Clear handling at the point information is collected.

Cumulative Consulting Pty Ltd, based in Canberra, operates the Cumulative website, fit-enquiry journey and client workspace described here.

This notice is written as a practical privacy baseline using the Australian Privacy Principles as guidance. It does not claim that every Privacy Act obligation necessarily applies to every Cumulative activity.

For a public enquiry, we collect the name, email, optional or requested phone number, business details, service area, preferred contact method, timing and message you choose to provide. We also record consent, the form source, submission time and a private reference.

For an accepted client workspace, we also hold account identity, package and project details, the business brief, client-approved enquiry-handling rules, project messages and files the client chooses to supply.

Please do not submit health, financial, identity-document or other sensitive information through these forms.

Voice input is optional and always has a text alternative. Cumulative asks before microphone use. In the current experience, Cumulative does not upload or retain a raw audio recording.

Your browser or its speech-recognition provider may process audio under its own settings and privacy terms. Only a transcript you approve is added to the relevant text field and submitted to Cumulative.

We use enquiry information to respond, assess fit, arrange a scope conversation and keep a reliable record of the request. We do not create a client account, CRM record or payment from the public fit form.

For accepted clients, we use workspace information to deliver, secure and support the agreed website and customer-operations service.

The current application uses Supabase for authentication, database records and private project-file storage. Access is limited by signed-in user and client-organisation rules.

Managed providers may process information outside Australia. Exact production regions, subprocessors and any overseas disclosures must be confirmed and added here before the public service is deployed.

Unconverted public enquiries are marked for review 90 days after submission. We remove or de-identify information that is no longer needed for an active conversation, a requested privacy response, security evidence or a lawful recordkeeping purpose.

Client workspace records are retained while the service is active and ordinarily for 90 days after closure to support export and handover. Some commercial or financial records may need to be retained for longer where required.

You can ask what Cumulative holds about you, request a correction or deletion, withdraw future contact consent, or raise a privacy concern through the private enquiry route below. Select the privacy option and include the email address used in the original enquiry.

We may need to verify identity before disclosing, correcting or deleting personal information. We aim to acknowledge a privacy request within one business day and will explain any information we cannot remove.