This Privacy Policy explains how House of Nation Pty Ltd (we, us, our) collects, holds, uses and discloses personal information in connection with areamanager.com.au and the AreaManager service.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and (where applicable) the Spam Act 2003 (Cth) and relevant state surveillance and workplace laws.
If you do not agree with this Policy, please do not use our website or service.
1. Who we are
| Legal entity | House of Nation Pty Ltd |
| ABN | 17 167 050 133 |
| ACN | 167 050 133 |
| Product | AreaManager |
| Main business location | VIC 3106, Australia |
| Service | AI-assisted area manager tools for Australian childcare centre owners and operators |
| Primary contact | ash@areamanager.com.au |
| Website | https://areamanager.com.au |
We are the APP entity responsible for personal information we collect and hold. Where we process personal information on behalf of a customer centre (for example, staff or family contact details contained in operational exports the centre provides), we act as a service provider to that customer. The customer remains responsible for its own privacy notices to staff, families and other individuals, and for ensuring it is entitled to provide that information to us.
2. Scope
This Policy covers personal information about:
- prospective and current customers (centre owners, founding MDs, operators and authorised users);
- website visitors and people who contact us;
- individuals whose details appear in customer-supplied operational data (for example staff roster contacts, or family contact details used only to draft messages the customer then reviews); and
- suppliers, applicants and other people we deal with in running the business.
It does not cover websites or services we do not control.
3. What we do not collect (children)
We do not need, and do not collect, children's personal information for AreaManager.
AreaManager is built for the business of running a centre: market, occupancy, fees, rosters, staffing cost, arrears and similar operational and financial signals. It is not built to access children's learning, development, health or other personal records, and we do not ask customers to provide those records.
If children's personal information is accidentally included in a file a customer uploads or exports to us, we treat that as unintended. We will take reasonable steps to delete or de-identify it when we become aware of it, and we ask customers not to send children's records to us.
4. What personal information we collect
The personal information we collect depends on how you interact with us. It may include:
4.1 Account and commercial contact
- Name, role/title, centre or business name, email, mobile/phone, address and suburb/postcode
- Login identifiers and authentication data
- Billing and payment-related details (if and when commercial billing is enabled)
- Records of conversations, support requests and approvals you give inside the product
4.2 Centre operational data (customer-supplied)
With the customer's authority, we may process operational and financial information exported from systems the centre already uses (for example Xplor, OWNA, Kidsoft or similar), such as:
- bookings / occupancy-related reports
- fee and arrears-related reports
- roster, attendance and labour-cost reports
- staff contact details and credential / WWCC-related fields to the extent included in those exports (for labour discipline, cover shortlists and related drafting)
- family or guardian contact details only where they appear in operational exports and are needed to draft communications that the customer must approve before anything is sent
We work from reports and exports the customer provides, not from a live always-on sync to the centre's systems (unless we later introduce a different integration and update this Policy).
4.3 Public and market information
We collect publicly available information about approved childcare services and local market signals (for example fees, ratings, advertising). That information is usually about organisations, not individuals. Where it identifies an individual (for example a publicly named nominee or contact), we handle it as personal information.
4.4 Website and device data
- IP address, device/browser type, approximate location derived from IP, pages viewed, referring URL
- Cookies and similar technologies (see section 12)
- Form submissions (for example mobile number left so we can introduce AreaManager by message)
4.5 Sensitive information
We do not seek sensitive information (as defined in the Privacy Act). Credential / WWCC-related fields in roster exports may indicate clearance status. We only process that information where it is reasonably necessary for the labour/credential features the customer enables, and we rely on the customer having a lawful basis to provide it.
We do not collect health, biometric, racial or religious information as part of AreaManager.
5. How we collect personal information
We collect personal information:
- directly from you when you use the website, create an account, message us, or approve actions in the product;
- from the customer organisation that engages us (exports, authorised users, support);
- from publicly available sources used for market/competition features; and
- from service providers who help us operate the service (for example hosting, messaging, analytics, AI processing), where they return technical or delivery data to us.
If you provide us with personal information about someone else (for example a staff member or family contact), you must ensure you are authorised to do so and that the individual has been informed as required by law (or that another exception applies).
6. Why we collect and use personal information (purposes)
We collect, hold, use and disclose personal information only for purposes that are reasonably necessary for our business functions, including to:
- Provide AreaManager — watch market and operational signals, compute findings, draft recommendations, letters and messages, and show provenance/date where we use sources;
- Honour owner control — nothing we draft is sent to a family, staff member or external system until an authorised user approves it (approve / edit / dismiss);
- Operate accounts — onboard centres, authenticate users, provide support, and communicate about the service;
- Improve and secure the service — troubleshoot, prevent abuse, maintain integrity and develop features (using de-identified or aggregated data where practicable);
- Comply with law — meet legal, regulatory and professional obligations, and establish, exercise or defend legal claims;
- Market our services (with consent or as otherwise permitted) — for example follow-ups about AreaManager; you can opt out of marketing at any time; and
- Run our business — billing (when applicable), supplier management, corporate transactions (for example financing or sale of assets), with appropriate safeguards.
