Privacy notice
Clear handling at the point information is collected.
This notice covers email enquiries, optional external booking, the client workspace and earlier enquiry records. Last updated 9 September 2026.
Resources and templates
Guides and blank templates can be read, copied or downloaded without an account. The copy button places the provided template on your device’s clipboard.
There is no form for submitting completed templates to Cumulative. We do not receive what you add to a copy in your own tools unless you choose to send it to us.
Who this notice covers
Cumulative Consulting Pty Ltd, based in Canberra, operates the Cumulative website, consulting enquiry and client workspace described here.
This notice is written as a practical privacy baseline using the Australian Privacy Principles as guidance. It does not claim that every Privacy Act obligation necessarily applies to every Cumulative activity.
What we collect
When you contact us by email, we receive your email address and the details you choose to share about your project, problem and timing. The public Contact page does not submit a form to our database.
Historical enquiry forms recorded contact and business details, preferred contact method, timing, message, consent, form source, submission time and a private reference. Those records remain separate from authenticated client workspaces.
For a client workspace, we hold account identity, your optional onboarding-email preference and when it was recorded, your consulting brief (project name, optional organisation, area of help, challenge, desired outcome and optional timing), and project messages. For a free Website First Look, we also hold the website address, the goal you provide and the time of your request. Historical workspaces may also contain contact-consent records, business profiles, package records, earlier briefs and files.
Please do not submit health, financial, identity-document or other sensitive information in an initial enquiry or through workspace forms.
Booking and external links
If a booking link is available, it opens an external scheduling page. No calendar is embedded on this website, and we do not add your personal details to the link. Information you enter on the scheduling page is handled under that provider’s privacy notice and shared with us to arrange the conversation.
You can use email instead. Links to featured projects also take you to separate websites with their own privacy information.
Voice input
Where optional voice input is offered on an earlier enquiry form, it has a text alternative. The consulting brief uses text fields. Cumulative asks before microphone use. In the current experience, Cumulative does not upload or retain a raw audio recording.
Your browser or its speech-recognition provider may process audio under its own settings and privacy terms. Only a transcript you approve is added to the relevant text field and submitted to Cumulative.
Why we use the information
We use enquiry information to respond, understand your project and keep a record of the request. Earlier public enquiry forms keep their records separate from authenticated client workspaces.
For account holders, we use workspace information to secure the account, deliver your requested free website review, review the consulting brief, discuss a proposed scope and deliver work after agreement. Authorised Cumulative operators can read your review request, brief and project conversation to respond. Submitting a brief does not select a subscription or trigger payment.
Onboarding emails are optional and separate from account and project messages. We record your preference separately. Earlier contact consent does not opt you into this series. You can change your preference by contacting us.
Storage and providers
The current application uses Supabase for authentication, database records and private project-file storage. Access is limited by signed-in user and client-organisation rules.
Managed providers may process information outside Australia. Exact production regions, subprocessors and any overseas disclosures must be confirmed and added here before the public service is deployed.
Retention and deletion
Historical form enquiries are marked for review 90 days after submission. We remove or de-identify information that is no longer needed for an active conversation, a requested privacy response, security evidence or a lawful recordkeeping purpose.
Client workspace records are retained while the service is active and ordinarily for 90 days after closure to support export and handover. Some commercial or financial records may need to be retained for longer where required.
Access, correction and complaints
You can ask what Cumulative holds about you, request a correction or deletion, withdraw future contact consent, or raise a privacy concern by emailing the privacy contact below from the address used for your enquiry or account.
We may need to verify identity before disclosing, correcting or deleting personal information. We aim to acknowledge a privacy request within one business day and will explain any information we cannot remove.
Further guidance
The Office of the Australian Information Commissioner publishes guidance on clear privacy policies and notices at the point of collection. See the OAIC privacy-policy guide.