Privacy Policy

1. About Timewright

Timewright is an independent operations and process optimisation consultancy based in Sydney, Australia. This policy describes how we handle personal information collected through our website, consultation bookings, communications and consulting engagements.

Timewright is the registered business name under which Matthew Nicolas (ABN 50 388 752 762) operates as a sole trader based in Sydney, Australia.

For privacy enquiries, contact [email protected].

2. Information we collect

Depending on how you interact with Timewright, we may collect:

• Your name, email address, business name, role and other contact information you provide.
• Information submitted when you book a consultation or contact us.
• Information about your business operations, workflows, systems, challenges and relevant financial or resource assumptions.
• Meeting recordings, transcripts, notes and working assessment materials where appropriate consent has been obtained.
• Information reasonably required to administer engagements, invoices, bookings and payments.

Business information may contain personal information about employees, customers or other people. We ask clients not to share unnecessary personal or sensitive information, and to ensure they have authority to share any information supplied.

3. Why we use information

We use information to:

• Respond to enquiries and arrange consultations.
• Understand operations and identify inefficiencies and improvement opportunities.
• Estimate potential time savings and their financial value.
• Prepare and deliver assessment reports, recommendations and other agreed services.
• Manage bookings, payments, client relationships and business records.
• Comply with applicable legal obligations and address concerns or disputes.

We do not add clients or enquirers to unrelated marketing communications without an appropriate basis for doing so.

4. Recording, transcription and AI-assisted analysis

Where participants have given appropriate permission, Timewright uses Fathom to record and transcribe discovery sessions so that assessments can be prepared accurately.

Timewright may process relevant transcripts, notes and selected operational information with Claude by Anthropic to assist with identifying operational issues, organising findings, estimating opportunities and preparing reports. Timewright reviews findings and recommendations before providing them to clients.

This processing can involve disclosing relevant information to third-party service providers and may involve overseas processing. We seek to minimise unnecessary personal or sensitive information and remove identifying details where practical. We do not promise that de-identification is always possible or that AI-generated analysis is error-free.

Before relevant sessions, we explain the recording, transcription and AI-assisted processing arrangements. We seek consent from each participant before recording and provide an opportunity to discuss alternative arrangements where recording or AI-assisted processing is not agreed to.

5. Third-party services

Timewright uses selected third-party technology providers to operate its business and deliver consulting engagements.

These include:

• Google Workspace: Business email, scheduling and secure document storage through Google Drive.
• Notion: Managing shared client documents, implementation plans, project information and action items.
• Voxer: Communicating with clients through voice and text messages during ongoing implementation engagements.
• Jotform: Collecting information from clients to understand and scope proposed implementation work.
• Calendly: Scheduling consultations and managing appointment information.
• Stripe: Processing payments and associated transaction information.
• Fathom: Recording and transcribing meetings where participants have provided appropriate consent.
• Anthropic (Claude): Assisting with analysis of operational information and preparation of assessment reports.
• Cloudflare: Website hosting and related infrastructure.

Depending on the nature of an engagement, relevant personal, business and operational information may be processed by these providers to support the services being delivered.

Not every provider is used for every engagement.

We take reasonable steps to assess providers' privacy and security practices, manage access to client information and limit the information shared to what is reasonably necessary.

Clients should avoid supplying unnecessary personal or sensitive third-party information unless it is required for the engagement and they have the authority to disclose it.

6. Overseas processing

Some providers and their subprocessors operate outside Australia. Information may be processed, stored or accessed overseas, including in the United States and other countries in which relevant providers operate. Fathom states that meeting data is stored in the United States.

7. Security and retention

Timewright takes reasonable steps to protect personal and confidential information from unauthorised access, misuse, loss and disclosure, and restricts sharing where practical.

We generally delete raw meeting recordings, transcripts and working AI-assessment materials from systems under our control within 90 days after delivery of the final assessment report. This includes relevant Fathom recordings, working transcript copies, and Claude conversations or uploaded working materials associated with the engagement.

An exception may apply where continued retention is reasonably necessary for an ongoing agreed engagement, a dispute, or a legal obligation. Where an exception applies, we limit retention to what is necessary and review it when the reason ends.

Final reports, agreements, invoices and accounting records may be retained for longer where reasonably necessary for business purposes or as required by law.

Deletion from Timewright-controlled accounts and devices does not necessarily mean immediate deletion from third-party providers' systems or backups. Their technical and legal retention arrangements may continue to apply.

8. Confidentiality

We treat information shared during engagements as confidential, subject to agreed engagement terms and disclosures necessary to provide the services. We do not publish identifiable client names, testimonials or assessment findings without permission.

9. Access, correction and deletion requests

You may contact us to request access to, correction of or deletion of personal information we hold about you. We will consider requests in accordance with applicable laws, contractual obligations, legitimate business needs and technical limitations.

10. Updates to this policy

We may update this policy as our services, systems and legal obligations change. The current version will be published on our website.

11. Contact

Timewright
Sydney, Australia
[email protected]