Make the invisible visible.
This Privacy Policy explains how I handle your personal information when you use systemsdragindex.com and purchase the Systems Drag Index™ diagnostic.
The site and product are operated by Hummingbird Tech Group Pty Ltd (ABN 83 695 116 235, ACN 695 116 235), a company based in Perth, Western Australia. In this policy, “I”, “me” and “my” refer to Hummingbird Tech Group Pty Ltd as the business operator. “You” refers to the person using the site or buying the diagnostic.
I’m a small, founder-run business and I’ve written this in plain English on purpose. If anything here is unclear, you’re welcome to contact me at contact@systemsdragindex.com.
I sell globally, so depending on where you live, different privacy laws may apply to you. This policy is written to meet the Australian Privacy Principles under the Privacy Act 1988 (Cth) and the EU and UK General Data Protection Regulation (GDPR). If you’re in another region (for example the US, Canada or New Zealand), I aim to handle your data to a comparable standard.
For GDPR purposes, Hummingbird Tech Group Pty Ltd is the data controller for the personal information described here.
| Category | What it includes | Why I collect it |
|---|---|---|
| Diagnostic responses | Your answers to the questionnaire — operational and business information about how you work | To generate your Systems Drag Index Summary and Analysis |
| Contact details | The email address you provide | To deliver your Summary and Analysis and send your receipt |
| Payment metadata | Transaction confirmation, amount, currency, and a payment reference — not your card number | To confirm and record your purchase |
| Your Summary and Analysis | The generated Summary and Analysis documents | To deliver the product you paid for and support any follow-up request |
| A unique identifier (UUID) | A random reference assigned to your submission that links your responses, payment and documents together | To match your payment to the correct submission, deliver and re-send the right Analysis, and locate your records if you contact me |
I do not collect or store your full payment card details. Card information is entered directly into Stripe, my payment processor, and is handled under Stripe’s own security and compliance.
Where the GDPR applies, I rely on the following legal bases:
Under the Australian Privacy Principles, I collect personal information only where it’s reasonably necessary to provide the product and run the business.
I’m a solo operator and rely on trusted third-party services (“sub-processors”) to run the product. Each receives only the data needed for its role. These providers may process data on servers outside your country, including in the United States (see Section 5).
| Provider | What it does | What it handles |
|---|---|---|
| Stripe | Payment processing | Card details (entered directly), payment metadata, email |
| Formspree | Captures your form submission | Diagnostic responses, email |
| Google (Apps Script & Sheets) | Stores a record of each submission | Diagnostic responses, email, UUID |
| Resend | Sends transactional and receipt emails | Email address, message content |
| Netlify | Website hosting | Technical access data (e.g. IP address in server logs) |
| Cloudflare | DNS and network delivery | Technical/network data in transit |
| Microsoft 365 | Business email | Any correspondence you send me |
Each provider operates under its own privacy and security terms. I don’t authorise them to use your data for their own marketing.
Because I use the global services listed above, your personal information may be transferred to, stored in, or processed in countries other than your own — including the United States. Privacy laws in those countries may differ from your own.
Where the GDPR applies, transfers outside the EU/UK rely on the safeguards offered by these providers, such as Standard Contractual Clauses or equivalent mechanisms in their data processing terms. By using the service and submitting your information, you understand that it will be handled in this way so I can deliver your Summary and Analysis.
I keep your diagnostic responses, Summary, Analysis and associated records for as long as needed to provide the product, handle any refund or support request, and meet record-keeping and tax obligations — generally up to 7 years for transaction and tax records, consistent with Australian requirements. I’ll delete or de-identify data sooner where I no longer have a reason to keep it, and on request (see Section 8).
I take reasonable steps to protect your information, scaled to a small business:
No method of transmission or storage is completely secure, so I can’t guarantee absolute security — but I take it seriously and respond promptly to any issue.
If a data breach occurs that is likely to cause serious harm, I’ll act in line with the Australian Notifiable Data Breaches scheme and applicable GDPR breach-notification rules, including notifying affected people and the relevant regulator where required.
You can ask me to:
To make a request, email contact@systemsdragindex.com. I’ll respond within a reasonable time — generally within 30 days — and I won’t charge you for a straightforward request.
Your Summary and Analysis are generated from your answers using a fixed scoring framework. It’s an informational diagnostic, not a decision that produces legal or similarly significant effects about you. I don’t use your data for profiling beyond producing the Summary and Analysis you requested.
I may create de-identified and aggregated information from completed diagnostics — for example, combined statistics and trends across many users — and use it for research, statistical analysis, product improvement and publication. This may include publishing industry benchmarks, trend reports, academic or commercial research, or statistical summaries derived from multiple completed diagnostics, provided that no individual or business can reasonably be identified. I only use data this way where it has been aggregated or de-identified so that no individual or business can reasonably be identified from it. Information used in this form is no longer personal information about you.
The site is a single-page app and currently uses only what’s necessary to make it work and process your purchase. I keep tracking minimal. If I add analytics or non-essential cookies in future, I’ll update this policy and, where required, ask for your consent first.
The Systems Drag Index is intended for business owners and independent professionals. It isn’t directed at children, and I don’t knowingly collect personal information from anyone under 18.
If you’re concerned about how I’ve handled your information, please contact me first at contact@systemsdragindex.com so I can try to resolve it.
If you’re not satisfied, you can also complain to a regulator:
I may update this policy as the business grows or the law changes. The “last updated” date at the top shows the current version. Significant changes will be reflected on this page.
Hummingbird Tech Group Pty Ltd
ABN 83 695 116 235 · ACN 695 116 235
Perth, Western Australia
Email: contact@systemsdragindex.com