Privacy and legal.
How we handle personal information on this website and on the Mimaso platform, under Australian and New Zealand privacy law, plus our website terms, cookie notice and accessibility statement.
Last updated: 29 October 2026
Privacy policy
How we handle personal information collected through this website.
This Privacy Policy explains how Mimaso handles personal information collected through this website (the "Site"), and summarises how we meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in Australia, and the Privacy Act 2020 and the Information Privacy Principles (IPPs) in New Zealand. The way client information is handled inside the Mimaso platform is covered separately in our Platform privacy notice below.
1. Who we are
"Mimaso", "we", "us" and "our" refer to the operator of the Mimaso platform and this Site. [Legal entity name, ABN and registered address to be confirmed.] Our privacy contact is info@mimaso.net. New Zealand law requires us to tell you the name and address of the agency collecting and holding your information; those details are set out above and apply to our New Zealand users.
We handle personal information in line with the Australian Privacy Principles and, for New Zealand individuals, the Information Privacy Principles.
2. What this Site collects
The Site is an information resource. You do not need an account or to give us any personal information to read it. We collect personal information through the Site only when you choose to give it to us, or automatically in the limited way described under "Cookies and analytics".
- Enquiry details: when you use the contact form or email us, we collect your name, work email address, organisation, phone number if you give it, and the contents of your message.
- Technical information: when you visit the Site, our hosting provider records standard web server logs, which may include your IP address, browser type, device type, referring page and pages visited. See our Cookie notice for how this is used.
- Correspondence: if you write to us, we keep a record of that correspondence.
We do not ask for, and do not want, sensitive information (including health information) through this Site. Please do not include details about any client or any individual's health in a message sent through the contact form.
If you give us personal information about someone else, for example a colleague you would like included in a demonstration, you confirm that you are authorised to do so and that you have told them about this policy.
2A. Dealing with us anonymously
You can browse this Site without identifying yourself. You can also contact us anonymously or under a pseudonym, although if you do we may not be able to respond to you or arrange a demonstration.
3. How we collect it
We collect personal information directly from you when you submit the contact form, email us, or book a walkthrough. We collect technical information automatically through server logs. We may also receive your details indirectly, for example when a colleague gives us your name as the contact for a demo, or a sector peak body or partner introduces you to us. Where we collect your information indirectly, we will tell you that we hold it, where it came from and why, when we first contact you (as required by New Zealand IPP 3A from 1 May 2026 and by APP 5 in Australia), unless an exception applies.
4. Why we collect and use it
We use the personal information you give us to:
- respond to your enquiry and arrange and run a demonstration;
- communicate with you about Mimaso, including follow-up on your enquiry;
- send you information about the platform, sector reporting changes and events, where you have agreed to receive it;
- keep the Site secure, understand how it is used and improve it; and
- meet our legal obligations and establish, exercise or defend legal claims.
We only use personal information for the purpose it was collected for, a directly related purpose you would reasonably expect, or a purpose you have agreed to.
5. Direct marketing
We may send you information about Mimaso by email where you have asked for it or would reasonably expect it, for example after you have enquired about the platform. Every marketing email will identify us, tell you how to unsubscribe and honour your choice promptly. You can opt out at any time by using the unsubscribe link or emailing info@mimaso.net. We comply with the Spam Act 2003 (Cth) and the Unsolicited Electronic Messages Act 2007 (NZ). We do not sell, rent or trade personal information, and we do not use it for targeted advertising.
6. Who we share it with
We share personal information only where needed to run the Site and respond to you:
- service providers that host the Site, deliver our email and support our customer records, who may only use your information to provide those services to us;
- professional advisers, where necessary;
- regulators, courts and law enforcement, where required or authorised by law; and
- a successor organisation, if our business is transferred, on terms that protect your information.
Our website and email providers may store or process information outside Australia and New Zealand, including in the United States. Before we disclose personal information overseas we take reasonable steps to ensure the recipient will handle it consistently with the APPs and, for New Zealand individuals, that it will be subject to comparable safeguards as required by IPP 12. If that is not possible, we will tell you and seek your consent before disclosing it.
7. Cookies and analytics
Our Cookie notice, below, sets out the cookies and analytics tools used on this Site and how to control them.
