Last updated 30 August 2026
SWMS Generator is operated by Bookmint Pty Ltd ("we", "us", "our"), ABN 58 623 823 594, of PO Box 55, Parramatta NSW 2124. This Privacy Policy explains how we collect, hold, use and disclose personal information when you use the SWMS Generator platform at swmsgenerator.com.au, and how you can access and correct it or make a complaint.
We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) to the extent they apply to us, and we handle personal information in accordance with them. This Privacy Policy forms part of our Terms and Conditions.
Account and contact information. When you register or contact us: your name, email address, company or business name, phone number where provided, and your account password (stored as a one-way hash — we cannot read it).
Payment information. Payments are processed by Stripe. We receive confirmation of payment, the plan purchased, the amount and the last four digits of your card. We never receive or store your full card number.
Content you enter and documents you generate. Project and site details, company details, trade activities, hazards and controls you enter on generate forms, company logos you upload, and the SWMS, site inductions and related documents produced from them. This may include personal information about other people, such as supervisors, workers or contacts named in a document.
Signature and induction records. When a worker, supervisor or other signatory signs a document or completes a site induction through a signing link, we collect the name they enter, their drawn signature image, their quiz answers and result where a quiz is included, the date and time of completion, and technical details of the completion such as IP address and device or browser type. These records are stored with the document and the account that issued the link.
Usage and technical information. Login history, pages visited, documents generated, credits used, IP address, browser and device type, and referring pages. See Section 7 for cookies and analytics.
Marketing preferences. Whether you have opted in to or out of marketing emails, and how you interact with them.
You can use the platform without providing optional information such as a phone number, but you cannot create an account, purchase credits or generate documents without providing the information needed to do so.
The platform lets you enter information about people other than yourself — workers named in documents, and the signatories and inductees who complete records through your signing links. When you do this, you are responsible for having the right to enter that information and to have those people sign or complete inductions through the platform, and for telling them how their information will be handled.
As between you and us, you are the party who decides what that information is collected for and how it is used. We hold and process it on your instructions to provide the service to you, and we do not use it for our own purposes except as described in Section 5 (analytics, security and legal compliance).
If you are a worker or signatory whose details were entered by an SWMS Generator account holder, contact that account holder in the first instance about access, correction or deletion. You may also contact us and we will assist where we can.
We collect personal information directly from you when you register, purchase credits, complete a form, contact us or sign a document. We collect information about signatories and inductees through the signing links account holders share with them. We collect technical and usage information automatically through cookies and server logs.
We do not use your document content or signature records to train AI models.
We do not sell, rent or trade personal information. We disclose it only to the following categories of recipients, and only for the purposes above:
We use cookies and similar technologies for three purposes:
You can control cookies through your browser settings and by opting out of Google Analytics at tools.google.com/dlpage/gaoptout and of Meta advertising through your Facebook ad settings. Blocking essential cookies will prevent you from logging in.
Some of the service providers listed in Section 6 store or process personal information outside Australia, principally in the United States. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs, including by contracting with providers that maintain recognised security and privacy commitments. By using the platform you consent to this overseas disclosure for the purposes described in this policy.
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include HTTPS encryption of all traffic, hashed passwords, access controls on our servers and database, regular backups, and tamper-evident hashing of signed documents so that alterations after signing can be detected.
Signing links work on possession alone. If you are an account holder, share them only with intended signatories. If you believe a link or your account has been compromised, contact us immediately.
No system is completely secure, and we cannot guarantee the security of information transmitted over the internet. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We keep personal information for as long as needed to provide the service and meet our legal obligations:
When we no longer need personal information we take reasonable steps to destroy or de-identify it.
You can view and update most of your account information from your account settings. You can ask us to provide access to, or correct, the personal information we hold about you by emailing office@swmsgenerator.com.au. We will respond within a reasonable period and will not charge for a reasonable request.
You can ask us to delete your account and its data. We will delete or de-identify your account information, documents and signature records, except for information we must keep for legal reasons (such as transaction records) or that is reasonably necessary to resolve a dispute or enforce our terms. Deletion is permanent; export any documents you need first.
You can unsubscribe from marketing emails at any time using the link in any marketing email or by contacting us. We will continue to send essential service emails about your account.
The platform is provided for business use by people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
If you have a concern about how we have handled your personal information, contact us at office@swmsgenerator.com.au and we will investigate and respond, normally within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
We may update this Privacy Policy from time to time. Updates are posted on this page with a revised "Last updated" date. Where a change is material, we will give notice by email to active accounts before it takes effect.
Privacy enquiries: office@swmsgenerator.com.au
Bookmint Pty Ltd, ABN 58 623 823 594. PO Box 55, Parramatta NSW 2124, Australia.
