5 years, as the ATO requires. Contact-form messages from people who don't become customers are deleted after 2 years.
Seeing or correcting your information. Email us at grow@pivotworks.au to ask what we hold about you, or to correct it. We'll respond within 30 days, at no charge.
Complaints. Email us first, and we'll respond within 30 days. If you're not satisfied, you can contact the OAIC at oaic.gov.au or on 1300 363 992.
Changes to this policy. We'll post any changes here with a new "last updated" date, and email customers about significant changes.