8. Automated decision-making
This Site does not use any computer program to make decisions about you, or to assist in making decisions that could significantly affect your rights or interests. If that changes, we will update this policy to describe the kinds of personal information used and the types of decisions involved, as required under APP 1.7 to 1.9 from 10 December 2026.
9. How we keep it secure
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Enquiry details are stored in access-controlled systems and are only available to staff who need them to respond to you. Our wider information security practices, including our ISO/IEC 27001 certification, are described on the Security page.
10. How long we keep it
We keep enquiry details for as long as we need them to deal with your enquiry and any resulting relationship, and for a reasonable period afterwards in case you come back to us. Web server logs are kept for a short period for security purposes. When personal information is no longer needed for any purpose for which it may lawfully be used, we take reasonable steps to destroy or de-identify it.
11. Your rights: access and correction
You can ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Email info@mimaso.net. We will respond as soon as practicable and in any case within 20 working days (New Zealand) or 30 days (Australia). We will not charge you for making a request, and will explain our reasons if we are unable to give you access or make a correction in full. If we decline a correction you may ask us to attach a statement to the information noting the correction you sought.
12. Data breaches
Where the law requires it, we will notify you and the relevant regulator of a data breach involving your personal information: in Australia, under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth), and in New Zealand, under Part 6 of the Privacy Act 2020.
13. Children
This Site is intended for organisations and professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 18 through the Site. If you believe a child has given us personal information, contact us and we will delete it.
14. Complaints
If you believe we have mishandled your personal information, or breached the APPs or the IPPs, please contact us first at info@mimaso.net with the details. We will acknowledge your complaint, investigate it and aim to respond within 30 days. If you are not satisfied with our response you can complain to the regulator:
- Australia: Office of the Australian Information Commissioner (OAIC), oaic.gov.au, 1300 363 992.
- New Zealand: Office of the Privacy Commissioner, privacy.org.nz, 0800 803 909.
15. This Site and the Mimaso platform are separate
No client, clinical or case information is collected through, or accessible from, this Site. Information held in the Mimaso platform belongs to the organisations that use it and is handled under their agreements with us, as described in the Platform privacy notice below.
16. Changes to this policy
We review this policy regularly and when the law or our practices change. The current version is always available on this page with the "Last updated" date shown above. Material changes will be flagged on this page.
17. Contact
Privacy questions, access and correction requests and complaints can be sent to info@mimaso.net, marked "Privacy". [Postal address to be confirmed.]
Last updated: 29 October 2026
Platform privacy notice
How client information is handled on the Mimaso platform.
Mimaso is used by health and welfare services to record information about the people they support. This notice explains, in general terms, how that information is handled on the platform. It is a summary for information only: the organisation that uses Mimaso (the "Service") remains responsible to its clients, and the detailed terms are set out in each Service's written agreement with us.
This notice does not form part of, vary or add to any agreement. If anything in it differs from a Service's agreement with us, the agreement applies.
Whose information it is
Client records on the Mimaso platform are collected by the Service, from its clients, for the purposes of delivering care and meeting its funding and reporting obligations. The Service decides what is collected and why. Mimaso holds and processes that information on the Service's behalf, and uses it only to provide, secure, support and improve the platform as its agreement with the Service allows, never for marketing or any purpose of its own. In Australian terms, the Service is the APP entity that collects the information. In New Zealand terms, information Mimaso holds as the Service's agent is treated as held by the Service under section 11 of the Privacy Act 2020, and the Service remains responsible for it.
What Mimaso does with it
Mimaso stores client information, makes it available to the Service's authorised users, and produces the reports the Service configures, including returns to state, national and funder data collections. We do not access client records except where needed to provide support, resolve a fault or meet a legal requirement, and then only by staff with a need to do so and under confidentiality obligations. We never sell client information or use it for marketing. We disclose it only to the hosting and infrastructure providers we use to run the platform, under written contracts that restrict them to that purpose, and otherwise only as the Service directs or the law requires.
Health information
Much of the information held on the platform is health information or other sensitive information. It is handled in a way that supports each Service's obligations for health information under the Privacy Act 1988 (Cth), the state and territory health records laws that apply to it, and the Health Information Privacy Code 2020 in New Zealand. Each Service remains responsible for its own compliance with those laws.
