Privacy policy

This policy explains what personal information REENVA PTY LTD (Reenva, we, us) collects through reenva.com.au. It also explains why we collect it and what we do with it.

We have based this policy on the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). We use them as our guide for handling personal information.

1. In brief: what we collect, who sees it and your choices

• We collect the details you send us by form, email or phone. We use them to reply to you.
• Form enquiries are stored in a Google Sheet in our own Google account, and kept for two years.
• Analytics tools that use cookies run only if you choose “Accept all”.
• We do not sell your personal information.
• Our service providers are based outside Australia, and some of our team work overseas.
• You can ask to see or correct the information we hold about you.

2. Who is responsible for your information

REENVA PTY LTD (ABN 52 699 587 409, ACN 699 587 409) is an Australian company. It is responsible for the personal information this policy describes. Our contact details are at the end.

3. The details you give us when you get in touch

You choose what to send us. We collect:

• Contact form: your name, company, role, work email and message. Industry and phone number are optional.
• ESG reporting platform form: your name, company, role, which climate or ESG reporting applies to you, and email. Phone number is optional.
• Email or phone: whatever you choose to tell us, plus your email address or phone number.

Please don't send sensitive information, such as health details. We don't need it to reply.

By email or phone, you can ask a general question without giving your name. To reply, we do need an email address or phone number.

4. What happens when you send a form

Your details go from our server into a Google Sheet in our own Google account. Only the people at Reenva who handle enquiries can open it. We use it to keep track of enquiries and reply to them.

The sheet records what you typed, the page you sent it from, and the time you sent it. Google, as the provider of the sheet, stores it for us, and may store it outside Australia. We don't send your IP address to the sheet.

We may also email a copy of each enquiry, including your message, to a Reenva address, so we see it and answer it.

If we later connect a customer records system (HubSpot), it receives a copy of your enquiry. That copy includes your IP address, and the web address and title of the page you were on. If HubSpot tracking is on and you chose “Accept all”, it also links the form to your earlier visits.

Once our spam check is connected, we first turn your IP address into a scrambled code (a one-way hash). Our spam-check service, Upstash, counts forms by that code. It never receives your IP address.

If the form can't send your enquiry, it tells you so when you press send, and shows our email address and phone number instead.

Once the form confirms your enquiry on screen, we store it moments later. That step almost always works. If it ever fails, we have no record of your enquiry — so if you don't hear from us within two business days, please email or call us.

Two checks guard against automated spam: a hidden field, and how long the form was open before you pressed send. A submission that fails either one is discarded, and nothing is stored. A person filling the form in normally will not trip them.

5. What we use your information for

• To reply to your enquiry and arrange a call
• To prepare for, and follow up on, our conversations with you
• To keep the site and its forms secure, and to stop spam
• To meet our legal obligations

We do not sell your personal information or share it with advertising networks.

We won't add you to a marketing email list unless you ask us to.

6. Cookies and analytics: what runs, and what waits for your choice

This site does not set its own tracking cookies. Each analytics tool stays off until we switch it on.

If no optional tool is switched on, you won't see a cookie banner. There is nothing to choose.

Tools that load only after you choose “Accept all”

If we switch on any of these tools, a banner asks you first. Each one sets cookies in your browser.

• PostHog records the pages you view, what you click and which form fields you use (never what you type). It shows us which pages help visitors.
• HubSpot tracking sets cookies, including one called hubspotutk, that link your visits to any form you later send.
• Contentsquare records how visitors scroll, click and move through pages. It shows us where pages confuse people.

Switched on in this version of the site: none.

Our enquiry sheet is not an analytics tool and sets no cookies. It only receives what you send us through a form (section 4).

Cookie-free visit counts

We may also switch on Vercel Web Analytics. It counts page visits and measures page speed without using cookies. Because it sets no cookies, it runs whether you choose “Accept all” or “Essential only”.

In this version of the site, it is switched off.

How we save your choice, and how to change it

No optional tool is switched on, so there is no choice to save.

You can also block cookies in your browser. The site and its forms still work.

7. Who else handles your information

These organisations may handle your information:

• Our website host receives standard details when you load a page, such as your IP address and browser type. It uses them to deliver and protect the site.
• Google stores our enquiry sheet, as the provider of Google Sheets.
• HubSpot would store a copy of form enquiries, if we connect it.
• Upstash, once our spam check is connected, receives only the scrambled code described in section 4.
• PostHog, HubSpot tracking and Contentsquare receive browsing data only if we switch them on and you choose “Accept all”.
• Government bodies, courts or police may receive information where the law requires or allows it.

8. Some of your information may be handled outside Australia

Our service providers are companies based outside Australia. Some may store your information overseas. Google, which stores our enquiry sheet, is one of them.

Reenva is based in Melbourne. Team members in India and the United Arab Emirates may help answer your enquiry or deliver your project.

When your information is handled overseas, we take reasonable steps to protect it as this policy describes.

9. How we protect your information, and how long we keep it

The site uses HTTPS, so what you send is encrypted on its way to us. Our server checks every form before passing it on. A hidden field helps block spam bots.

No system is completely secure. We can't promise your information will never be accessed without permission.

If a data breach is likely to cause you serious harm, we will tell you and the Australian privacy regulator.

We keep form enquiries for two years from the day you send them, then delete them from the sheet. We keep other details only while we need them for the reasons in section 5, or while the law requires. Then we delete them or remove what identifies you.

10. You can see and correct what we hold about you

Ask us what personal information we hold about you. If any of it is wrong, out of date or incomplete, ask us to correct it.

Email info@reenva.com.au. We may need to confirm who you are first. We aim to reply within 30 days.

If we can't give you access or make a change, we will tell you why in writing.

If you live outside Australia, local privacy laws may give you other rights. Contact us to use them.

11. How to complain, and where to go next

If you think we have mishandled your personal information, email us first. Tell us what happened and what you would like us to do. We aim to reply within 30 days.

If you are not happy with our reply, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Other websites have their own privacy policies

This site links to other websites. Their owners decide how they handle your information, so check their privacy policies.

13. When this policy changes

We will update this policy when we change how we handle personal information, such as when we switch on a new tool. The date at the top shows the latest version.

14. Contact us about privacy

For privacy questions, access requests or complaints, contact: