Privacy policy

OmniFIFO Network is the trading name of Ernesto, an individual based in Belgium, who is the controller of your personal data. Email: support@omnififonetwork.com. We publish guides, tools and written services for people who want to work in Australian fly-in, fly-out mining. We have not appointed a data protection officer because the law does not require one for an activity of our size and kind; write to the email above about anything in this policy.

We collect only what we need to send you what you asked for:

• When you ask for the free Blueprint or join a list: your email address, your first name if you give it, your answer to “Where are you right now?”, the page and campaign (UTM tags) that brought you here, your IP address, and the exact wording you agreed to, with the date and time.
• When you buy: your name and email address, the product, the amount, the payment reference, and your consent to immediate delivery. Card details go straight to Stripe, our payment provider; we never see or store them.
• When you order a written service or apply for VIP: your answers on the form (your situation and work rights, target state and role, tickets and licences, availability, and for VIP your location, background and goals) and the resume you upload.
• When you use our emails and downloads: when a delivery email is sent and when a download link is used, so we can fix delivery problems. Our email provider may also record opens and clicks.
• If you choose to tell us more (for example your work rights, city, background or availability, through a profile or status update): those answers, and nothing you haven’t typed or chosen yourself. Please don’t tell us about your health, medical tests or criminal record: we don’t need them and we don’t ask for them.
• When you write to us: your message and our reply.

You can browse the site without giving us anything. Our pages don’t use advertising trackers, cookies or browser storage of their own. Stripe’s checkout page sets its own cookies to process the payment and prevent fraud.

• To send the Blueprint and the short email series that follows it, including offers for our guides, tools and services, tailored to your answer to “Where are you right now?”. Legal basis: your consent.
• To send The FIFO Insider Dispatch, only if you ticked its separate box. Legal basis: your consent.
• To process your order: payment, delivery of your files, download links, your written service and help with your order. Legal basis: performance of our contract with you, or steps you ask us to take before it (a VIP application).
• To keep accounting and tax records. Legal basis: our legal obligations under Belgian accounting and tax law.
• To keep a record of your consent (the exact wording, its version, the date and time, and your IP address). Legal basis: our legal obligation to be able to prove consent, and our legitimate interest in defending ourselves against complaints.
• To keep the site and payments secure and prevent fraud and spam sign-ups. Legal basis: our legitimate interest in running a secure service.
• To see, in aggregate, which pages and posts bring people to us (campaign tags in links). Legal basis: our legitimate interest in improving our content. We don’t build advertising profiles.
• To use the extra details you choose to give us (for example work rights, city or availability) to send more relevant emails. Legal basis: your consent.

Without an email address we can’t send the Blueprint or your products. Where we rely on legitimate interest, you can object at any time (section 9).

We don’t make decisions about you by purely automated means that have legal or similarly significant effects. Your answer to “Where are you right now?” only changes which version of our emails you receive.

We don’t sell your personal information. We use these service providers to run the site, and they handle it for us:

• Cloudflare (website hosting and security), Supabase (database and private file storage), Brevo (email, France) and Stripe (payments). They process data on our behalf under data processing agreements. For fraud prevention and its own legal duties, Stripe also acts as an independent controller: see stripe.com/privacy.

Employers and recruiters: we never pass your details to an employer, recruiter or contractor unless you give a separate, explicit consent for that specific purpose. We record that consent, and you can withdraw it at any time.

We may also disclose information when the law requires it.

Our service providers store and process data in several countries:

• Supabase stores our database and files and may access them from other countries, including the United States. Transfers from the EU rely on the European Commission’s standard contractual clauses.
• Stripe and Cloudflare process data in the United States and other countries. Both state that they are certified under the EU-U.S. Data Privacy Framework (covered by the European Commission’s adequacy decision of 10 July 2023), with standard contractual clauses as a fallback.
• Brevo is based in the European Union (France).

You can ask us for a copy of the safeguards that apply by emailing support@omnififonetwork.com. For readers in Australia: we choose providers bound by these contractual protections so that your information is handled consistently with the Australian Privacy Principles.

• Email lists: until you unsubscribe or ask us to delete your details. After you unsubscribe, we keep only your email address on a suppression list so that we never email you again.
• Consent records: for as long as you are on the list and for 5 years after you leave it, to prove consent if asked.
• Orders and accounting records: for the period Belgian accounting and tax law requires, currently up to 10 years.
• Service forms and resumes: 12 months after your service ends, or 3 months after a VIP application we didn’t take forward. Ask us and we delete them sooner.
• Delivery and download logs: 12 months.
• Support emails: 3 years after the last message, unless they concern an order (then as for orders).
• Profile answers you chose to give: until you delete them, withdraw consent or leave our lists.

When you ask us to delete your details, we remove your personal information and keep only anonymous totals and the records the law makes us keep.

Every email we send names OmniFIFO Network, gives our contact address and has an unsubscribe link that works without logging in. We act on unsubscribes within 5 business days. Unsubscribing from marketing doesn’t stop the delivery email for something you bought. You can withdraw your consent at any time with the unsubscribe link or by emailing us. Withdrawing doesn’t affect emails we sent before.

Email support@omnififonetwork.com to use any of these rights. We reply within one month (30 days) and don’t charge. If a request is complex we may need up to two more months, and we will tell you why. We may need to confirm it is really you before we act.

• Access: a copy of the information we hold about you.
• Correction: fix anything inaccurate or incomplete.
• Deletion: delete your information, except what the law makes us keep.
• Restriction: ask us to pause using your information while a question is resolved.
• Portability: receive the information you gave us, which we process on the basis of your consent or a contract, in a common machine-readable format (for example CSV), or have it sent to someone else.
• Objection: object at any time to uses based on our legitimate interest, and to direct marketing (we then stop).
• Withdraw consent: at any time, without affecting what we did before you withdrew it.

Your data sits in access-controlled systems. Product files are in private storage and download links are signed. No system is perfectly secure. If a data breach is likely to put your rights at risk, we will notify the Belgian Data Protection Authority within 72 hours. We will tell you directly when the risk to you is high or, for readers in Australia, when serious harm is likely, as the law requires.

If you think we have mishandled your information, email support@omnififonetwork.com and we will respond within one month. You can also complain to a data protection regulator at any time:

• in the European Union: the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), autoriteprotectiondonnees.be, or the authority in the EU country where you live or work;
• in Australia: the Office of the Australian Information Commissioner, oaic.gov.au.

Our products are for adults. We don’t knowingly collect information from anyone under 18.

We update this policy when what we do changes. The date at the top shows the latest version.