What is a Prompt Privacy Policy

2. What personal information is collected

1. What is a Prompt may, from time to time, collect and store personal information you submit to our website or services, whether provided to us directly or given to us in other forms.
2. You may provide basic information such as your name, phone number, postal address and email address to enable us to send you information, provide updates and process your product or service order.
3. We may collect additional information at other times, including but not limited to, when you provide feedback, information about your personal or business affairs, change your content, email or marketing preference, respond to surveys and/or promotions, provide financial or credit card information, or communicate with our customer support.
4. Additionally, we may also collect any other information you provide while interacting with us.

3. How we collect your personal information

1. What is a Prompt collects personal information from you in a variety of ways, including when you interact with us electronically (including via cookies) or in person, when you access our website or services, and when we engage in business activities with you. We may receive personal information from third parties in connection with your use of our website or services (e.g. payment processors). If we do, we will protect it as set out in this Privacy Policy.
2. By providing us with personal information, you acknowledge and consent to the handling of that information in accordance with the terms of this Privacy Policy.
3. You have the right to deal with us anonymously or under a pseudonym unless it is impracticable for us to do so or where we are required by law to deal only with identified individuals.
4. Please be aware that, if you withhold your personal information, it may not be possible for us to provide you with our products and services or for you to fully access our website.

4.How we use your personal information

1. With your consent where required, What is a Prompt may use personal information collected from you to provide you with information about our products or services. We may also make you aware of new and additional products, services and opportunities. You may opt out of direct marketing at any time by using the unsubscribe mechanism in our messages or by notifying us in writing.
2. What is a Prompt will handle personal information only as permitted by law and for the purposes described in this Privacy Policy. This may include to:
1. provide you with products and services during the usual course of our business activities;
2. administer our business activities;
3. manage, research and develop our products and services;
4. provide you with information about our products and services;
5. communicate with you by a variety of measures including, but not limited to, by telephone, email, SMS or mail; and
6. investigate any complaints.
3. We may disclose your personal information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, legal proceedings or in response to a law enforcement agency request.
4. If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases.
5. We retain personal information for ninety (90) days after our business relationship ends or your last service interaction, after which it will be securely deleted, de-identified, or anonymised unless we are legally required to retain it longer. You may request earlier deletion of your data by contacting our Privacy Officer.

5. Disclosure of your personal information

1. What is a Prompt may disclose your personal information to our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this Privacy Policy and subject to confidentiality and security obligations.
2. Access to your personal information is limited to people who need it to perform their duties. Other than in the course of providing our products and services or as otherwise described in this Privacy Policy, we will not share personal information with any third party except where required or permitted by law or with your consent.
3. If we disclose your personal information to a third party in accordance with this clause, we will require that party to protect it in accordance with this Privacy Policy.

6. General Data Protection Regulation (GDPR) for the European Union (EU)

1. What is a Prompt will comply with the principles of data protection set out in the GDPR for the purpose of fairness, transparency and lawful data collection and use.
2. We process your personal information as a Processor and/or to the extent that we are a Controller as defined in the GDPR.
3. We must establish a lawful basis for processing your personal information. The legal basis for which we collect your personal information depends on the data that we collect and how we use it.
4. We will only collect your personal information with your express consent for a specific purpose and any data collected will be to the extent necessary and not excessive for its purpose. We will keep your data safe and secure.
5. We will also process your personal information if it is necessary for our legitimate interests, or to fulfil a contractual or legal obligation.
6. Where we rely on legitimate interests as a lawful basis, we conduct a balancing test to ensure our processing does not infringe your rights and freedoms. Our legitimate interests include improving our services, preventing fraud, ensuring network security, and direct marketing where appropriate. We will always consider whether your rights outweigh our interests before processing on this basis.
7. We process your personal information if it is necessary to protect your life or in a medical situation, it is necessary to carry out a public function, a task of public interest or if the function has a clear basis in law.
8. We do not collect or process any personal information from you that is considered "Sensitive Personal Information" under the GDPR, such as personal information relating to your sexual orientation or ethnic origin unless we have obtained your explicit consent, or if it is being collected subject to and in accordance with the GDPR.
9. You must not provide us with your personal information if you are under the age of 16 without the consent of your parents or someone who has parental authority for you. We do not knowingly collect or process the personal information of children.

