Privacy Policy

Our privacy policy is based on the principle that your data is your property - not ours. You have trusted us to hold it and we will protect it to the best of our ability, but we will not use, sell or give it to anyone else without your express permission.

In particular:

• We collect the minimum amount of personal information needed to operate our service.
• The only personal information we hold is provided by you when you enter it. We do not cross-reference or triangulate this information with any other source of data.
• MessageMyWay uses best-practise encryption of data in transit and in storage.
• MessageMyWay allows you to view and edit your information at any time, on our preferences page.
• You can opt-out of alerts at any time, on our preferences page. Opting-out deletes all information associated with you, apart from an identifier which prevents your organisation adding you back into their lists.
• MessageMyWay uses a single cookie containing a random number purely to allow you to use our service. This cookie can only be accessed on our web site and is not shared with any other company or entity, so it cannot be used to identify or track you on any other web site.
• MessageMyWay runs on servers based in the USA, but we do not disclose your information to any overseas entities. See below for more information.
• If you feel we have breached your privacy or that we could improve our privacy policy, please contact us.

We believe our privacy policy meets the requirements of all major privacy legislation in the contries we operate in. This includes:

• Australia's Privacy Act 1988, Privacy Amendment (Enhancing Privacy Protection) Bill 2012 and the Australian Privacy Principles.
• The Canadian Personal Information Protection and Electronic Documents Act ("PIPEDA").
• The European Union Data Protection Directive and General Data Protection Regulation.

Cookie Consent Exemption

EU users may notice that despite using a cookie, we do not ask you to accept it. This is because our cookie is strictly necessary to provide our service - we could not provide a secure personalised service without it. This means we satisfy Criterion B of Article 5.3 of Directive 2002/58/EC as amended by Directive 2009/136/EC, and are exempt from providing the right to refuse a cookie.

Server Location

Our services are used by customers in over thirty countries. It would be impractical and expensive to set up and manage servers in each country, so we use centralised servers based in the in the USA.

We use Google Cloud Platform, which provides far better security, scaling and availability than any system we could afford to build. Google employs the best system engineers in the world, and everything these engineers do to protect Google properties also protects MessageMyWay. In-depth analysis here.

Our use of Google Cloud Platform doesn't give Google Search any special access to MessageMyWay data. We don't use Google authentication or tracking cookies, so there is no way Google can use MessageMyWay data to identify or track you.

Google's security and privacy arrangements have been independently certified:

• ISO 27001 for information security management.
• ISO 27017 for cloud security.
• ISO 27018 for privacy.