Get Early Access
Privacy.

Privacy Policy

DeparturePilot — Funeral Director Platform

Effective date: 3 June 2026

Version 1.0

This Privacy Policy explains how Leaf Run Pty Ltd ABN 75 658 378 799 ("we", "us", "our") collects, uses, stores, and discloses personal information in connection with DeparturePilot.

We are committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who This Policy Applies To

This policy applies to:

  • Subscribers — funeral directors and their staff who use DeparturePilot
  • Families — individuals who provide information through the client portal at a Subscriber's direction
  • Visitors — anyone who visits our website at departurepilot.com.au

DeparturePilot is a multi-tenant platform. Each Subscriber's data is logically isolated. Subscribers are responsible for their own privacy obligations to families and deceased persons under their care.

2. What Personal Information We Collect

2.1 Subscriber Information

We collect information about Subscribers including:

  • Name, business name, ABN, and contact details
  • Billing information (processed by our payment provider — we do not store card numbers)
  • Login credentials
  • Usage data and audit logs

2.2 Client Data (entered by Subscribers)

Subscribers enter information about deceased persons and families including:

  • Full name, date of birth, date of death, and other identity information
  • Residential address and contact details
  • Family relationships and next of kin
  • Health and care information
  • Documents including authority to release, signed forms, and uploaded files

We process this data on behalf of Subscribers and do not use it for our own purposes.

2.3 Website Visitors

We may collect standard server logs and analytics data from visitors to our website, including IP addresses, browser type, and pages visited.

3. How We Collect Information

  • Directly from Subscribers when they register and use the Platform
  • From families when they submit information through the client portal at a Subscriber's direction
  • Automatically through server logs and analytics

4. How We Use Personal Information

4.1 Subscriber Information

We use Subscriber information to:

  • Provide and operate the Platform
  • Process payments and send invoices
  • Provide customer support
  • Send service communications and product updates
  • Comply with legal obligations

4.2 Client Data

We process Client Data only on the instructions of Subscribers and only for the purpose of providing the Platform. We do not use Client Data for marketing, analytics, or any purpose other than delivering the service.

5. Disclosure of Personal Information

We do not sell personal information. We may disclose personal information to:

  • Service providers who assist us in operating the Platform (including cloud hosting, email delivery, and SMS providers), under confidentiality obligations
  • Our payment processor for billing purposes
  • Law enforcement or government authorities where required by law
  • A successor entity in the event of a merger, acquisition, or sale of our business

All third-party providers are required to handle personal information in accordance with Australian privacy law.

6. Data Storage and Security

6.1 Location

Client Data and Subscriber Data are stored on servers located in Australia (Sydney region). Backups are stored in an encrypted AWS S3 bucket in the ap-southeast-2 (Sydney) region.

6.2 Security Measures

We implement reasonable technical and organisational security measures including:

  • Encrypted data transmission (TLS)
  • Access controls and authentication requirements
  • Regular automated backups
  • Logical isolation of each Subscriber's data
  • Audit logging of significant actions

No method of transmission or storage is completely secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach that is likely to result in serious harm.

7. Data Retention

  • Subscriber account data is retained for the duration of the subscription and deleted 30 days after termination
  • Client Data is retained as above and available for export before deletion
  • Billing records may be retained for 7 years for tax purposes
  • Server logs are retained for up to 90 days

8. Access and Correction

Subscribers may access, correct, or export their own account information and Client Data through the Platform at any time.

Families who wish to access or correct information they have submitted through the client portal should contact the relevant Subscriber (funeral director) directly.

If you believe we hold incorrect information about you, please contact us and we will correct it promptly.

9. Cookies and Analytics

Our website uses cookies for essential functionality. We do not use third-party advertising cookies. The Platform does not use cookies beyond session management.

