Privacy
This notice explains how SOPA (operator details pending) handles information when you use the NSW payment claim generator.
Your claim and documents
The information you enter can include business names, ABNs, contact details, project addresses, work descriptions, amounts and dates. Drafts and uploaded documents are stored in this browser using local storage and a browser database. They are not automatically backed up to a central claim account. Anyone with access to your browser profile may be able to access them. Clearing site data can permanently remove them; keep your own downloaded copies.
Address searches
If you use address search, the search text is sent through our server to OpenStreetMap’s Nominatim service. If the server lookup is unavailable, your browser may contact Nominatim directly. The provider then receives the search and connection information, including your IP address for direct requests. You can enter an address manually instead. See the OpenStreetMap Foundation privacy policy.
Analytics
We use optional PostHog analytics hosted in the EU. We ask for your permission before sending events. If you allow them, we count page visits, progression through numbered steps, completed intake, created PDFs and downloaded PDFs. We send a random browser-tab session identifier, a generic page category and a fixed SOPA Claims site label. We do not send claim answers, ABNs, addresses, amounts, filenames, uploaded files, page titles or full URLs. We do not enable session replay, automatic click capture or person profiles.
When events are transmitted, PostHog may receive connection information such as your IP address. Geographic enrichment is disabled. Your choice is stored in this browser and can be changed using “Analytics choices” at the bottom of each page. We also respect supported Do Not Track and Global Privacy Control signals. Declining analytics does not affect the generator. Events are sent to our EU PostHog project. Retention is controlled by the settings of that project. See PostHog’s privacy policy.
Hosting, retention and overseas processing
The hosting service may process IP addresses, request paths and technical logs needed to deliver and secure the website. Browser drafts remain until you remove them or clear browser storage. The PDF generator processes the claim information you submit to produce the PDF; it does not create a central claim backup. Hosting logs and PostHog analytics have separate retention settings. Address-lookup providers may process connection information overseas, and PostHog analytics are processed in the EU.
Access, correction and privacy requests
You can review and edit saved drafts within this browser. To remove all local drafts and uploaded files, use your browser’s site-data controls after saving any copies you need. A claim deletion option may retain a recoverable record, so it is not equivalent to clearing all site data. For access or correction requests, deletion requests, or a privacy complaint, contact the privacy contact (to be added before launch). Describe your request without emailing unnecessary claim documents. We will review the request, explain any identity checks needed and respond to the contact address you provide.
If you are dissatisfied with our handling of a privacy complaint, you can find information about available complaint options at the Office of the Australian Information Commissioner.
Changes
We will update this notice when the service’s data practices change and display the revision date above.
← Back