Privacy Policy

Last updated 21/09/2026

The short version

• You can read every page and use every tool without an account. An account keeps what the tools work out for you, so you are not asked again.
• Your account keeps your email address and the dates and figures the tools work out, such as a renewal date. The details you type into a tool are used to work out the answer and are not kept.
• What your account keeps is stored in Google Cloud’s Sydney region. Signing in is run by Google, which may process your sign-in details outside Australia.
• We do not sell your information, we do not use it for advertising and there are no trackers on this website.
• Ask us and we will show you everything we hold about you, correct it or delete it.

The rest of this policy gives the detail.

1. Who we are

Vaile Australia Pty Ltd (ABN 58 701 414 655), Level 10, 387 George Street, Sydney NSW 2000. In this policy, Vaile, we and us mean that company, and you means the person using Vaile.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy covers vaile.com.au, this website and the Vaile account you use its tools with.

2. What we collect and hold

• Your account. Your email address, and a unique identifier for your account. If you sign in with Google, Google also gives us the name and profile picture on your Google account. We keep a record of when your account was created and when you last signed in.
• What the tools work out for you. If you use a tool without an account, its answer is shown to you and not kept. When you use a tool while signed in, we keep the dates, numbers and yes-or-no answers in its result, such as a registration renewal date, CPD hours still to do or a Medicare levy surcharge amount, so you are not asked for them again. A kept figure can say something about you: a surcharge amount, for example, reflects your income range.
• What you type into a tool. Your income, your age, your state, your profession and the other details a tool asks for are sent to our server to work out the answer. They are used for that and are not kept.
• Technical information. When you visit or use a tool, our hosting and our servers receive your IP address, your browser and device type, the page or tool requested and when. It is used to run Vaile and to keep it secure.
• What you send us. If you email us, we keep your email address and what you write.

3. How we collect it

From you, when you create an account, use a tool or write to us. From Google, when you sign in with your Google account. And automatically, as technical information, when your browser asks our website or servers for something.

We do not buy personal information, and we do not collect it from anyone else.

4. Sensitive information

We do not ask for health information, a criminal record or your membership of a union or professional association, which the Privacy Act treats as sensitive information, and our tools do not keep them.

Some tools ask for details you may regard as sensitive even though the law does not class them that way, such as your visa, your passport country or when you registered with Medicare. What you enter is used only to work out that tool’s answer and is not kept. The answer’s own dates and figures are kept, like any tool’s, and some reflect what you entered: the Lifetime Health Cover deadline, for example, falls a year after the date you registered with Medicare.

Please do not put patient information, or anyone else’s health information, into Vaile.

5. Why we collect it

• To give you your account and the answers to the tools you use, and to keep the dates and figures they work out so you are not asked again.
• To sign you in, and to check on every request that it is you.
• To reply to you.
• To keep Vaile secure, to find and fix faults, and to prevent misuse.
• To meet our legal obligations.

We do not use your information for any other purpose unless you agree or the law allows it. We do not sell it, rent it or use it for advertising, and we do not build a profile of you for anyone else.

6. How the tools work out your answers

Our tools are computer programs. Each one takes the details you enter and the rules Vaile holds for your profession and state, and works out a figure or a date, such as what a roster should pay or when a deadline falls. The kinds of personal information they use are the details you enter into that tool and, where it asks, your profession and state.

No tool makes a decision about you. None approves or refuses anything, and none decides what you are entitled to: the answer is information for you to check and use. Where a tool cannot work something out from a rule we have checked, it says so rather than guess.

7. Staying anonymous

You can read every page and use every tool without giving us your name or any contact details. You need an account only if you want Vaile to keep what the tools work out, and even then you do not have to give us your real name: an email address is enough, and you can use any address you like.

8. Who we share it with

• Google, which provides the services Vaile runs on, under contract and only to provide them to us: Firebase Authentication, which signs you in and sends the sign-in links we email you; Firebase Hosting, which serves this website; and Google Cloud, where our servers run and your account’s figures are stored.
• A professional you ask us to introduce you to, such as a licensed broker or adviser, only with your agreement at the time, and only what you agree to share. Before any introduction we tell you whether we are paid for it.
• Anyone the law requires us to disclose to, such as a court or a regulator with the power to compel us.

We do not share your information with anyone else.

9. Information held or processed outside Australia

What your account keeps, and the servers that work out your answers, are in Google Cloud’s Sydney region.

Google’s sign-in service, Firebase Authentication, processes your email address, your sign-in details and the name and picture from a Google account in the United States and other countries where Google operates. Firebase Hosting serves this website from Google’s servers around the world, so the technical information in section 2 may be received outside Australia.

We take reasonable steps to make sure Google handles your information consistently with the Australian Privacy Principles, including through its contract with us, and we remain accountable for how it is handled.

10. How we protect it

• Every page and request is served over HTTPS only, and what your account keeps is encrypted where it is stored.
• There is no Vaile password: you sign in with Google or with a link we email you. A signed-in member’s request carries a sign-in token that our server checks before anything is kept or read.
• Each account can reach only its own figures. Our server looks them up from the checked sign-in, never from anything the browser claims.
• Only the people who run Vaile’s systems can reach them, each with their own account, and they do not look at an account’s figures unless you ask for help or the law requires it.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as soon as practicable, as the Notifiable Data Breaches scheme requires.

11. How long we keep it

We keep your account, and what it holds, while your account is open. If you close your account or ask us to delete it, we delete your account and everything it keeps within 30 days, unless the law requires us to keep something, in which case we will tell you what and why.

Technical logs of requests are kept for 30 days, then deleted. Emails you send us are kept while we need them to deal with what you asked.

12. Seeing, correcting and deleting your information

Email hello@vaile.com.au from the address your account uses and we will, within 30 days and at no cost to you:

• give you everything we hold about you;
• correct anything that is wrong; or
• delete your account and everything it keeps.

We may need to confirm it is you before we act. If we ever refuse a request, we will tell you why in writing and how to complain.

13. Marketing

We do not send marketing. The emails we send are the sign-in links you ask for and replies to you.

If we ever want to send you marketing, we will ask first, every message will say it is from Vaile and have a simple way to stop them, and we will stop as soon as you ask. You can ask us at any time where we got your information, and we will tell you.

14. Cookies

This website sets no cookies. It uses your browser’s storage only to keep you signed in. Our Cookie Policy has the detail.

15. Age

A Vaile account is for people aged 18 or over. We do not knowingly keep an account for anyone younger, and if we learn of one we will delete it.

16. Changes to this policy

We will post any change here and update the date at the top. If a change affects how we handle information we already hold about you, we will tell you before it takes effect, and we will not use that information in a new way without your agreement.

17. Questions and complaints

For any question about your privacy, or to make a complaint about how we have handled your personal information, email hello@vaile.com.au and mark it for our Privacy Officer, or write to us at the address in section 1.

We will look into it and give you our answer in writing within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.