This Privacy Policy explains how Motivka Solutions ("we", "us", or "our") collects, uses, discloses, and protects your personal information when you use our website at motivka.com. It is designed to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as well as the General Data Protection Regulation (GDPR) for users located in the European Union and European Economic Area.

1. Who We Are

Motivka Solutions is operated by Simon Karumbi as a sole trader. For the purposes of the GDPR, we are the data controller responsible for your personal information.

Privacy contact: legal@motivka.com

2. Information We Collect

We practice data minimisation and only collect the information necessary for our functions.

  • Contact information: Your name and email address when you voluntarily submit them through a contact or lead generation form.
  • Account information (Future): When user accounts are introduced, we will collect your name and email address through third-party OAuth authentication providers (e.g., Google login).
  • Usage data: Anonymous web analytics data (such as general location, device type, and browsing behaviour) to understand website performance and for marketing purposes.

We do not collect or store any sensitive information, nor do we process payment information.

3. How We Collect Information

We collect personal information directly from you when you voluntarily provide it. We also collect anonymous usage data automatically through cookies and tracking technologies associated with Google Analytics.

4. Why We Use Your Information and Our Legal Bases

We use your information for the following purposes, relying on specific legal bases under the GDPR:

  • Responding to enquiries and lead generation: To reply to your messages and provide information about our services. Legal basis: Legitimate interests (Art. 6(1)(f)) or Consent (Art. 6(1)(a)).
  • Marketing: To analyse web traffic and improve our reach. Legal basis: Legitimate interests (Art. 6(1)(f)).
  • Future account authentication: To allow you to securely log in to the platform. Legal basis: Performance of a contract (Art. 6(1)(b)).

4. Why We Use Your Information and Our Legal Bases

We use your information for the following purposes, relying on specific legal bases under the GDPR:

  • Responding to enquiries and lead generation: To reply to your messages and provide information about our services. Legal basis: Legitimate interests (Art. 6(1)(f)) or Consent (Art. 6(1)(a)).
  • Marketing: To analyse web traffic and improve our reach. Legal basis: Legitimate interests (Art. 6(1)(f)).
  • Future account authentication: To allow you to securely log in to the platform. Legal basis: Performance of a contract (Art. 6(1)(b)).

5. Who We Share Your Information With

We use trusted third-party service providers to host our website and analyse traffic. This means your data may be transferred, stored, or processed overseas:

  • Hetzner (Singapore): Our website and databases are hosted on Hetzner virtual private servers located in Singapore. Hetzner is a European company and operates its global infrastructure, including its Singapore data centres, under strict GDPR compliance and standard contractual clauses.
  • Google Analytics (Global/USA): We use Google Analytics to collect anonymous usage data. This data is routed through Google's global infrastructure.

By using the website, you consent to this overseas disclosure. We take reasonable steps to ensure these providers handle your information in accordance with the APPs and the GDPR.

6. Data Security

We protect your information from misuse, interference, loss, and unauthorised access. We achieve this by:

  • Collecting only the minimal amount of data necessary.
  • Storing data in a secure, encrypted database on a secure cloud-hosted environment.
  • Utilising multi-factor authentication (MFA) for administrative access to our servers and databases.

7. Your Rights

You have the right to control your personal information. By emailing legal@motivka.com, you can request to:

  • Access the personal information we hold about you.
  • Correct any inaccurate or out-of-date information.
  • Delete (erase) your personal data from our systems.
  • Withdraw consent or object to the processing of your data for marketing purposes.

We will respond to all requests within 30 days and will not charge a fee for exercising these rights.

8. Complaints Process

If you believe we have breached the Australian Privacy Principles or the GDPR, please contact us at legal@motivka.com. We handle complaints using a simple three-step process:

  1. Acknowledge: We will acknowledge receipt of your complaint in writing within 7 days.
  2. Investigate and Respond: We will investigate your concern and provide a written response outlining our findings and proposed resolution within 30 days of receiving the complaint.
  3. Escalation: If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992. EU residents may lodge a complaint with their local data protection supervisory authority.