Privacy statement
Last updated: [DATE]
I only collect what I need to run my workshops, plans, newsletter and app. I never sell your information. Health and personal details for NDIS participant plans are collected only with consent and used only to write that plan. You can ask to see, fix or delete your information any time.
Who we are
Disaster Scout is run by Morgan Dunn, [trading as / operated by: DISASTER SCOUT, ABN 80 334 556 612], based in Queensland, Australia. In this statement, “we”, “us” and “Disaster Scout” mean that business. You can reach us at hello@thedisasterscout.com.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). For people in Canada, we also aim to meet the Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect, and why
When you contact us
Your name, email, organisation and whatever you tell us in your message. We use it to reply and, if you go ahead, to provide the service.
When you book a workshop
Your name and email, so we can send your link and reminders. Bookings and payments are handled by [Luma / Stripe / Squarespace]. We never see or store your full card details.
When you join the newsletter
Your email address, managed through Substack. You can unsubscribe from any email.
When you use the Disaster Scout app
[Confirm what the app collects, for example: locations you search or save as Watch Zones, your email if you sign up for alerts, and anything you submit in a Community Report.] We use this to show you what’s happening near the places you care about. We don’t sell location data.
When you visit the website
Our website runs on Squarespace, which uses cookies and collects basic analytics (like pages visited and general location) so we can see what’s useful. You can block cookies in your browser settings.
NDIS participant emergency plans
When an NDIS provider engages us to write personal emergency plans, we collect information about each participant. This can include health information, medications, disability and care needs, communication preferences, mobility aids and equipment, and emergency contacts. This is sensitive information, so:
- We collect it only with the consent of the participant, or of the person legally able to consent for them.
- We collect only what’s needed for the plan, ideally from the participant and their supporters directly.
- We use it only to prepare, deliver and review that participant’s plan.
- Completed plans are given to the provider who engaged us, and to the participant in an accessible format.
- We keep working notes for [X months] after delivery, then securely delete them, unless you’ve engaged us for annual reviews.
Who we share it with
We never sell or rent your personal information. We share it only:
- With the services that help us run the business, such as Squarespace (website and forms), [Luma / Stripe] (bookings and payments), Substack (newsletter), Zoom (online workshops) and [Google Workspace / your email and file storage].
- With the NDIS provider who engaged us, for participant plans.
- When the law requires it, or when it’s needed to lessen a serious threat to someone’s life, health or safety.
Storing information overseas
Some of the services above store data outside Australia, mainly in the United States. We choose reputable providers with strong security, but overseas laws may differ from Australian law.
Keeping it safe
We keep information in password-protected, access-controlled systems with two-factor sign-in where available, and limit access to the people who need it. We keep information only as long as we need it, then delete or de-identify it. If a data breach is likely to cause serious harm, we’ll tell you and, where required, the regulator.
Your choices and rights
- See it: ask what information we hold about you.
- Fix it: ask us to correct anything that’s wrong or out of date.
- Delete it: ask us to delete it, unless we have to keep it by law.
- Stay anonymous: you can ask general questions without giving your name.
Email hello@thedisasterscout.com. We’ll respond within 30 days.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first so we can fix it. If you’re still not satisfied, you can contact the Office of the Australian Information Commissioner, or in Canada the Office of the Privacy Commissioner of Canada.
Children
Our workshops and newsletter are for adults. We don’t knowingly collect information from anyone under 18, except NDIS participants, and only with the consent of the person legally able to give it.
Changes to this statement
We’ll update this page if anything changes and update the date at the top.