Last updated: 3 October 2026
This policy explains what SiteReady collects, why, who sees it and how to ask about it. It forms part of our terms of use. SiteReady is operated by [Legal entity name] Pty Ltd, ABN [number]. We handle personal information in line with the Australian Privacy Principles.
The task and details you enter are sent to the SiteReady server to prepare a preview, and sent back. The server does not keep them. A company profile you save without an account (name, ABN, address, phone, email and logo) stays in this browser on this device.
When you sign in, SiteReady keeps, for your business:
Only people in your business can see your business's SWMS, sites and sign-ons. A worker who opens a sign-on link can see that SWMS's task, high risk work, job steps and PPE so they know what they are signing.
We keep this information to provide the service. Your personal information and your business's content are not sold and are not used for advertising.
If you sign on to a SWMS by QR code, the business that owns the SWMS is collecting your name, employer, signature and sign-on time as its record that you were consulted on and understood the SWMS, as safety law requires. SiteReady stores that record for the business. We do not use it for anything else, and it is never included in industry data. The sign-on page tells you this before you sign. To see or correct your record, ask the business, or contact us and we will help.
We produce industry statistics from SWMS. The information used is limited to the state, the postcode, the trade, the type of work and job steps, the controls chosen (recorded as fixed categories, not the words you type), high risk work categories, plant and licence classes, the general type of project, and the month. It is stored separately from your account and never linked back to it.
These statistics never include your name, your business name, your workers, your site address, your logo or anything you type in free text. We only report a figure where it combines at least 10 separate businesses, counting a sole trader as one business, and we do not report figures that would let one business be worked out by elimination.
We may share or sell these statistics to third parties such as insurers, industry bodies, training providers and researchers. Anyone we supply them to must agree not to try to identify any business or person from them and not to pass them on.
You can opt out at any time by emailing us. We will leave your business's SWMS out from the date we receive your request. SWMS created before 3 October 2026 are not used for statistics we share or sell.
We send sign-in links, invitations from your team, and reminders when a saved SWMS is due for its 3 monthly review. We do not send marketing email without asking.
Sign-in links work once and expire after 20 minutes. Sessions and links are stored only as one-way hashes. Connections to SiteReady are encrypted. When you sign in, we record the network and device type used and keep that record for 90 days so we can detect misuse of accounts.
To limit how often the service can be used, the server keeps your IP address in memory for the length of the rate limit window, 15 minutes unless changed. It is not written to storage.
To see how SiteReady is used and fix problems, the server counts actions, such as a preview, a download, a saved SWMS or a worker sign-on, with the date and the business it was for. It does not keep the content in these counts. Server errors are logged with the page and the error message.
We do not collect your device's location, we do not use third-party analytics, and we do not use tracking cookies.
SiteReady does not send your details to an AI provider.
Saved SWMS and sites are kept while your account is active and for 12 months after you stop paying. Deleted SWMS are hidden at once and removed from our live systems within 30 days, and from backups as they are replaced. You can ask us to delete your business's data at any time and we will do so within 30 days.
You can see and change your business's details, SWMS and sites in the app at any time, and export your saved SWMS. For anything else, including a worker's sign-on record, email us and we will respond within 30 days. If you think we have mishandled your information, email us and we will look into it and reply within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
When we change this policy we update the date at the top. For a change that affects how we use your information, we will email the account administrator at least 30 days before it takes effect.