Privacy

Last updated 20 September 2026

What you provide

Depending on the selected product, the form collects project and business identity, site address, contacts, construction value, emergency arrangements, planned work and plant, council or consent details, nearby receptors, environmental / amenity controls, monitoring and communication arrangements. Do not paste personal information about neighbours into consent or complaints fields. Only include information you are authorised to provide. Do not enter medical records, identity documents or other sensitive personal information.

Saved answers on this device

While you complete the form, answers are saved in your browser’s local storage. Anyone who can use this browser profile may be able to see them. Use “Clear answers” on the form or clear this site’s browser data to remove them. Clearing browser data can also remove access to an existing download.

Submitted plans and downloads

When you save your plan details, OneSitePlan stores your validated answers, watermarked and, for Checkout orders, clean PDF and filled Word snapshots, an order reference, creation and expiry dates and a hashed download-access key. An essential browser cookie allows that browser to retrieve the document. The order address alone cannot unlock it. For Checkout orders the access cookie may remain for up to 400 days, including if you close Checkout before returning; the server still enforces the shorter unpaid or paid access period below.

Saved unpaid details and order access expire after 30 days. Full document downloads require confirmed payment. Paid download access lasts 365 days from confirmed payment. Expired unpaid details and paid records are removed from the active database on a subsequent submission. Uncompleted Checkout records are retained for up to 365 days from creation to reconcile delayed payments, then removed on a subsequent submission. You can remove unexpired saved unpaid details sooner using “Delete stored plan details” on its result page. This does not delete files you downloaded, local form answers or copies retained in provider backups.

Hosting and service providers

OneSitePlan uses Cloudflare to host the application and store submitted plans. Cloudflare may process technical information, including IP addresses, request information and essential security data, across its infrastructure. We use a rate limit to protect document generation from abuse. We do not send your answers to a language model.

Messages sent to support@onesiteplan.com are routed through Cloudflare to our support inbox hosted by Google. We use this correspondence to answer requests, investigate delivery problems and manage refunds. Support emails may be retained separately from plan records for those purposes and transaction obligations; deleting a stored plan does not delete support correspondence. Do not email card numbers or sensitive site records.

Payments and sharing

When Checkout is enabled, Stripe processes payment and may collect your email, billing information and card details under its own privacy notice. OneSitePlan sends Stripe the fixed amount, the selected product type and description and an order reference; it does not send the site address, supervisor details or your completed plan. OneSitePlan stores payment status, Checkout identifiers and verified event identifiers, but not card numbers or billing details. Stripe may process information internationally and retain transaction records under its own obligations. Stripe payment receipts are transactional, not marketing email. We do not sell project details or use them for marketing email.

Read Stripe’s privacy notice. Provider backups and records held by Stripe are governed by their retention processes; deleting a OneSitePlan copy does not delete those records.

Advertising and funnel measurement

We keep a first-party record of form views, first interactions, successfully completed steps, reaching review and being directed to Checkout. Records contain a random journey reference, plan type, milestone, server receipt time, whether the visit used an advertising link, and a test marker. They do not contain form answers, names, contact details, full URLs, advertising click identifiers or IP addresses. These milestones are not proof of payment. Records are excluded from reports after 30 days and removed from the active database on the next milestone submission. A tab-scoped browser reference groups activity for up to 30 days; clearing answers starts a new journey. First-party progress measurement is independent of Google Ads and also honours Global Privacy Control and Do Not Track. Test records are excluded from customer reports.

When Google measurement is configured, Google’s tag may use cookies and browser information to attribute a confirmed purchase to an advertisement. We send a product description, the paid AUD value (A$129 for WHS / EMP or A$179 for CMP) and the order reference only after our server confirms a live payment. Test payments, sample views and saved unpaid details do not count. We do not include your form answers, site address, contact details or document content in these events. Order query strings are excluded from the page metadata we send.

We also measure three zero-value milestones: first form interaction, a completed review, and a server-created Checkout. These are separate observation-only events, not purchases. A random browser journey reference prevents duplicates; no answers or field values are included. A local browser marker helps avoid recording the same purchase again. Google may process measurement data internationally under its own privacy policy. Browser privacy settings and content blockers may prevent measurement. Clearing this site’s browser data removes local markers and saved answers, and can also remove access to downloads. Google measurement is inactive when the public tag settings are empty.

When measurement is enabled, we keep validated advertising click, campaign, ad group and matched keyword identifiers in this browser for up to 30 days. Returning directly can retain the most recent advertising visit. If you submit an order during that period, those identifiers and a random journey reference are stored with the order for its retention period above. They help investigate advertising performance; they are not proof of the exact search entered or of payment. We do not store arbitrary URL parameters or form answers in this advertising context. Global Privacy Control or Do Not Track disables this measurement and collection in the browser.

Your controls

Review and correct your answers before submission. Paid buyers can edit the supplied Word file for the same project and export a revised PDF. The stored files remain as originally supplied. A different site or project requires a separate purchase. Saved unpaid details have a delete control; paid-order privacy, access or correction requests can be raised through OneSitePlan support. Retain any records required for your site independently; temporary OneSitePlan storage is not a records-management service.