Privacy Policy
Last updated: July 2026 | Taine Foxcroft trading as CutCycle (ABN 71 463 916 455)
The Short Version
We know privacy policies are long. Here is what matters:
- We collect only what we need to mow your lawn, send you invoices, and run the app.
- Your payment card details go straight to Stripe. We never see or store your card number.
- Your data is stored in Australia (Sydney) and encrypted in transit and at rest.
- We never sell your personal information to anyone, for any reason.
- We share data only with the service providers listed below, and only what they need to do their job.
- You can request a copy of your data, ask us to correct it, or ask us to delete it at any time.
- We will email you at least 30 days before making any material changes to this policy.
- If you have a complaint, we will respond within 30 days. You can also go to the OAIC.
1. Scope and Application
This privacy policy applies to all personal information collected, held, used, or disclosed by Taine Foxcroft trading as CutCycle (referred to as "CutCycle", "we", "us", or "our") through:
- The CutCycle mobile application for iOS and Android (the "App")
- The CutCycle website at cutcycle.com.au (the "Website")
- Any direct communication with us, including email, phone, and SMS
- The delivery of our garden maintenance services
CutCycle is bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy describes how we comply with those obligations.
By using our App, Website, or services, you acknowledge that you have read and understood this policy. If you do not agree with this policy, please do not use our services.
2. What We Collect and Why
We collect personal information that is reasonably necessary for our business functions. We do not collect information we do not need. The table below sets out the types of information we collect, why we collect it, and the relevant Australian Privacy Principle.
| Category | What We Collect | Why We Collect It |
|---|---|---|
| Account Information | Full name, email address, phone number, hashed password | To create and manage your account, authenticate your identity, and communicate with you about your services |
| Property Information | Street address, suburb, postcode, lawn size (square metres), photos of property | To quote accurately, schedule services, assign appropriate crew and equipment, and route our vehicles efficiently |
| Payment Information | Billing name, billing address, Stripe customer ID, payment method type, last four digits of card | To process subscription payments, issue invoices, and handle refunds. Full card details are collected and stored exclusively by Stripe; we never see or store your complete card number, expiry, or CVV |
| Location Data | GPS coordinates of your property address | To optimise crew scheduling and vehicle routing. We do not track the live location of customers or their devices |
| Usage Data | App interactions, features used, screens visited, timestamps | To understand how the App is used so we can improve it, fix bugs, and prioritise new features |
| Communications | Messages sent through the App, SMS and email delivery records, notification preferences | To provide customer support, keep a record of service-related conversations, and respect your communication preferences |
| Device Information | Device type, operating system version, push notification token | To send you push notifications (job confirmations, crew arrival, invoices) and to troubleshoot App issues |
| Employee Data | Work hours, check-in and check-out times, vehicle assignments, equipment sign-out records | To manage crew schedules, track service delivery, maintain equipment accountability, and meet employment and workplace health and safety obligations |
How We Collect Information
We collect personal information in the following ways:
- Directly from you — when you create an account, fill in your property details, communicate with us, or update your preferences in the App
- Automatically — when you use the App or Website, we automatically collect device information and usage data
- From third parties — we may receive address validation data from Google Maps API when you enter your property address
Sensitive Information
We do not collect sensitive information as defined under the Privacy Act 1988 (such as health information, racial or ethnic origin, political opinions, or biometric data). If we ever need to collect sensitive information in the future, we will obtain your explicit consent first.
Unsolicited Information
If we receive personal information that we did not request and determine that we could not have collected it under the APPs, we will destroy or de-identify that information as soon as practicable, provided it is lawful to do so (APP 4).
3. How We Use Your Information
We use your personal information for the purposes for which it was collected and for directly related purposes you would reasonably expect (APP 6). Specifically:
Service Delivery
- Scheduling and performing garden maintenance at your property
- Assigning crew members and vehicles to your area
- Routing vehicles efficiently across daily job lists
- Communicating with you about upcoming visits, rescheduling (for example, due to weather), and completed jobs
Billing and Payments
- Processing subscription payments through Stripe
- Issuing invoices and receipts
- Managing overdue account follow-ups
- Handling refunds and payment disputes
Communications
- Sending service confirmations, reminders, and updates via push notification, SMS, or email
- Responding to your enquiries and support requests
- Sending invoices and payment receipts
Improving Our Service
- Analysing usage data to improve the App and our operations
- Identifying and fixing technical issues
- Understanding which features are most useful to customers
Legal and Regulatory
- Meeting our obligations under Australian tax law (including GST and BAS reporting)
- Complying with employment and workplace health and safety regulations
- Responding to lawful requests from regulators or law enforcement
We will not use your personal information for direct marketing unless you have given us your express or implied consent. You can opt out of marketing communications at any time by updating your preferences in the App or contacting us through the App.
5. Storage and Security
We take the security of your personal information seriously and take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification, and disclosure (APP 11).
