Legal
Privacy Policy
Last updated 17 August 2026.
Who we are
The Defect Doctor provides independent diagnostic assessments for technology projects. This policy explains how we handle personal information, with reference to the Australian Privacy Principles and GDPR-style data protection practice.
What we collect
- Contact details you provide: name, surname, company, business email, role and optional phone number.
- Assessment responses you submit through the Project Health Check, and the score generated from them.
- Messages you send through the contact form.
- Basic technical information such as browser type and pages visited, where analytics consent is given.
Why we collect it
To generate and explain your diagnostic results, to respond to enquiries, to improve the assessment model, and to contact you about your assessment where you have asked us to. We do not sell personal information.
Confidentiality of assessment data
Assessment responses are stored in an access-controlled database. They are readable only by authorised administrators of The Defect Doctor, protected by authentication and row-level access rules. They are not exposed publicly, are not shared with third parties for marketing, and are not passed to any other business without your explicit request.
Cookies and analytics
We use essential storage to run the site and to save your health check progress in your own browser. Optional analytics is only enabled where you consent using the banner shown on your first visit. You can withdraw consent by clearing site data in your browser.
Retention
We keep assessment and enquiry data only as long as needed for the purposes above, and then delete it. You can request deletion at any time.
Your rights
You may request access to, correction of, or deletion of your personal information, and you may object to its use. Contact us through the contact page and we will respond within a reasonable period.
Security
We apply production-grade security practices including authenticated administrative access, role-based authorisation, server-side validation of submitted data, and encrypted transport. No system is perfectly secure, but assessment data is treated as confidential commercial information.