7. Your rights under the GDPR

1. If you are an individual residing in the EU, you have certain rights as to how your personal information is obtained and used. What is a Prompt complies with your rights under the GDPR as to how your personal information is used and controlled if you are an individual residing in the EU
2. Except as otherwise provided in the GDPR, you have the following rights:
1. to be informed how your personal information is being used;
2. access your personal information (we will provide you with a free copy of it);
3. to correct your personal information if it is inaccurate or incomplete;
4. to delete your personal information (also known as "the right to be forgotten");
5. to restrict processing of your personal information;
6. to retain and reuse your personal information for your own purposes;
7. to object to your personal information being used; and
8. to object against automated decision making and profiling.
3. Please contact us at any time to exercise your rights under the GDPR at the contact details in this Privacy Policy.
4. We may ask you to verify your identity before acting on any of your requests.

8. Hosting and International Data Transfers

1. Information that we collect may from time to time be stored, processed in or transferred between parties or sites located in countries outside of Australia. These may include, but are not limited to, the United States of America (USA), United Kingdom (UK) and countries part of the European Economic Area (EEA).
2. We and our other group companies have offices and/or facilities in the United States of America (USA), United Kingdom (UK) and countries part of the European Economic Area (EEA). Transfers to each of these countries will be protected by appropriate safeguards, these include one or more of the following: the use of standard data protection clauses adopted or approved by the European Commission which you can obtain from the European Commission Website; the use of binding corporate rules, a copy of which you can obtain from What is a Prompt's Data Protection Officer.
3. The hosting facilities for our website are situated in the United States of America (USA), United Kingdom (UK) and countries part of the European Economic Area (EEA). Transfers to each of these Countries will be protected by appropriate safeguards, these include one or more of the following: the use of standard data protection clauses adopted or approved by the European Commission which you can obtain from the European Commission Website; the use of binding corporate rules, a copy of which you can obtain from What is a Prompt's Data Protection Officer.
4. Our Suppliers and Contractors are situated in the United States of America (USA), United Kingdom (UK) and countries part of the European Economic Area (EEA). Transfers to each of these Countries will be protected by appropriate safeguards, these include one or more of the following: the use of standard data protection clauses adopted or approved by the European Commission which you can obtain from the European Commission Website; the use of binding corporate rules, a copy of which you can obtain from What is a Prompt's Data Protection Officer.
5. You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
6. Where we transfer personal data to countries outside the European Economic Area (EEA), we implement additional technical and organizational measures including encryption of data in transit, regular security assessments of recipients, and contractual safeguards through Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46 of the GDPR.

9. Security of your personal information

1. What is a Prompt is committed to ensuring that the information you provide to us is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
2. Where we engage data processors to process personal information on our behalf, we do so on the basis that such data processors comply with the applicable data protection requirements (including the GDPR where relevant) and that have adequate technical measures to protect personal information against unauthorised use, loss and theft.
3. We use encryption protocols and other security best practices, however the transmission and exchange of information over the internet carries inherent risks and is undertaken at your own risk. We cannot guarantee the security of any information that you transmit to us, or receive from us. However, we will take all reasonable steps to protect the personal information we hold from misuse, interference and loss, as well as unauthorised access, modification or disclosure.
4. In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. Where required, we will also notify affected individuals without undue delay, including a clear description of the breach's nature and recommendations to mitigate potential adverse effects.
5. In Australia, where a breach is likely to result in serious harm, we will notify affected individuals and the OAIC as soon as practicable in accordance with the Notifiable Data Breaches scheme.

10. Access to your personal information

1. You may request details of personal information that we hold about you in accordance with the Privacy Act 1988 (Cth), and to the extent applicable the EU GDPR. If you would like a copy of the information we hold about you or believe that any information we hold is inaccurate, out of date, incomplete, irrelevant or misleading, please email our Privacy Officer. We will acknowledge your request within three (3) business days and substantively respond within thirty (30) calendar days.
2. We can send requested information to your postal address or email as you request. We do not charge a fee to make a request, but we may charge a reasonable fee were permitted by law to cover our administrative costs.