10. Third-Party Services

The Platform integrates with the following third-party services:

  • ZeptoMail — transactional email delivery
  • Twilio — SMS notifications
  • AWS S3 — encrypted backup storage
  • Stripe — payment processing (card data is handled by Stripe and not stored by us)

Each provider has their own privacy policy. We select providers that meet appropriate privacy and security standards.

11. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors through our subscriber-facing interfaces.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Subscribers of material changes by email. The current version is always available at departurepilot.com.au/privacy.

13. Complaints

If you have a complaint about our handling of personal information, please contact us in the first instance. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Contact Us

Privacy enquiries:
legal@departurepilot.com.au

Postal address:
PO BOX 1
THE SUMMIT QLD 4377

DeparturePilot is operated by:
Leaf Run Pty Ltd ABN 75 658 378 799

Data.

Data Processing Agreement

DeparturePilot — Funeral Director Platform

Effective date: 3 June 2026

Version 1.0

This Data Processing Agreement ("DPA") is entered into between Leaf Run Pty Ltd ABN 75 658 378 799 ("Processor") and the Subscriber ("Controller") and forms part of the DeparturePilot Terms of Service.

This DPA sets out the terms on which the Processor will process personal information on behalf of the Controller in connection with the DeparturePilot platform.

1. Definitions

"Personal Information" has the meaning given in the Privacy Act 1988 (Cth).

"Processing" means any operation performed on Personal Information, including collection, storage, use, disclosure, and deletion.

"Controller" means the Subscriber who determines the purposes and means of processing Personal Information.

"Processor" means DeparturePilot (operated by Leaf Run Pty Ltd), who processes Personal Information on behalf of the Controller.

"Sub-Processor" means any third party engaged by the Processor to process Personal Information.

"Data Breach" means unauthorised access, disclosure, loss, or alteration of Personal Information that is likely to result in serious harm.

2. Roles and Responsibilities

2.1 Controller Responsibilities

The Controller:

  • Is responsible for the lawful collection and use of Personal Information entered into the Platform
  • Must ensure it has an appropriate legal basis for processing Personal Information through the Platform
  • Is responsible for informing individuals about how their information will be used
  • Must comply with all applicable privacy laws including the Privacy Act 1988 (Cth) and the Australian Privacy Principles
  • Is responsible for the accuracy of Personal Information entered into the Platform

2.2 Processor Responsibilities

The Processor:

  • Will process Personal Information only on the documented instructions of the Controller
  • Will not process Personal Information for any purpose other than providing the Platform
  • Will implement appropriate technical and organisational security measures
  • Will assist the Controller in responding to access and correction requests
  • Will notify the Controller of any Data Breach without undue delay
  • Will delete or return Personal Information on termination of the agreement

3. Scope of Processing

3.1 Nature and Purpose

The Processor will process Personal Information for the purpose of providing the DeparturePilot platform, including:

  • Storing and displaying flow information entered by the Controller
  • Facilitating secure communication between the Controller and families
  • Generating and managing signed documents
  • Providing the family client portal
  • Creating backups and maintaining system security

3.2 Types of Personal Information

The following categories of Personal Information may be processed:

  • Identity information (names, dates of birth, dates of death)
  • Contact information (addresses, phone numbers, email addresses)
  • Family relationships and next of kin details
  • Sensitive information such as Indigenous status (collected for BDM registration purposes only)
  • Documents including signed forms and uploaded files

3.3 Data Subjects

Processing relates to deceased persons, their family members, and the Controller's staff.

4. Security

The Processor will implement the following security measures:

  • Encrypted data transmission using TLS
  • Logical isolation of each Controller's data within the multi-tenant platform
  • Role-based access controls within each Tenant
  • Encrypted backups stored in Australia (AWS ap-southeast-2)
  • Audit logging of significant system actions
  • Regular security reviews

The Processor will ensure that persons authorised to process Personal Information are bound by appropriate confidentiality obligations.

