KEEYAS INFOTEK PTY LTD ("KEEYAS", "we", "us") is committed to protecting the personal information of our clients, website visitors and prospects in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy explains what we collect, how we use it, and the rights you have.
1. Information We Collect
We collect personal information that you voluntarily provide to us when you enquire about our services, request a quote, or engage us for work, including:
- Your name, job title, company name, phone number and email address;
- Billing and payment details (processed securely by our payment provider, never stored on our servers);
- Project information and business requirements you share during scoping;
- Information you provide through forms on this website or by email or telephone;
- Website usage data collected via cookies (see our Cookie Policy).
Where it is reasonable and practicable to do so, we collect personal information directly from you. We may also collect information from public sources or third parties where you have authorised this.
2. Sensitive Information
We generally do not collect sensitive information (such as health information, racial or ethnic origin, or biometric data) unless it is necessary for a specific engagement — for example, where we build systems for health or medical clients. We will only collect sensitive information with your consent, or where permitted or required by law, and we will handle it with a higher standard of care.
3. How We Use Your Information
We use your personal information for the purposes for which it was provided, including:
- Responding to your enquiries and providing quotes;
- Delivering, supporting and invoicing the services you engage us for;
- Communicating project updates and operational notices;
- Managing our relationship with you and improving our services;
- Complying with our legal and taxation obligations as an Australian company.
We do not sell, rent or trade your personal information to third parties.
4. Direct Marketing
We do not send unsolicited marketing email. We may occasionally send information about services that are relevant to your business, but only where you have opted in, or where we are permitted to do so under the Spam Act 2003 (Cth). You can opt out of any such communications at any time using the unsubscribe link, or by contacting us.
5. Disclosure of Your Information
We may disclose personal information only to:
- Our subcontractors and cloud hosting providers (AWS / Azure) who assist in delivering our services, bound by confidentiality obligations;
- Professional advisers (accountants, lawyers, insurers) bound by professional secrecy;
- Regulators, courts or law enforcement where required by Australian law.
We do not disclose personal information to third parties for their own marketing purposes.
6. Overseas Disclosure
We store client data in Australia where possible. Some of our cloud infrastructure is provided by AWS and Azure, which may host data in overseas data centres; where this occurs, we take steps to ensure the data remains protected and that any overseas disclosure complies with the Australian Privacy Principles. We will not disclose personal information overseas unless we reasonably believe the recipient is subject to a law or binding scheme that protects the information in a way substantially similar to Australian law.
7. Data Security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps include:
- Encryption of data in transit (TLS) and at rest;
- Role-based access control and multi-factor authentication;
- Regular security reviews, patching and vulnerability management;
- Confidentiality obligations on all staff and contractors.
Where a notifiable data breach occurs, we will act in accordance with the Notifiable Data Breaches scheme under the Privacy Act.
8. Data Retention
We retain personal information only for as long as needed to provide our services and to satisfy legal, accounting or taxation requirements (generally seven years for business records), after which it is securely deleted or anonymised.
9. Access and Correction
Under the Australian Privacy Principles you may:
- Request access to the personal information we hold about you;
- Ask us to correct inaccurate, incomplete or out-of-date personal information;
- Make a complaint about how we have handled your information.
We will respond to a request for access or correction within 30 days. In limited circumstances we may refuse access where permitted by law, and we will give you written reasons if we do.
10. Website Analytics and Cookies
This website uses cookies and similar technologies as described in our Cookie Policy. Our website is a simple marketing site and does not currently use third-party analytics, advertising or cross-site tracking cookies.
11. Children's Privacy
Our services are directed at businesses and are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Complaints
If you believe we have breached your privacy, you may lodge a complaint with us first at services@keeyasinfotek.com. We will acknowledge your complaint and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at any time — visit oaic.gov.au or call 1300 363 992.
13. Contact Us
KEEYAS INFOTEK PTY LTD
Address: VIC 3030, Australia
Phone: 03 0000 0000
Email: services@keeyasinfotek.com
14. Changes to This Policy
We may update this policy from time to time to reflect changes in law, technology or our practices. The latest version will always be published on this page with an updated "last updated" date. Where changes are material, we will take reasonable steps to notify affected individuals.