Privacy Policy
1. Purpose of this policy
This Privacy Policy explains how Tim Elleston manages personal information in connection with the Traffic Escort Wardens App. We aim to apply privacy-by-design principles and Australian Privacy Principle-style safeguards, whether or not every provision of the Privacy Act 1988 (Cth) applies to us in every circumstance.
2. Information we may handle
| Category | Examples |
|---|---|
| Account and contact information | Name, email address, phone number, account status, user role and access settings. |
| Subscription information | Subscription status, billing dates, Stripe customer and transaction references. We do not ordinarily store full payment-card details. |
| Operational information | Assigned work orders, dates, locations, routes, statuses, permits, vehicle and registration details, drivers, pilots, licence details, TESS-related status and operational notes. |
| Technical and audit information | Login and access records, timestamps, device/browser information, IP address where available, import and upload logs, error and security events. |
| Support communications | Questions, feedback, screenshots and correspondence you send us. |
3. Main Roads information
Main Roads owns and controls its work orders, permits, records and source-system content. We handle that information only to provide the Service to authorised users, support authorised operational duties, maintain security and reliability, and comply with lawful requirements. We do not sell Main Roads information.
4. How information is collected
Information may be collected directly from you, from authorised users, from Main Roads or TESS systems through authorised credentials and workflows, from email imports, from connected services, and automatically through use of the Service.
5. Why we handle information
- to create and administer accounts and subscriptions;
- to present assigned work orders and permits to authorised users;
- to support authorised upload, download, validation, calendar, notification and audit workflows;
- to maintain security, investigate incidents and prevent misuse;
- to provide support, improve reliability and fix defects;
- to meet legal, accounting and dispute-resolution obligations; and
- to comply with lawful directions and applicable Main Roads requirements.
6. Disclosure and service providers
Information may be processed by service providers necessary to operate the Service, which may include Google and AppSheet, Microsoft, Stripe, hosting and infrastructure providers, email providers, monitoring and backup services, and professional advisers. We seek to limit disclosure to what is reasonably required for the relevant function.
Some providers may process or store information outside Australia. Their locations and arrangements may change. We will maintain a current list of material service providers on request or in a published service-provider notice.
7. Security
We use controls designed to reduce unauthorised access, including authenticated accounts, user-specific record filtering, role and access controls, access expiry, audit logging, protected credentials, backups and operational monitoring. No internet service can guarantee absolute security.
Users must protect their credentials and devices and notify us promptly of suspected compromise or incorrect access.
8. Retention and deletion
We retain information only for as long as reasonably needed to provide the Service, support authorised operations, maintain audit and security records, resolve disputes, meet legal obligations, or comply with Main Roads requirements. When information is no longer required, we will take reasonable steps to delete or de-identify it, subject to backup cycles and lawful retention requirements.
When a user's engagement or authorisation ends, access will be disabled and associated data will be handled according to operational, legal and Main Roads requirements.
9. Access and correction
You may ask to access or correct personal information we hold about you. Operational source records may need to be corrected in the authoritative Main Roads or TESS system rather than in the Service. Contact timelleston@gmail.com.
10. Data incidents
We maintain a process for assessing and responding to suspected privacy and security incidents. Where required by law or an applicable contractual arrangement, we will notify affected parties and relevant authorities.
11. Complaints
Send privacy questions or complaints to timelleston@gmail.com. We will investigate and respond within a reasonable period. You may also have rights to contact the Office of the Australian Information Commissioner or another relevant regulator.
12. Changes
We may update this policy as the Service, law, technology or operational requirements change. The current version and effective date will be published on the website.
13. Contact
Tim Elleston
ABN: No ABN
54 Jamison Grove, Wellard, WA 6170
Email: timelleston@gmail.com
Operator details
Tim Elleston
ABN: No ABN
54 Jamison Grove, Wellard, WA 6170
Email: timelleston@gmail.com