5. Sub-Processors

The Controller consents to the Processor engaging the following Sub-Processors:

  • Amazon Web Services (AWS) — cloud hosting and backup storage, Sydney region
  • ZeptoMail — transactional email delivery
  • Twilio — SMS notifications
  • Stripe — payment processing

The Processor will notify the Controller of any material changes to Sub-Processors and will ensure that Sub-Processors are bound by equivalent data protection obligations.

6. Data Breach Notification

In the event of a Data Breach that affects Personal Information processed under this DPA, the Processor will:

  • Notify the Controller without undue delay and in any case within 72 hours of becoming aware of the breach
  • Provide details of the nature of the breach, the categories and approximate number of individuals affected, and the likely consequences
  • Describe the measures taken or proposed to address the breach

The Controller is responsible for assessing whether the breach requires notification to the Office of the Australian Information Commissioner (OAIC) and/or affected individuals under the Notifiable Data Breaches scheme.

7. Data Subject Rights

The Processor will assist the Controller in responding to requests from individuals seeking to access, correct, or delete their Personal Information, to the extent technically feasible within the Platform.

Requests from individuals should be directed to the Controller in the first instance. The Controller may contact the Processor for technical assistance where required.

8. Data Retention and Deletion

The Processor will retain Personal Information for the duration of the Controller's subscription and for 30 days following termination. During this period the Controller may export their data.

Following the 30-day period, Personal Information will be securely and permanently deleted from the Platform and backup systems, except where retention is required by law.

9. Audit Rights

The Controller may request information from the Processor to verify compliance with this DPA. The Processor will respond to reasonable compliance enquiries within 30 days.

Where required by law, the Processor will cooperate with audits conducted by the Controller or a regulator, subject to reasonable notice and confidentiality protections.

10. Term and Termination

This DPA commences on the date the Controller first uses the Platform and continues for the duration of the Terms of Service. It terminates automatically on termination of the Terms of Service.

11. Governing Law

This DPA is governed by the laws of Queensland, Australia.

By using the DeparturePilot platform, the Controller agrees to the terms of this Data Processing Agreement.


Processor:
Leaf Run Pty Ltd ABN 75 658 378 799

Contact:
legal@departurepilot.com.au

Postal Address:
PO BOX 1
THE SUMMIT QLD 4377

Terms.

Terms of Service

DeparturePilot — Funeral Director Platform

Effective date: 3 June 2026

Version 1.0

These Terms of Service ("Terms") govern your access to and use of DeparturePilot, a cloud-based funeral workflow management platform, operated by Leaf Run Pty Ltd ABN 75 658 378 799 ("we", "us", "our"). By creating an account or using the Platform, you agree to these Terms.

IMPORTANT: Please read these Terms carefully. If you do not agree, do not use DeparturePilot. These Terms constitute a legally binding agreement between you (the Subscriber) and us.

1. Definitions

"Platform" means the DeparturePilot software, including the team portal, client portal, signing system, and all associated services.

"Subscriber" means the funeral provider, business, or individual who has registered for a DeparturePilot account.

"Tenant" means a Subscriber's instance of the Platform, identified by their unique subdomain.

"Client Data" means information about deceased persons, families, and associated individuals entered into the Platform by the Subscriber.

"Family" or "Family Member" means a person who accesses the client-facing portal at the Subscriber's direction.

"Authorised User" means any staff member or representative of the Subscriber granted access to the Platform.

2. Account Registration and Access

2.1 Eligibility

You must be a licensed funeral director or an authorised employee of a licensed funeral services business in Australia or New Zealand to use the Platform.

2.2 Account Security

You are responsible for maintaining the confidentiality of your login credentials. You must notify us immediately if you suspect unauthorised access to your account. We are not liable for losses arising from unauthorised use of your credentials.

2.3 Authorised Users

You may grant access to Authorised Users within your Tenant. You are responsible for their compliance with these Terms and for any actions they take within your Tenant.