11. Complaints about privacy

1. If you have any complaints about our privacy practices, email our Privacy Officer with details of your complaint. We take complaints seriously and will acknowledge receipt within three (3) business days of receiving your written complaint and substantively respond within thirty (30) calendar days. Where permitted by law, we may extend the response period for complex matters and will notify you of any extension.
2. You should express any privacy concerns (including any alleged breach of the Australian Privacy Principles or any registered binding Australian Privacy Principles code) in writing.
3. Complaints should be addressed to:
1. Name and Position: Megan Futcher (Officer)
2. Address:
   PO BOX (tba.), Joondalup, WA, 6027, Australia.
3. Email: GDPR Email Address
4. You may also contact the Office of the Australian Information Commissioner (OAIC). Generally, the OAIC will require you to give us time to respond before they will investigate. For further information, visit www.oaic.gov.au or call the OAIC on 1300 363 992.

12. Changes to Privacy Policy

1. We may change this Privacy Policy from time to time. Any modifications will be effective immediately upon our posting of the modifications on our website or notice board. Please check back from time to time to review our Privacy Policy.

13. Website

1. When you visit our website
1. When you come to our website (betterprompt.com and whatisaprompt.com), we may collect certain information such as browser type, operating system, website visited immediately before coming to our site, etc. This information is used in an aggregated manner to analyse how people use our site, such that we can improve our service.
2. Cookies
1. We may from time to time use cookies on our website. Cookies are very small files which a website uses to identify you when you come back to the site and to store details about your use of the site. Cookies are not malicious programs that access or damage your computer. Most web browsers automatically accept cookies but you can choose to reject cookies by changing your browser settings. However, this may prevent you from taking full advantage of our website.
2. Our website may use cookies to analyse website traffic and help us provide a better website visitor experience. You are not identifiable from such information.
3. Cookies may be used to serve relevant ads to website visitors through third party services such as Google AdSense and Google Ads. These ads may appear on this website or other websites you visit.
4. Google's use of advertising cookies enables it and its partners to serve ads to your users based on their visit to your sites and/or other sites on the Internet.
5. Here is a list of the cookies we may use on our website:
1. main_id: This cookie is used to manage your personalisation and experience.
2. main_consent: This cookie is a backup of the consent preferences across domains.
3. _ga: This cookie is the primary analytics cookie for distinguishing users and lasts for 2 years.
4. _gid: This cookie distinguishes users for 24 hours and is used for short-term, session-based joining.
5. _gat: This cookie is used to limit the number of requests and typically expires after 1 minute.
6. _gcl_: This cookie is employed to measure conversions, especially across domains.
7. _gads: This cookie lasts for 13 months and is used by Google’s Ad Services to measure interactions and prevent fraud.
8. _gac_: This cookie lasts for 90 days and is also used in conjunction with Google Ads.
9. NID: This cookie is used to show Google ads in Google services for users who are not signed in.
10. IDE: These cookies are used to show Google ads on websites that are not owned by Google.
11. ANID: This cookie is used to show you personalized ads on Google sites based on your activity.
12. DSID: This cookie is used to identify a signed-in user on non-Google sites for ad personalization preferences.
3. Third party sites
1. Our site may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that What is a Prompt is not responsible for the content or privacy practices of other such websites. We encourage our users to be aware, when they leave our website, to read the privacy statements of each and every website that collects personal identifiable information.
4. Cookie Categories and Controls
1. We categorize cookies used on our website as follows:
1. Strictly Necessary cookies required for basic site functionality,
2. Functional cookies enabling enhanced features,
3. Security cookies help reduce fraudulent activity,
4. Performance cookies that help us improve our website,
5. Personalisation and Advertising cookies for personalized content, and
6. Ads User Data cookies used to measure conversions.
2. You can manage your cookie preferences through the Consent Preferences menu (in the page footer,) where you may enable or disable non-essential cookies at any time. In regions with cookie requirements and privacy directives, we will always ask for your explicit consent before placing non-essential cookies on your device.
3. You can withdraw this consent at any time through your browser settings or our Cookie Preferences Menu (or Manage Cookies link in the page footer).
4. You may opt out of Google Personalized Advertising by visiting Google Ads Settings.
5. You may opt out of a third-party vendor's use of cookies for personalized advertising by visiting YourAdChoices.

14. Effective date

This policy is effective from 17th January, 2026.