Security
The platform is certified to ISO/IEC 27001, the international standard for information security management, and independently audited. Access is role-based, so each worker sees only what their role requires, and the same access controls apply on the mobility app whether it is online or offline. [Confirm before publishing: encryption in transit and at rest, and any other specific controls to be named here.] Details are on our Security page, and the full set of security commitments is set out in each Service's agreement.
Where information is stored
[Hosting region(s) to be confirmed, for example "Client data is hosted in data centres located in Australia" and any New Zealand arrangement.] Any disclosure of client information to an overseas recipient is made only as permitted by the Service's agreement with us and the applicable privacy law.
Data breaches
If we become aware of a data breach affecting client information, we will notify the affected Service within the timeframe set in its agreement with us, give it the information it needs to assess the breach, and support it to meet its obligations under the Notifiable Data Breaches scheme in Australia or Part 6 of the Privacy Act 2020 in New Zealand.
Access, correction and complaints by clients
If you are a client of a Service that uses Mimaso and want to access or correct your record, or have a privacy concern, please contact that Service directly. It holds your record and is best placed to help. If you contact us instead, we will pass your request to the Service and help it respond.
Retention and leaving
Client information is kept for as long as the Service's agreement with us, and the retention rules that apply to the Service, require. If a Service leaves Mimaso, we provide an export of its data in a usable format and then delete it from our systems, in the manner and within the period set out in the agreement, subject to any legal requirement to retain it.
Indigenous Data Sovereignty
For Aboriginal community-controlled organisations and Māori health providers, we recognise that communities should keep control of their community's data. We work with each Service on how that applies to its records, reporting and governance.
Questions
Services with questions about this notice, or about a specific privacy obligation, can contact their account contact or info@mimaso.net.
Last updated: 29 October 2026
Cookie notice
The cookies and analytics used on this website.
This notice explains how this website uses cookies and similar technologies. It forms part of our Privacy Policy.
What cookies are
Cookies are small text files placed on your device by a website. Some are needed for a site to work; others remember your preferences or help the site operator understand how the site is used.
Cookies used on this Site
- Strictly necessary: cookies set by our hosting platform to deliver the Site securely and to submit the contact form. These cannot be switched off and do not identify you.
- Analytics: [to be confirmed]. If we use an analytics tool, it will be listed here with what it collects, how long its cookies last and how to opt out. We do not use analytics cookies until this notice names them.
- Advertising and tracking: none. We do not use advertising cookies, tracking pixels or social media trackers on this Site.
Managing cookies
You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the Site, including the contact form, from working.
Changes
If we add a tool that sets cookies, we will update this notice before it goes live.
Last updated: 2 November 2026
Terms of use
The terms that apply to your use of this website.
These terms apply to your use of this website (the "website"). By using the website, you agree to them. If you do not agree, please do not use the website. These terms do not govern the supply of the Mimaso platform or any services, which are covered by separate written agreements.
Who we are
"Mimaso", "we" and "us" refer to the operator of the Mimaso platform and this website. [Legal entity name and ABN to be confirmed.]
Intellectual property
Unless stated otherwise, the content of this website, including text, graphics, images, layout and design, is owned by or licensed to Mimaso and is protected by Australian, New Zealand and international copyright and other intellectual property laws.
The name Mimaso, the Mimaso logo and related branding are trade marks of Mimaso. You must not use them, or any confusingly similar name or mark, without our prior written consent.
You may view the website and print or download extracts for your own internal, non-commercial reference. You must not otherwise copy, reproduce, modify, republish, distribute or create derivative works from any part of the website without our prior written consent.
Credits
The state and territory outlines used in the interactive map on this website are adapted from svg-maps/australia, licensed under the Creative Commons Attribution-ShareAlike 4.0 International licence (CC BY-SA 4.0). The adapted outlines are made available under the same licence.
Images
Photographs of people on this website, including the presenter in our overview video, are AI-generated or stock images used for illustration only. They do not show Mimaso clients, staff or partners, the organisations that use Mimaso, or the people those organisations support, and they do not imply any endorsement. Any resemblance to a real person is coincidental.
Third-party names and marks
This website refers to government agencies, funders, data collections, standards bodies and sector peak bodies by name, for identification and information purposes only. All third-party names, logos and trade marks belong to their respective owners. Their mention does not imply any affiliation with, sponsorship by or endorsement of Mimaso, unless we say so expressly.
Information on this website
The information on this website is general in nature and provided for information purposes only. It is not legal, clinical, financial or professional advice, and it does not take into account the circumstances of your organisation.