3. Subscription and Payment

3.1 Plans

DeparturePilot is offered on a subscription basis. Plan types, features, and pricing are published on our website and may be updated from time to time.

3.2 Billing

Subscriptions are billed monthly or annually in advance. Payment is processed via our payment provider. All amounts are in Australian dollars and inclusive of GST where applicable.

3.3 Free Trial

We may offer a free trial period. At the end of the trial, you must subscribe to continue accessing the Platform. We reserve the right to modify or discontinue trial offers at any time.

3.4 Non-Payment

If payment is not received within 14 days of the due date, we may suspend your access to the Platform. We will provide written notice before suspension.

3.5 Cancellation

You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. No refunds are provided for partial periods.

4. Use of the Platform

4.1 Permitted Use

The Platform is licensed to you for the purpose of managing funeral workflows and communicating with families in the course of your funeral services business.

4.2 Prohibited Use

You must not:

4.3 Compliance

You are responsible for ensuring your use of the Platform complies with all applicable laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles, and any state or territory laws governing funeral services and death registration.

5. Client Data and Privacy

5.1 Data Ownership

All Client Data you enter into the Platform remains yours. We do not claim ownership of Client Data.

5.2 Our Role

In relation to Client Data, we act as a data processor on your behalf. You are the data controller and are responsible for ensuring you have the necessary consents and legal bases to collect and process personal information through the Platform.

5.3 Data Handling

We handle Client Data in accordance with our Privacy Policy and any applicable Data Processing Agreement. Client Data is stored on servers located in Australia.

5.4 Family Portal

The Platform includes a client-facing portal through which families may submit personal information and documents. You are responsible for informing families about how their information will be used and for obtaining any required consents.

5.5 Data Retention

We retain Client Data for the duration of your subscription and for a period of 30 days following termination, after which it is securely deleted. You may export your data at any time during your subscription.

6. Intellectual Property

6.1 Platform IP

All intellectual property rights in the Platform, including software, design, documentation, and trademarks, are owned by us or our licensors. These Terms do not transfer any ownership rights to you.

6.2 Feedback

If you provide feedback or suggestions about the Platform, you grant us a perpetual, royalty-free licence to use that feedback without obligation to you.

7. Availability and Support

7.1 Availability

We aim to provide continuous access to the Platform but do not guarantee uninterrupted availability. We may perform scheduled maintenance with reasonable notice.

7.2 Support

Support is provided via email. We aim to respond to support requests within one business day.

7.3 Updates

We may update or modify the Platform at any time. We will endeavour to notify Subscribers of significant changes.

8. Limitation of Liability

Nothing in these Terms limits our liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded by law.

9. Warranties and Disclaimers

We warrant that we will provide the Platform with reasonable care and skill. We do not warrant that the Platform will be error-free or meet your specific requirements.

The Platform is provided as a workflow management tool only. It does not constitute legal, medical, or regulatory advice. You are responsible for compliance with all applicable laws and professional obligations.

10. Termination

10.1 By You

You may terminate your subscription at any time by cancelling through the Platform or by written notice to us.

10.2 By Us

10.3 Effect of Termination

On termination, your access to the Platform ceases. You may request an export of your Client Data within 30 days of termination.

11. Changes to These Terms

We may update these Terms from time to time. We will notify Subscribers of material changes by email at least 14 days before they take effect. Continued use of the Platform after that date constitutes acceptance of the updated Terms.

12. Governing Law

These Terms are governed by the laws of Queensland, Australia. Any disputes will be resolved in the courts of Queensland, unless you are a consumer and applicable law requires otherwise.

13. General

If any provision of these Terms is found to be unenforceable, the remaining provisions continue in full force. These Terms constitute the entire agreement between us regarding the Platform.


Contact:
legal@departurepilot.com.au

Postal Address:
PO BOX 1
THE SUMMIT QLD 4377

DeparturePilot is operated by:
Leaf Run Pty Ltd ABN 75 658 378 799