Frequently Asked
Questions

For Australian businesses the key date is 10 December 2026, when the Privacy Act's automated decision-making transparency obligations take effect. The government has also agreed in principle to remove the small business exemption, though that is not yet law, and the OAIC has begun compliance sweeps. Overseas the same shift is further along: Europe has issued over €7.1B in GDPR fines and regulators there now target small and mid-sized businesses, not just big tech.

Often, yes. In Australia the Privacy Act covers businesses with annual turnover above $3 million, and smaller ones that trade in personal information, provide a health service, contract to the Commonwealth or have opted in. If you sell to people in the EU or UK, GDPR can apply whatever your size, and some US state laws apply above set thresholds. If you are under the Australian threshold, a clear privacy policy is still what customers and payment providers expect. The Deep Scan shows what your website discloses today.

Non-compliance can result in regulatory penalties, enforced operational changes, reputational damage, and in some jurisdictions, personal liability for directors and officers. The earlier you act, the more options you have.

Because it's the clearest preview of what's coming here. Europe rolled out comparable transparency and privacy obligations, and enforcement escalated from headline tech-giant cases to routine fines against small and mid-sized businesses. Australia's Privacy Act reforms land on 10 December 2026 and the OAIC has already begun sweeps. If you also serve customers in the USA or EU, those rules apply to parts of your operations today. Our Deep Scan assesses your full jurisdictional exposure.

We read the public pages of your website, the same way any visitor's browser does. We never log in, change anything, or touch your systems or code. Your privacy policy and disclosures are hosted on our servers and linked from your site, which is how we keep them current without needing access. Everything else is delivered as documents you publish yourself, with full control over what goes live and when.

Two ways, depending on the gap. Your privacy policy and AI disclosure are written, hosted and maintained by us - you add one link to your site footer, once, and we keep those documents current as the rules change. For items that live inside your own business - cookie consent, provider agreements, your data register, a breach response plan - you get a draft document started with your business details and the tools we found on your site, with plain-English steps. You publish those yourself, so nothing goes live without your say-so.

No. The drafts are written for business owners, not specialists. Publishing a privacy policy means adding one link to your footer. Accepting a provider agreement means clicking through it in your account. A data register is a simple list we start for you. Anything in [square brackets] is a detail only you know. For anything you will rely on legally, have a lawyer look it over.

The scan reads what is already on your site and reports it as in place. If your privacy policy exists but is missing something, the report says exactly what to add rather than asking you to start again.

No. Every monitoring plan includes one full Deep Scan free on signup, so there is no separate purchase first. If you want the assessment without ongoing monitoring, the Deep Scan is available on its own at $499. Either way the scan comes first, because without a baseline of your actual setup, monitoring is just noise.

About 30 seconds. After checkout you enter your web address, we scan your site live, and your report appears on screen with a PDF download. A copy is also sent to your inbox.

Yes. You can upgrade at any time. Upgrades take effect immediately. Contact support@veracitygate.com to initiate an upgrade.

Yes. You may cancel at any time. Your access continues until the end of your current billing period. The one-time Deep Scan fee is non-refundable as the service will have been delivered in full.

All prices displayed on our site are in Australian Dollars (AUD) unless otherwise stated at checkout. International clients may see currency conversion applied by their payment provider.

Yes. All payments are processed via Stripe. VeracityGate never stores your card details. All transactions are encrypted end-to-end.

Access is strictly limited to VeracityGate team members working directly on your engagement. We do not share, sell, or disclose your data to third parties except as required by law.

Our standard service agreement includes confidentiality provisions. If your organisation requires a specific NDA format, contact us at support@veracitygate.com prior to commencing the engagement.