Privacy Policy
Loom Operations handles your personal information carefully, collects only what it needs, and follows the Australian Privacy Principles.
Loom Operations is an operations and systems business run by Natalle Krynauw, a sole trader based in Melbourne, Victoria (ABN 78 526 238 211). In this policy, “Loom Operations”, “we”, “us” and “our” mean Natalle Krynauw trading as Loom Operations.
This policy explains what personal information we collect, why we collect it, how we use, store and protect it, and how you can access or correct it. It applies to people who visit our website, enquire about our services, book a call, become clients, or whose information we handle while working for a client.
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) as good practice, whether or not the Act formally applies to our business.
What personal information we collect
We collect the contact and business details needed to talk with you and deliver our services, and nothing more than the work requires.
Contact details, such as your name, email address and phone number
Business details, such as your business name, ABN and address
Notes from discovery calls and meetings about how your business runs
Billing and payment records, agreements and correspondence
Names and contact details of a client’s staff, customers or contractors, where we see them while working in the client’s own systems
We don’t ask for sensitive information, such as health information, and we ask clients not to send it to us unless a task genuinely needs it. We never collect or store tax file numbers, government ID numbers or full bank card details.
How we collect it
Most information comes straight from you, when you contact us, book a call or work with us.
When you send an enquiry through our website, email or phone us, or connect with us on LinkedIn or Facebook
When you book a discovery call through our online booking page
During calls and meetings, including through meeting notes or transcription (only with attendees’ knowledge)
When you become a client and sign an agreement, or we send you invoices
While we work in a client’s own systems and accounts, with the client’s permission
From a referral partner or contact who introduces you, with your agreement
You can contact us without giving your name, but we usually need your contact details to reply or provide services.
Why we collect it and how we use it
We use your information to respond to you, deliver and manage our services, and run our business. We don’t sell it.
Replying to enquiries and preparing for discovery calls
Preparing proposals and agreements
Delivering services, including setting up systems and documenting processes for clients
Invoicing, keeping financial records and meeting tax obligations
Keeping in touch about your work with us
Improving how we work, using anonymised examples where possible
Meeting our legal obligations
We only use information for the purpose it was collected, or a related purpose you would reasonably expect.
How we use AI tools
We use a small set of approved AI tools, such as Claude by Anthropic and Tactiq for meeting transcription, to help draft, analyse and prepare work. Settings that let providers train AI models on our data are switched off where possible, only the information a task needs goes into these tools, and a person reviews everything before it’s used. Our AI Use and Data Handling Policy has more detail and is available on request.
Who we share it with
We only share personal information with the service providers we use to run the business, or where the law requires it.
We use trusted software providers to store and process information on our behalf, including Google Workspace (email, files and calendar booking), Microsoft 365, Notion, Zapier, Claude by Anthropic, Tactiq, Canva, Squarespace (our website), Xero (accounting) and our bank. We may also share information with any subcontractor we engage to help deliver our services, our accountant or professional advisers, or anyone else you ask us to.
Some of these providers, and any subcontractors, may store or access data outside Australia, including in the United States. Before using a provider, we check its privacy terms are consistent with the Australian Privacy Principles, including whether data is used to train AI models and whether we can delete it.
We will disclose information if required by law, for example to a court or government authority.
How we store and protect it
Your information is stored in secure cloud services with multi-factor authentication, and kept only as long as we need it.
Client work is done in the client’s own systems and accounts wherever possible, so their data stays under their control.
Our own records are kept in secure cloud services with multi-factor authentication switched on.
Access to connected apps and shared pages is reviewed regularly, and anything unused is disconnected.
When an engagement ends, we hand over work files and confirm once our access to the client’s systems has been removed.
We keep financial and business records for five years, as required for tax purposes. Other information, such as enquiry details and meeting transcripts, is deleted once it’s no longer needed. Meeting transcripts are deleted once notes are finalised.
Our website
Our website is hosted on Squarespace, which uses cookies to make the site work and to give us general visitor statistics.
These statistics, such as the number of visitors and which pages are viewed, don’t identify you personally. You can block or delete cookies in your browser settings, though some parts of the site may not work as well. Squarespace’s own privacy policy explains how it handles information.
Our website may link to other sites, such as LinkedIn or our booking page. We’re not responsible for the privacy practices of those sites.
Marketing and testimonials
We only use names and feedback in our marketing as agreed with you, and you can withdraw consent at any time.
We don’t add people to a mailing list without their consent, and every marketing email includes a way to unsubscribe.
Testimonials are only published with the credit the person approves.
When we describe our work, we may name clients as one of our clients, as set out in their services agreement. Clients can ask us not to name them at any time, and we’ll describe the work in general terms instead.
To withdraw consent, email natalle@loomoperations.com.au.
Accessing your information, and complaints
You can ask to see or correct the personal information we hold about you, or make a complaint, by contacting us directly.
We’ll respond within 30 days. If we can’t give you access or make a correction, we’ll explain why.
If you have a concern about how we’ve handled your information, please contact us first so we can try to put it right. We’ll acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you’re not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner at oaic.gov.au.
Contact: Natalle Krynauw, Loom Operations
Phone: +61 413 512 322
Data breaches and changes to this policy
If a data breach affects your information, we’ll act the same day and tell you promptly.
We’ll contain the breach, assess whether it could cause serious harm, and let affected people know what happened and what we’re doing about it. Where the Notifiable Data Breaches scheme applies and serious harm is likely, we’ll also notify the Office of the Australian Information Commissioner.
We may update this policy from time to time. The current version will always be on our website.
Last updated 27 October 2026.