Descriptions of software features, integrations, certifications and reporting capabilities are a general overview. Availability, configuration and functionality may vary by organisation, jurisdiction and agreement, and may change over time. Reporting requirements are set by governments, funders and other bodies and change from time to time. Accurate and compliant reporting also depends on the data entered by your organisation. Nothing on this website is a guarantee of any particular outcome, result or regulatory compliance.
We take reasonable care to keep the website accurate and current, but we do not warrant that it is complete, accurate or up to date. Any commitment we make about software or services will be set out in a written agreement.
References to certifications, accreditations or government supplier arrangements describe their status at the time of publication and the scope stated by the certifying or contracting body. They are not a warranty that any particular system, service or outcome is covered.
Quotes, demonstrations and pricing
Demonstrations, quotes, proposals and pricing information are provided for discussion only. They are not an offer capable of acceptance and do not create a binding obligation. Mimaso is supplied only under a written agreement signed by both parties, and that agreement sets out the scope, price and terms.
Information you send us
Please do not send us client, clinical or other sensitive information through this website or by email. Information you send through the contact form is not treated as confidential unless we agree otherwise in writing. If you send us suggestions or feedback about Mimaso, we may use them without any obligation to you.
Availability
We may change, suspend or withdraw the website, or any part of it, at any time without notice. We do not guarantee that the website will be available without interruption, or that it or any download from it is free of errors, viruses or other harmful components. You are responsible for protecting your own systems.
Links to other websites
The website may link to websites operated by others. We are not responsible for their content, availability or privacy practices, and a link does not mean we endorse them.
Acceptable use
You must not use the website in a way that is unlawful, that infringes anyone's rights, or that could damage, disable or impair the website, including by introducing malicious code, attempting to gain unauthorised access, or scraping or harvesting content or data.
Liability
Nothing in these terms excludes, restricts or modifies any right or remedy, or any guarantee, warranty or other term or condition, implied or imposed by the Australian Consumer Law, the Consumer Guarantees Act 1993 (NZ), the Fair Trading Act 1986 (NZ) or any other legislation that cannot lawfully be excluded or limited.
Subject to that, and to the maximum extent permitted by law, we exclude all warranties and representations about the website and its content, and we are not liable for any loss or damage (including indirect or consequential loss, or loss of data, profit or revenue) arising out of or in connection with your use of, or reliance on, the website or any linked website.
Where our liability for a breach of a guarantee or other non-excludable right can be limited, it is limited, at our option, to supplying the relevant services again or paying the cost of having them supplied again.
If you use the website for the purposes of a business, the Consumer Guarantees Act 1993 (NZ) does not apply, and you agree that it is fair and reasonable for that Act to be excluded.
Indemnity
You indemnify us against any loss, damage, cost or claim arising from your breach of these terms or your unlawful use of the website.
Privacy
Our Privacy Policy and Cookie notice explain how we handle personal information collected through the website.
Changes to these terms
We may update these terms at any time by publishing a new version on this page. The version published when you use the website applies.
Governing law
These terms are governed by the laws of Australia. [State to be confirmed.] You submit to the non-exclusive jurisdiction of the courts of that state and the courts that may hear appeals from them.
General
If any part of these terms is invalid or unenforceable, it is read down or severed to the extent necessary, and the rest of these terms continues to apply. If we do not enforce a right under these terms, we have not waived it. These terms are the entire agreement between you and us about your use of the website.
Contact us
Questions about these terms can be sent to info@mimaso.net.
Last updated: 29 October 2026
Accessibility statement
Our commitment to an accessible website.
Mimaso is committed to making this website accessible to as many people as possible, including people who use assistive technology.
Our standard
We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at Level AA, the standard referenced by the Disability Discrimination Act 1992 (Cth) and used by Australian and New Zealand governments. The Site uses semantic headings, descriptive link text, text alternatives for images, sufficient colour contrast and a layout that works with keyboard navigation and at increased text sizes.
Known limitations
We review the Site regularly, but we cannot guarantee that every page, feature or linked third-party document will be fully accessible at all times. If you find something that is difficult to use, please tell us and, where we can, we will provide the information in another format.
Feedback
Email info@mimaso.net with "Accessibility" in the subject line, describing the problem and the page it is on. We aim to respond within five business days.