Privacy Policy

Flaming Kangaroo ("we", "us", "our") is an independent software company. We provide IT consulting services to businesses, including the design and development of custom software and automations.

This policy explains how we handle personal information when you visit flamingkangaroo.com, contact us, or engage us for consulting work. Our UmmYou app has its own privacy policy, available at ummyou.com/privacy.

Information you give us. Your name, job title, company, email address, phone number, and anything else you include when you contact us or discuss a project with us.

Engagement and billing information. Contracts, statements of work, project correspondence, invoices, and payment records. Card and bank details are handled by our payment processors; we do not store them.

Client data we access while doing the work. Building software and automations for a client can require access to that client's systems, accounts, and data, which may include personal information about the client's own customers, employees, or contacts. See section 4.

Website technical data. Like most websites, our hosting provider automatically records basic request information such as IP address, browser type, pages requested, and the date and time of the request.

We use personal information to:

• respond to inquiries and scope potential projects;
• deliver, support, and maintain the software and automations we are engaged to build;
• manage our client relationships, invoicing, and payments;
• keep our website and the systems we work on secure;
• meet our legal, tax, and accounting obligations and enforce our agreements.

We do not sell personal information, and we do not use it for third-party advertising.

When we access or process personal information inside a client's systems, we do so on the client's behalf and under the client's instructions. The client remains responsible for that information and for the purposes it is used for; we act as its service provider.

In that role we:

• access only the data needed for the work we have been engaged to do;
• use it only to deliver the agreed services, never for our own purposes;
• keep it confidential;
• return or delete it when the engagement ends, as set out in our agreement with the client or on the client's request.

If you are a customer, employee, or contact of one of our clients and have a question about your information, please contact that client directly. We will help them respond to your request.

We rely on trusted third-party providers to run our business and deliver our services, such as website and cloud hosting, email and communication tools, source code and project management platforms, payment processors, and accounting software. These providers may process personal information on our behalf, only as needed to provide their services to us.

The software and automations we build often connect to third-party platforms chosen or approved by the client, which can include workflow automation and AI services. Data sent to those platforms as part of a client's solution is handled under the terms the client has with those platforms and under our agreement with the client.

We share personal information only:

• with the service providers described in section 5;
• with professional advisers such as accountants and lawyers, where needed;
• when required by law, or to protect our rights, our clients, or others;
• in connection with a merger, sale, or reorganization of our business, subject to the protections in this policy;
• with your consent or at your direction.

This website does not use advertising or analytics cookies. Pages that include a payment option load content from a payment processor (such as Stripe or PayPal), which may set its own cookies to process payments and prevent fraud. Those cookies are governed by the processor's privacy policy.

We keep personal information only as long as we need it for the purposes described above. Inquiry correspondence is kept for as long as it remains relevant to a potential engagement. Contracts and billing records are kept for the period required by tax and accounting law. Client data accessed during an engagement is kept only for the duration of the work, unless our agreement with the client says otherwise.

We use reasonable technical and organizational safeguards to protect personal information, including access controls, encryption in transit, and limiting access to the people who need it for the work. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your information, we will notify you and the relevant authorities as the law requires.

Some of our service providers store or process information in countries other than the one you live in. When information is transferred across borders, it may be subject to the laws of those countries. We take steps to ensure it continues to be protected in line with this policy.

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, to object to or restrict how we use it, to receive a copy of it, and to withdraw consent you have given. You may also have the right to complain to your local privacy regulator.

To make a request, email us at contact@ummyou.com. We may need to verify your identity before acting on it.

Our consulting services are offered to businesses and are not directed at children. We do not knowingly collect personal information from children through this website.

We may update this policy from time to time. When we do, we will post the new version on this page and change the effective date above.

For questions about this policy or how we handle personal information, email contact@ummyou.com.