Privacy policy
Last updated 5 October 2026
Lane Draft is operated by Steven Rudolph Heitbaum (ABN 19 457 791 763) in Victoria, Australia ("Lane Draft", "we", "us"). This policy explains how we handle personal information, following the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
- Enquiries: your name, company, email, phone and message when you use our contact form or call us.
- Accounts: your name, email address, company and role. Passwords are stored only as a one-way scrambled form (a hash); we can't read them.
- Your schemes: what you enter into Lane Draft, such as site locations, work hours, permit numbers and the names and accreditation numbers of designers and checkers.
- Usage and security records: when you sign in, what you create, your IP address, and actions taken by our staff in the admin portal.
We don't collect payment card details ourselves. When paid plans are billed online, payments will be handled by a payment provider, and this policy will be updated to name it.
How we use it
- To provide Lane Draft: running your account, saving and drawing your schemes, making PDFs.
- To reply to enquiries and support requests, and to set up trials.
- To keep Lane Draft secure: stopping misuse, investigating problems, and keeping an audit log.
- To improve Lane Draft, using usage statistics.
We don't sell personal information, and we don't use it for third-party advertising.
AI features
When you use an AI feature, the text you provide is processed by AI models running on hardware Lane Draft controls in Australia. It isn't sent to overseas AI services, and we don't use your schemes to train AI models.
Where it is stored, and who else handles it
Lane Draft's servers and backups are in Victoria, Australia. We use a small number of service providers to run the service:
- Cloudflare, which delivers and protects our website. Web traffic passes through its network, which may include servers outside Australia.
- An email delivery provider, once we send emails such as invitations and password resets. We'll name it here when it is in use.
We may also disclose information where the law requires it.
How we protect it
Connections are encrypted, passwords are hashed, access to company data is limited by role, admin actions are logged, and backups are kept and tested regularly. No system is perfectly secure; if a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner as the law requires.
How long we keep it
We keep account and scheme data while your company uses Lane Draft. If your company closes its account, we delete its data within 90 days, except backups, which expire within 30 days after that, and records we must keep by law. Enquiries are kept for up to two years.
Your choices and rights
You can ask to see or correct the personal information we hold about you, or ask us to delete it. Contact us using the details below. We'll respond within 30 days.
Complaints
If you have a concern about privacy, please contact us first so we can fix it. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Contact
Steven Rudolph Heitbaum, Lane Draft
Phone 0422 662 490
[email protected]Contact form
Changes
We'll update this page if our practices change, and tell account holders about significant changes.