
How Theory Y handles your website and enquiry data.
This notice explains what the website collects, how enquiry details are handled and stored, and the choices you have about your own information.
Last updated: 20 July 2026
Contact form
This website includes a contact form. When submitted, the following information is provided to Theory Y Technologies so we can assess and respond to the enquiry:
- Name
- Email address
- Company or organisation name
- Enquiry type and message
The form requires explicit consent before submission. A successful submission creates a restricted commercial enquiry record in Theory Y's Supabase-backed CRM before any email is attempted. The record includes the submitted details, the enquiry lifecycle stage, the active privacy-notice version, purpose-specific consent evidence and a privacy-safe notification status.
Theory Y uses Resend (Plus Five Five, Inc.) to notify the director and send the visitor a short acknowledgement. Form information is transmitted to Resend for delivery and may be processed by Resend and its authorised subprocessors. Delivery evidence stored in the CRM is limited to status, a provider message identifier or a controlled failure code, and attempt timing. Raw provider errors and email bodies are not copied into that evidence record.
The contact-form consent is limited to assessing and responding to the submitted enquiry. It is not marketing consent. Email correspondence after the acknowledgement remains in Theory Y's normal business mailbox; material follow-up can be recorded manually in the CRM by the authorised administrator.
Please do not include sensitive or confidential information in the form unless it is necessary for the enquiry and you are authorised to provide it.
Overseas processing
Resend states that its primary processing operations take place in the United States. Contact-form information may therefore be processed outside Australia. See Resend's Data Processing Addendum and Privacy Policy for information about its processing, subprocessors, safeguards and retention.
Cookie consent
This website displays a cookie consent banner. Your preference is stored in your browser's local storage. No cookies are set on the server, and no tracking or analytics cookies are used.
AI-assisted Decision Room
Theory Y has prepared an AI-assisted Decision Room for a separately approved public release. It is disabled by default. When enabled, it guides a visitor through a strategic AI decision and can produce an Executive AI Value Architecture Brief. The system identifies itself as AI-assisted and does not replace accountable human, legal, financial, medical or regulatory advice.
You do not need to provide personal details to use the working session or receive a brief. Please do not enter passwords, secrets, confidential records, sensitive personal information or information you are not authorised to share. Visible inputs, outputs, the Decision Canvas and approved source excerpts may be processed by the configured hosted model provider to generate the requested response. The provider and model can be changed or disabled by Theory Y.
Decision Room conversations are not stored by default. Conversation storage requires a separate enabled feature and your explicit optional consent. When consented storage is active, Theory Y stores only visible input and output, structured summaries and briefs, citations, consent evidence, and necessary provider/model metadata. Hidden chain-of-thought is not requested or stored.
Human review requests and commercial records
After receiving a brief, you may choose to request a human Executive AI Value Architecture Review. Only then does the form request your name, work email, role, organisation, optional phone number and engagement preference. It also records the privacy notice version, contact consent, the submitted brief and whether you separately consented to conversation retention.
A successful request creates a focused commercial record in Theory Y's Supabase-backed system. The record may include qualification dimensions, follow-up activity, an opportunity or proposal status, and an audit history. Deterministic scoring may assist prioritisation, but the Sponsor's human review and any recorded override remain authoritative.
Knowledge sources and model metadata
Public Decision Room responses may retrieve only Theory Y sources marked approved for public use, enabled and not superseded. Citations identify the approved source and version. Model execution traces retain only necessary metadata such as provider and model identifiers, latency, token usage, cost estimate, validation result and controlled error information. They do not contain prompts, responses, credentials or hidden reasoning.
What is not collected
This website does not use analytics scripts, tracking pixels, heatmaps, session recordings, advertising networks, or third-party embeds.
Data retention
Theory Y retains CRM enquiry records and related correspondence for as long as reasonably needed to assess and respond to the enquiry, maintain appropriate business records, and meet legal or regulatory obligations. Resend and the recipient email provider retain information according to their respective terms, policies and legal obligations.
The configured starting points for the commercial AI platform are: unqualified enquiries are reviewed or redacted 12 months after last contact; qualified CRM records are retained while commercially active and then reviewed; explicitly consented Decision Room conversations are retained for up to six months; feedback is retained for 12 months; model execution metadata is retained only as operationally necessary; and audit events are retained for at least three years. Legal holds and integrity obligations may require limited records to be retained or redacted rather than deleted.
You may ask Theory Y to access, correct or delete information associated with your enquiry. We will respond to reasonable requests, subject to any legal, security, backup, or service-provider limitations that require some information to be retained.
Export, correction and deletion requests
Theory Y provides an administrative workflow to verify and process access, export, correction and deletion requests. Deletion is applied across eligible contact, enquiry and consented conversation records. Where an audit, legal hold or security obligation prevents erasure, Theory Y limits or redacts the record and records the reason.
Submitting this form does not prove ownership of an email address and does not trigger automatic disclosure or deletion. A single authorised administrator verifies identity and scope before any action.
Contact
For privacy-related enquiries, contact info@theory-y.com.au.