We will not use personal information for a secondary purpose unless you would reasonably expect it, you have consented, or another exception under the APPs applies.
7. Disclosure of personal information
We may disclose personal information to:
| Recipient | Why |
|---|---|
| Hosting and infrastructure providers in Australia | Store and host customer data |
| Anthropic, PBC (and its subprocessors) | Process relevant data via Anthropic's API so Claude models can interpret information and draft insights (see section 8) |
| Messaging providers (SMS / WhatsApp / email) | Deliver messages you have approved, and transactional service messages |
| Professional advisers | Lawyers, accountants, insurers, as reasonably required |
| Regulators and law enforcement | Where required or authorised by law |
| Successors | As part of a genuine corporate restructure, financing or sale, subject to confidentiality |
We do not sell personal information.
Where we engage third parties to process personal information for us, we take reasonable steps to require them to handle that information consistently with this Policy and the APPs (contractual and practical safeguards appropriate to the risk).
8. Overseas disclosure (important)
Storage / hosting: Customer data for AreaManager is stored and hosted in Australia.
AI processing: Some analysis and drafting is performed using Anthropic's Claude models via Anthropic's API. That processing is not onshore. When relevant personal information is included in a prompt or related API call, it is disclosed to Anthropic (and may be processed on servers outside Australia, including in the United States).
Before we disclose personal information overseas, we take reasonable steps required by APP 8, including contractual arrangements with Anthropic that address privacy and security expectations for API customers. Overseas recipients may be subject to foreign laws, which means Australian Privacy Principle remedies may not apply in the same way.
By using AreaManager, customers acknowledge this overseas AI processing. If your organisation cannot accept offshore model processing, do not upload personal information into the product and contact us to discuss options before onboarding.
We will update this Policy if our hosting or processing locations materially change.
9. How we hold and protect personal information
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Measures include (as applicable):
- access controls and separation of customer environments;
- encryption in transit and at rest where offered by our infrastructure;
- least-privilege access for personnel and contractors;
- vendor due diligence for material processors; and
- retention and deletion practices described below.
No method of transmission or storage is completely secure. If you believe your account or data has been compromised, contact us immediately at ash@areamanager.com.au.
10. Retention
We keep personal information only for as long as needed for the purposes set out in this Policy (including providing the service), and as required to meet legal, accounting or dispute-resolution needs.
When personal information is no longer required, we take reasonable steps to destroy or de-identify it, except where we are required or authorised by law to retain it.
Account data is generally retained while the account is active and for a reasonable period after closure (unless you validly request earlier deletion and no legal retention obligation applies).
11. Access, correction and your other rights
Under the Privacy Act you may:
- request access to the personal information we hold about you (APP 12);
- request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13); and
- request deletion of personal information we no longer need (subject to lawful retention).
Customers may also manage much of their operational data by controlling what they export to us and by closing their account.
To make a request, email ash@areamanager.com.au. We may need to verify your identity. We will respond within a reasonable period (generally within 30 days). We may refuse a request where the Privacy Act allows; if we do, we will tell you why (unless it is unreasonable to do so) and how to complain.
If you are an individual whose details were provided by a customer centre (for example a staff member), we may need to involve that customer, because they control the underlying source systems and their relationship with you.
12. Cookies and similar technologies
Our website may use cookies and similar technologies to operate the site, remember preferences, understand usage and improve performance. You can control cookies through your browser settings. Some features may not work if cookies are disabled.
We do not use cookies to build advertising profiles of children.
13. Direct marketing and electronic messages
We may send service-related messages that are necessary to operate AreaManager.
We may also send marketing about AreaManager where permitted (for example with consent, or to existing customers in accordance with the Spam Act). Every marketing email or SMS will include a simple unsubscribe / opt-out. You can also opt out by emailing ash@areamanager.com.au.
Product messages to families or staff are drafted for the customer. We do not send those messages unless an authorised user of the customer approves the send.
14. Third-party links
Our website may link to third-party sites. Their privacy practices are their own. We are not responsible for their content or policies.
15. Notifiable data breaches
If we experience an eligible data breach under the Notifiable Data Breaches scheme, we will assess and, where required, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Privacy Act.
16. Complaints
If you have a privacy complaint, contact us first at ash@areamanager.com.au. Please include enough detail for us to investigate. We will acknowledge your complaint and aim to resolve it within a reasonable time.
If you are not satisfied with our response, you may complain to the OAIC:
- Website: https://www.oaic.gov.au
- Phone: 1300 363 992
17. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be posted on this page; where appropriate we may also notify account holders by email or in-product notice. Continued use of the website or service after an update constitutes acceptance of the revised Policy to the extent permitted by law.
18. Contact
Privacy contact
House of Nation Pty Ltd (ABN 17 167 050 133)
Main business location: VIC 3106, Australia
Email: ash@areamanager.com.au
Web: https://areamanager.com.au
For requests about personal information we process on behalf of a customer centre, we may redirect you to that centre where appropriate.