Technical Safeguards
- Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS 1.2 or higher
- Encryption at rest: All data stored in our database is encrypted at rest using AES-256 encryption
- Password security: User passwords are salted and hashed using industry-standard algorithms. We never store passwords in plain text
- Payment card data: Full card details are collected, transmitted, and stored exclusively by Stripe within their PCI DSS Level 1 certified environment. CutCycle systems never handle complete card numbers
- Australian data residency: Our primary database is hosted by Supabase in the AWS Sydney (ap-southeast-2) region
- Access controls: Access to personal information is limited to authorised personnel who require it to perform their duties
Operational Safeguards
- Regular review of data access logs
- Employee training on data handling obligations
- Secure disposal of data that is no longer required
No method of electronic storage or transmission is 100% secure. While we take reasonable steps to protect your personal information, we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with Part IIIC of the Privacy Act 1988 (Notifiable Data Breaches scheme).
6. Data Retention
We retain your personal information only for as long as it is needed for the purposes for which it was collected, or as required by law (APP 11.2).
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Duration of active subscription, plus 30 days | To provide services and allow for reactivation |
| Financial records | 7 years after the relevant financial year | Required by the Australian Taxation Office for GST and income tax purposes |
| Employment records | 7 years after the employment relationship ends | Required under the Fair Work Act 2009 (Cth) |
| Usage and device data | 12 months | App improvement and troubleshooting |
| Communications | 3 years, or the duration of the subscription (whichever is longer) | Customer support records and dispute resolution |
| Property photos | Deleted within 30 days of account closure or upon request | No ongoing legal obligation to retain |
When personal information is no longer needed and no legal obligation requires us to keep it, we will take reasonable steps to destroy it or permanently de-identify it.
7. Your Rights
Under the Australian Privacy Principles, you have the following rights regarding your personal information:
Right to Access (APP 12)
You can request a copy of the personal information we hold about you. We will respond to your request within 30 days. There is no charge for making a request, but we may charge a reasonable fee for providing access if the request requires significant effort to compile (we will let you know in advance).
Right to Correction (APP 13)
If you believe any personal information we hold about you is inaccurate, incomplete, out of date, irrelevant, or misleading, you can ask us to correct it. You can update most of your information directly in the App (account settings, property details, notification preferences). For anything else, contact us and we will correct it within 30 days.
Right to Deletion
You can request that we delete your personal information. We will action your request within 30 days, except where we are required to retain certain records by law (such as financial records for tax purposes). We will tell you what we can and cannot delete and why.
Right to Withdraw Consent
Where we rely on your consent to process personal information, you can withdraw that consent at any time. This includes opting out of marketing communications and push notifications. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.
How to Exercise Your Rights
To make a request, contact us through the App (navigate to Settings > Support > Privacy Request) and select the type of request: Access, Correction, or Deletion.
We will verify your identity before processing any request. We may ask you to confirm details associated with your account so that we can be confident we are disclosing information to the right person.
Apple and Google App Store Rights
If you downloaded the App from the Apple App Store or Google Play Store, you may also have additional rights under those platforms' terms. You can delete your account directly from within the App at any time by navigating to Settings and selecting "Delete my account".
8. Cookies and Tracking
Our approach to cookies is minimal:
Website (cutcycle.com.au)
- Session cookies: We use session cookies to keep you logged in while you browse. These expire when you close your browser.
- No tracking cookies: We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites.
- No retargeting: We do not use any retargeting or remarketing pixels.
Mobile App
- The App does not use cookies. Authentication is handled via secure tokens stored locally on your device.
- We do not use any third-party advertising SDKs or cross-app tracking identifiers.
- We do not participate in Apple's App Tracking Transparency framework because we do not track users across apps or websites owned by other companies.
9. Children's Privacy
CutCycle's services are designed for property owners and managers aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18.
If we discover that we have inadvertently collected personal information from a person under 18 without verified parental consent, we will take steps to delete that information as quickly as possible.
If you believe we may have collected information from a person under 18, please contact us immediately through the App.
10. Overseas Disclosure
As outlined in Section 4, some of our third-party service providers are located outside Australia. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles information in a manner consistent with the APPs (APP 8).
The countries where your personal information may be processed include:
- Australia — primary database (Supabase, Sydney region)
- United States — payment processing (Stripe), SMS (Twilio), email (SendGrid), push notifications (Expo), maps and routing (Google)
We ensure that each overseas provider is bound by contractual obligations, privacy laws, or binding corporate rules that provide a comparable level of protection to the APPs.
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make changes:
- Material changes: We will notify you by email at least 30 days before the changes take effect. We will clearly describe what is changing and why.
- Minor changes: For non-material updates (such as formatting or clarification that do not affect your rights), we will update the "Last updated" date at the top of this page.
The current version of this policy is always available at cutcycle.com.au/privacy.
Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may close your account before the changes take effect.
12. Contact Us and Complaints
Contact
If you have any questions about this privacy policy or how we handle your personal information, contact us:
- Privacy Officer: Taine Foxcroft trading as CutCycle
- Contact: Through the CutCycle App (Settings > Support)
- Address: Brisbane, QLD, Australia
Making a Complaint
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you can make a complaint through the App (Settings > Support > Privacy Complaint).
Our complaint handling process:
- We will acknowledge your complaint within 5 business days.
- We will investigate and provide a written response within 30 days.
- If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).
Office of the Australian Information Commissioner (OAIC)
If you are not satisfied with how we have handled your complaint, you have the right to lodge a complaint with the OAIC:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Email: enquiries@oaic.gov.au
- Post: GPO Box 5288, Sydney NSW 2001
We encourage you to contact us first so we have the opportunity to resolve your concern directly. Most issues can be resolved quickly and informally.