Privacy policy

1. Who we are

This policy applies to IDZY Pty Ltd (ABN 98 701 469 105, ACN 701 469 105), an Australian proprietary company based in Victoria (VIC) 3134 (“IDZY”, “we”, “us”). It explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

“Personal information” has the meaning given in the Privacy Act: information or an opinion about an identified individual, or an individual who is reasonably identifiable.

2. The personal information we collect

We collect only what we need to respond to an enquiry and to deliver the services we have been engaged to provide. Depending on your dealings with us, this may include:

• your name, business name and role;
• your email address and any other contact details you choose to give us;
• the content of your enquiry and of our correspondence with you;
• information about your business operations that you provide to us during an engagement, which may incidentally include the personal information of your staff, customers or suppliers;
• billing and payment records relating to services we have supplied.

We do not seek sensitive information as defined in the Privacy Act (such as health, biometric or membership information). Please do not send us sensitive information, bank credentials or identity documents by email.

3. How we collect it

We collect personal information directly from you wherever it is reasonable and practicable to do so — when you email us, complete the enquiry form on this website, speak with us on a scope call, or provide records during an engagement.

Where you give us information about another person (for example a staff member or a customer of your business), you should ensure that person is aware of this policy and of how their information will be handled.

4. How we use it

We use personal information to:

• respond to enquiries and prepare proposals;
• perform the services set out in an accepted proposal;
• issue invoices and maintain financial and tax records;
• communicate with you about work in progress; and
• meet our legal and record-keeping obligations.

We do not sell personal information, and we do not use it for automated decision-making or profiling. We do not send marketing emails unless you have asked to receive them, and any such message will include a way to opt out.

5. When we disclose information

We disclose personal information only where it is necessary for the purpose it was collected, or where the Privacy Act permits or requires it. That may include disclosure to:

• service providers who support our own operations, such as email hosting, file storage and accounting software providers, under confidentiality obligations;
• our professional advisers, where required;
• a third-party system provider you have asked us to configure on your behalf, using access you have authorised; and
• a court, regulator or law enforcement body where required or authorised by law.

6. Overseas disclosure

Some of the software we use to run our own business, including email and file storage, may store data on servers located outside Australia. Before disclosing personal information to an overseas recipient we take reasonable steps under APP 8 to ensure the recipient handles that information consistently with the Australian Privacy Principles.

7. This website and cookies

This website is a set of static pages. It does not set advertising or analytics cookies, does not embed third-party tracking scripts, and does not build a profile of visitors.

The enquiry form on our contact page does not transmit anything to a server. It opens a pre-filled message in your own email program, addressed to us, which you choose whether to send. Standard server logs kept by our hosting provider may record technical information such as IP address and request time for security and reliability purposes.

Our site links to our own pages only. If we ever link out, we are not responsible for the privacy practices of an external site.

8. Storage and security

We take reasonable steps under APP 11 to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Those steps include access controls on our devices and accounts, multi-factor authentication where available, and limiting access to the people who need it for the engagement.

No method of transmission or storage is completely secure. If we become aware of an eligible data breach we will respond in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

9. How long we keep it

We keep personal information only for as long as it is needed for the purpose it was collected, or for as long as we are required to keep it by law — for example, financial records that must be retained for taxation purposes. When information is no longer required and we are not obliged to retain it, we destroy it or de-identify it.

10. Access and correction

You may ask for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Write to [email protected] and we will respond within a reasonable period, normally within 30 days.

We do not charge for making a request. If we refuse access or a correction, we will tell you in writing why, and how you may complain about that decision.

11. Complaints

If you believe we have breached the Australian Privacy Principles, please raise it with us first at [email protected]. Set out what happened and how you would like it resolved. We will acknowledge your complaint and give you a written response.

12. Changes to this policy

We may update this policy as our practices or the law change. The current version is always the one published on this page, with the date shown at the top. Material changes affecting an active engagement will be notified to you by email.

13. Contact

Privacy enquiries and requests should be sent to [email protected], addressed to the Privacy Officer, IDZY Pty Ltd, Victoria (VIC) 3134, Australia.