Privacy Policy
This is a living document, reviewed and updated as our practices evolve. The online version is always the most current.
GetPost Labs Pty Ltd (ABN 82 634 520 924) operates migrationregister.com.au and the Migration Register Cowork concept, an AI coworker being explored for Australian registered migration agents and immigration lawyers. We are committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains what personal information we collect through this website, how we handle it, and how you can access or correct it or make a complaint.
1. Who we are
- Organisation
- GetPost Labs Pty Ltd, ABN 82 634 520 924
- Contact
- Sumit Arora, Founder and Director
- sumit@getpostlabs.io
- Address
- 8 Clunies Ross Ct, Brisbane Technology Park, Brisbane QLD 4113
- Website
- https://migrationregister.com.au
2. What personal information we collect
When you register your interest, we collect only:
- your work email address
- your practice’s Australian Business Number (ABN)
- the date and time you registered, and a record that you agreed to receive emails and read this policy
- the website or campaign that referred you, where your browser provides it
An ABN is a public business identifier. We use it to confirm that you are an Australian business.
We do not collect sensitive information, and we ask you not to send client names, visa documents or other applicant information through this website.
3. How we collect it
We collect this information directly from you when you complete the registration form. We do not buy contact lists or collect your details from third parties.
4. Why we collect it
- To send you updates and early access offers about Migration Register Cowork, which you agree to when you register
- To confirm that registrations come from Australian businesses
- To understand interest in the concept and plan what to build
- To meet our own legal obligations as a business
5. Use and disclosure
We use your information only for the purposes in section 4. We may disclose it to:
- Amazon Web Services, which hosts this website and processes registrations, and Google Workspace, which hosts our email inbox, under their standard data processing terms
- professional advisers such as lawyers and accountants, where necessary
- government agencies or regulators, where Australian law requires it
We do not sell, rent or trade personal information.
6. AI and your information
We do not enter your registration details into AI tools.
If Migration Register Cowork is built, any use of AI with personal information will be explained before it happens. Following the OAIC’s guidance on AI products and OMARA’s guidance on AI in immigration assistance, practices would need their clients’ written consent before client personal information is used with AI, AI outputs would be reviewed by a professional, and personal information would never be entered into public AI chat tools.
7. If Cowork is built
Cowork is a concept and is not available today. If it is built, it would be designed around these principles, and a product-specific privacy policy would be published before any practice uses it:
- Separated practice workspaces. Each practice’s case records kept within practice-specific data boundaries.
- Access by role. Owners, staff, referral partners and clients see only what their role needs.
- Approval before outward actions. Requests, messages and document transfers wait for a person to approve them.
- Encryption in transit and at rest, with access controlled and logged.
- The practice stays responsible for its client information and its own obligations under the Privacy Act and the Code of Conduct.
8. Disclosure outside Australia
Registrations are processed in Australia: the registration form runs on AWS Lambda and Amazon Simple Email Service (SES) in the Sydney region (ap-southeast-2). Each registration is then delivered to our Google Workspace inbox, which may store email outside Australia.
The website’s pages and images are stored in Amazon S3 in the United States (us-east-1) and delivered through Amazon CloudFront’s global network, which serves visitors from a nearby location, including Australian locations. These files contain no visitor information. The website also loads its fonts from Google Fonts, which means your browser sends your IP address to Google, which may process it outside Australia.
Where information is handled outside Australia, we take reasonable steps to ensure it is handled consistently with the APPs.
9. Storage, security and retention
- Registrations are sent over an encrypted connection (HTTPS). We do not keep them in a database: each valid registration is emailed to our inbox, where access is limited to the people who manage registrations.
- Details are checked before anything is sent, and nothing is sent unless they are valid.
- System logs record operational events and anonymous visit counts only, never your email address, ABN or IP address, and are deleted after 12 months.
We keep your registration until you unsubscribe or ask us to delete it, or until we stop sending updates about Cowork, and then delete it securely.
10. Data breach response
If a data breach involves personal information we hold, we will assess it promptly under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If it is likely to result in serious harm, we will notify affected individuals as soon as practicable, notify the Office of the Australian Information Commissioner (OAIC) as required, and take immediate steps to contain the breach.
11. Cookies and analytics
This website does not use cookies or advertising trackers, and does not store anything in your browser.
To understand which parts of the site are useful, we count page visits and clicks. Each count records the page, the button or link clicked, the section of the page, the website that referred you, any campaign tags in the link you followed (such as utm_campaign), and whether you are on a phone, tablet or computer. We do not record your IP address, email, ABN or anything else that identifies you, and the counts cannot be linked to a registration. They are processed by AWS in Sydney and kept for up to 12 months.
12. Access, correction and deletion
You can ask to see the information we hold about you, correct it, or delete it. Email sumit@getpostlabs.io. We will respond within 30 days at no charge.
13. Unsubscribing
Every email we send includes a way to unsubscribe, as the Spam Act 2003 requires. You can also unsubscribe at any time by emailing us. We will act on your request within 5 business days.
14. Complaints
If you have a concern about how we have handled your personal information, contact us first:
- sumit@getpostlabs.io
- Post
- GetPost Labs Pty Ltd, 8 Clunies Ross Ct, Brisbane Technology Park, Brisbane QLD 4113
We will acknowledge your complaint within 5 business days and give a full response within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner:
- Website
- www.oaic.gov.au
- Phone
- 1300 363 992
- Post
- GPO Box 5218, Sydney NSW 2001
15. Changes to this policy
We will publish any changes on this page with a new effective date. If a change is material, we will email people who have registered.