Privacy policy
Last updated: 27 October 2026
Countersigns is a business name of Divgun Virk, a sole trader (ABN 28 551 886 085) based in Mango Hill, Queensland. In this policy, “we”, “us” and “our” mean Countersigns, and “you” means anyone who visits this website, contacts us or uses our services.
This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), even where the law may not strictly require a business of our size to do so.
1. The short version
- We collect only what we need to reply to you, book calls, take payment and deliver our services.
- We do not want, ask for or accept patient health information.
- We never sell your information or use it for anyone else’s marketing.
- This website does not use tracking or advertising cookies.
- You can ask to see, correct or delete your information at any time.
2. What we collect
- When you contact us: your name, pharmacy name, email address, phone number and your message.
- When you book a call: your name, email address, the time you choose and any notes you add.
- When you pay: your name, email address, phone number, pharmacy name, the amount paid and whether the payment succeeded. Your card or account details go straight to our payment provider, Stripe. We never see or store your full card number.
- While we work together: business documents you choose to share, such as policies, registers, training records, procedures and correspondence about accreditation, plus the names and work contact details of staff that appear in them.
- When you visit the website: our web host may automatically record basic technical information, such as your IP address, browser type and the pages requested, to keep the site running and secure. We do not use this to identify you.
You don’t have to give us any of this, but if you don’t, we may not be able to reply to you or provide our services. You can contact us without giving your name, but we will need a way to reply.
3. Patient health information
Our work is about your pharmacy’s systems and records, not your patients. We do not want, ask for or accept patient health information or any information that identifies a patient.
- Please remove or redact patient details before sharing any document with us.
- If we receive patient information by mistake, we will not use it. We will delete it as soon as we notice, and let you know so you can take any steps you need to.
4. How we use your information
We use personal information only to:
- reply to your enquiry and book calls
- provide the services you ask for, including reminders that are part of a Care plan
- take payment, issue receipts and keep business, tax and accounting records
- keep our website and systems secure
- meet our legal obligations.
We will only send you marketing emails if you have agreed to receive them, and every such email will include a way to unsubscribe. Service messages about work you have booked are not marketing.
5. Who we share it with
We do not sell, rent or trade personal information. We share it only with the service providers we use to run the business, and only as much as they need to do their job:
- Formspree: receives messages sent through our contact form.
- Cal.com: manages call bookings and sends calendar invites.
- Google Workspace (including Google Calendar): our email, calendar and shared folders.
- Stripe: processes payments.
- GitHub: hosts this website.
We may also share information with our accountant or professional advisers, or where the law requires it.
6. Information stored overseas
Some of these providers store or process information outside Australia, including in the United States and Europe. We choose established providers that protect information with industry-standard security. By using our website and services, you understand that your information may be handled overseas in this way.
7. How we keep it secure
- Our accounts are protected by strong passwords and two-step sign-in where available.
- Only Divgun Virk has access to your information. No one else works in the business.
- Shared folders are shared only with the people you nominate.
- This website is served over a secure (HTTPS) connection.
No system is completely secure. If we become aware of a breach that is likely to cause you serious harm, we will tell you promptly and explain what we are doing about it.
8. How long we keep it
- Enquiries that don’t go ahead: deleted within 12 months.
- Documents you share for a piece of work: deleted or returned within 90 days after the work ends, unless you ask us to keep them (for example, during a Care plan).
- Invoices and payment records: kept for five years, because Australian tax law requires it.
9. Cookies and analytics
This website does not use tracking, advertising or analytics cookies, and does not use Google Analytics. If we add analytics in future, we will only use a privacy-friendly, cookie-free service and update this policy first. The booking calendar (Cal.com) and the payment page (Stripe) are run by those providers and may use their own cookies, as explained in their privacy policies.
10. Your choices and rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy
- correct information that is wrong or out of date
- delete your information
- stop sending you any marketing.
Email us with your request. We will reply within 30 days. There is no charge. We will delete information on request, unless the law requires us to keep it, for example tax records. If that applies, we will tell you.
11. Questions and complaints
If you have a question or a concern about how we have handled your information, email info@countersigns.com.au or call 0468 891 985. We will reply within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
12. Changes to this policy
We may update this policy from time to time, for example when we start using a new service provider. The current version will always be on this page, with the date it was last updated.