Privacy Policy
Last updated: 1 September 2026
FoundationStone is provided by Altomi Pty Ltd, ABN 15 660 039 252, ACN 660 039 252 ("we", "us" or "our").
We respect your privacy and handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.
Who This Policy Applies To
This policy applies to people who visit our website, contact us, request a demo or trial, create or use a FoundationStone account, or whose personal information is entered into FoundationStone by one of our customers.
FoundationStone customers may enter information about their own customers, suppliers, staff, contractors and other business contacts. Customers are responsible for ensuring they have the right to collect and use that information in FoundationStone.
Personal Information We Collect
Depending on how you interact with us, we may collect information such as:
- Your name, email address and phone number
- Organisation and business details
- Account and login information
- Subscription details
- Demo, trial and support enquiries
- Communications you send to us
Information entered into FoundationStone may also include customer, supplier, staff, contractor, quote, costing and work records.
We may collect technical information when FoundationStone or our website is used, including IP addresses, browser and device information, login activity, usage information, error logs and security records.
Where practicable, you may browse public areas of our website without identifying yourself.
Sensitive Information
FoundationStone is not designed to store sensitive personal information.
You must not intentionally enter health information, racial or ethnic information, political or religious information, trade union membership, criminal records, biometric information, Tax File Numbers or similar sensitive information unless we have expressly agreed to its use and it can lawfully be collected and handled.
How We Collect And Use Information
We generally collect information directly from you when you create an account, submit a form, request a demo or trial, contact us or use FoundationStone.
We may also receive information from organisation administrators, customers who enter records into FoundationStone, service providers used to operate the platform.
We use personal information to:
- Provide and operate FoundationStone
- Create, manage and secure accounts
- Respond to enquiries and provide support
- Provide demonstrations and trials
- Manage subscriptions and billing
- Communicate with users
- Maintain, improve and secure the service
- Investigate misuse or security incidents
- Meet legal, accounting and regulatory obligations
We may also use information for another related purpose where you would reasonably expect us to do so or where otherwise permitted by law.
Communications And Marketing
We may send service communications relating to your account, security, billing, support or important changes to FoundationStone.
We may also send product information, educational content or marketing communications where permitted by law.
Marketing messages will include a way to unsubscribe. You can also ask us to stop sending marketing communications at any time.
Unsubscribing from marketing does not prevent us from sending necessary account, billing, security or service notices.
Who We Share Information With
We may share personal information with service providers that help us operate FoundationStone, including providers of:
- Hosting and databases
- Email and communications
- Authentication and security
- Analytics and monitoring
- Subscriptions
- Customer support
- Backups and data storage
- Professional services such as legal or accounting support
We provide service providers only with information reasonably necessary for them to perform their role.
We may also disclose information where required or permitted by law, including to respond to legal processes, investigate suspected unlawful activity, protect FoundationStone or its users, or establish or defend legal rights.
We do not sell personal information.
Overseas Processing
Some of our service providers may store, process or access personal information outside Australia.
FoundationStone's primary application and database data is hosted in Australia.
Some service providers may process or access personal information from locations outside Australia as part of providing their services.
Where personal information is disclosed overseas, we take reasonable steps required by applicable Australian privacy law to ensure it is handled appropriately.
Payments
FoundationStone does not currently process online payments.
If online payments are introduced, they may be processed by a third-party payment provider under that provider's own privacy and security terms.
We do not ordinarily store complete payment card numbers or card security codes.
Security And Retention
We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification and disclosure.
No online system can guarantee absolute security.
We retain personal information only for as long as reasonably required to provide FoundationStone, meet legal and accounting requirements, resolve disputes, maintain security or meet another permitted business purpose.
When personal information is no longer required, we take reasonable steps to delete, destroy or de-identify it.
After an account closes, customer data may be retained for a limited period before being deleted from active systems, unless it is required to be retained for legal, accounting, security or other permitted purposes.
Deleted information may remain in secured backups for a limited period until those backups are overwritten through normal backup processes.
Data Breaches
If we become aware of a suspected data breach, we will investigate and respond according to the circumstances.
Where the Notifiable Data Breaches scheme applies and an eligible data breach has occurred, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
Access And Correction
You may ask us to provide access to personal information we hold about you or to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.
We may need to verify your identity before responding.
We generally aim to respond to access and correction requests within 30 days.
If your information is held within a FoundationStone workspace controlled by one of our customers, we may need to coordinate your request with that organisation.
Account Administrators
Organisation administrators may be able to add or remove users, manage permissions, view and update records, export information and manage the organisation's FoundationStone account.
The organisation is responsible for deciding who it authorises to act as an administrator.
Cookies And Analytics
FoundationStone and our website may use cookies and similar technologies for authentication, security, session management, preferences and product performance.
We may introduce analytics or monitoring tools to help us understand how FoundationStone is used, identify problems and improve the service. Where these tools involve the collection of personal information, we will handle that information in accordance with this Privacy Policy.
You can control cookies through your browser settings, although blocking required cookies may prevent parts of FoundationStone from working correctly.
Third-Party Services
Our website or FoundationStone may contain links to third-party websites or services.
We are not responsible for the privacy or security practices of those third parties.
Privacy Complaints
If you have a privacy concern or believe we have mishandled your personal information, please contact us.
We will investigate the issue and generally aim to respond within 30 days.
If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.
Changes To This Policy
We may update this Privacy Policy from time to time.
The latest version will be published on our website with the date it was last updated.
If a material change significantly affects how we handle existing users' personal information, we will take reasonable steps to bring it to their attention.
Contact
Altomi Pty Ltd
ABN: 15 660 039 252
ACN: 660 039 252
Email: contact@foundationstonesoftware.com.au
Website: www.foundationstonesoftware.com.au
Address: Willunga, South Australia 5172