Privacy policy

What happens to personal information here — both on this website, and inside the Done‑Next software once you are a customer.

Last updated 8 October 2026

This policy is published by Solutions3D Pty Ltd, ABN 47 647 190 878, the provider of Done‑Next. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

It covers two different things, and it is worth knowing which part applies to you:

• The website, done-next.com — what happens if you look around it or send us an enquiry.
• The application — the information your business puts into Done‑Next once you are a customer, including information about your own staff, contractors and customers.

Part one: the website

What we collect

When you send an enquiry through the contact form, we collect whatever you choose to fill in: your name, business name, email address (the only required field), phone number, the sort of business you run, roughly how many people would use Done‑Next, and anything you write in the message box.

Along with it we record the time you sent it and the IP address you sent it from. That is not tracking — it is what lets us tell a real enquiry from the automated spam that finds every contact form, and it is the only thing we collect that you did not type.

What we don't collect

This site uses no analytics, no tracking cookies, and loads nothing from anyone else — no fonts, no scripts, no embedded anything. There is one piece of JavaScript on the whole site, on the contact page, and all it does is post your enquiry to our own server. Nothing is stored in your browser. If that ever changes, this page will say so before it does.

Why we collect it, and where it goes

Solely to read and reply to your enquiry, and — if you go ahead — to set up a trial suited to your business.

Your enquiry is posted to a small relay running on our own server, which sends it on as an ordinary email to enquiries@done-next.com through Microsoft 365. No marketing platform, CRM or other third party receives it. It is never sold, and never used for anything but replying to you.

How long we keep it

A copy of each enquiry is written to our server before we try to send it. That copy is the safety net: if our mail is down, it means your enquiry is still here to be dealt with rather than lost.

That copy is deleted after twelve months, automatically. The email itself lives in our mailbox and is kept while we are still doing business with you, or deleted when it is clear we are not.

Part two: the Done‑Next application

Who is responsible for what

Once your organisation is a customer, it decides what goes into Done‑Next. We hold that information on your organisation's behalf and act on its instructions. Your organisation is responsible for what it chooses to collect, for telling its own people about it, and for having the right to put it there.

If you are an employee or contractor of one of our customers and you have a question about information held about you, ask your own organisation first — they control it and can see all of it. We will help them answer you.

What is typically in it

Done‑Next is job and scheduling software, so the personal information in it is usually work information. In practice that means:

• names, roles, and work contact details for staff and contractors;
• a record of who did what and when — tasks completed, dates changed and the reason given, notes written against a job;
• photos and written notes taken on site, which may show people incidentally;
• scheduling and availability, including days marked as leave;
• tickets, licences and their expiry dates;
• names and contact details for your own customers and sites.

Done‑Next is not designed to hold sensitive information as the Privacy Act defines it — health records, government identifiers and the like — and we ask that you do not put such information into it. Where a day is marked as leave, record it as leave rather than as a reason.

Done‑Next can also run with no customer section at all, holding no records about anybody outside your business. If that suits your organisation, tell us and we will set it up that way.

What we do with it

Your organisation owns what it puts in. We do not claim ownership of it, we do not sell it, and we do not use it to train artificial intelligence or machine-learning models.

We will only access it where reasonably necessary to run, maintain, secure or support the service, to investigate or fix a problem, to respond to a request from you, to prevent fraud or a security incident, to meet a legal obligation, or to protect the safety and rights of people. Our own people and any contractors we use are subject to confidentiality obligations.

Where it is stored, and who else sees it

Data in Done‑Next is stored in Australia, on infrastructure we operate. We do not transfer it overseas.

The one third party involved in the ordinary running of the service is Microsoft 365, which despatches the email Done‑Next sends — invitations, password resets and the daily digest. Those messages carry the recipient's address and a summary of their own work. No other third party receives your data.

Security

We take reasonable technical and organisational measures to protect Done‑Next and the information in it against unauthorised access, loss, misuse and alteration. No online service can be guaranteed to be completely secure.

If we become aware of a security incident affecting your information that we reasonably believe requires notification, we will tell the affected organisation without unreasonable delay, and will meet our obligations under the Notifiable Data Breaches scheme where they apply.

How long we keep it

We keep the information in your instance for as long as your account is open. We take backups and retain them for approximately 30 days.

When an account ends we normally keep its data available for 30 days so there is a reasonable opportunity to export it, and then delete it. Data in backups may remain until those backups expire. You can ask us to delete sooner and we will, where we are legally able to.

Access, correction and complaints

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email enquiries@done-next.com and we will deal with it. You do not have to explain why. For information inside a customer's Done‑Next instance, we will refer you to that organisation, because it is theirs to correct — and we will help them do it.

If you think we have mishandled your personal information, tell us first and we will try to put it right. If you are not satisfied with how we have dealt with it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy. If a change materially affects how we handle personal information, we will tell affected customers before it takes effect. The date at the top changes whenever the policy does.

Contact

Solutions3D Pty Ltd, ABN 47 647 190 878
enquiries@done-next.com