Privacy Policy

1. About this policy

Inforge is a Brisbane-based technology services business. This policy explains, in plain language, what personal information we collect, why, how we look after it, and how you can access or correct it or make a complaint.

We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). We have chosen to do so even where the law might exempt a business of our size, because handling information properly is central to what we do.

2. The kinds of personal information we collect

• Customer and supplier contacts: names, job titles, work email addresses, phone numbers and business addresses.
• People who contact us or use our website: what you tell us in an enquiry form, email or call, and basic website usage information (see section 9).
• Job applicants and contractors: contact details, work history, qualifications, referee details and, where a role requires it, the results of police or security checks.
• Information inside our customers’ systems: when we support or build systems for a customer, we may be able to see personal information they hold, such as their staff and customer records. We access it only as needed to do the work the customer has asked for, and we handle it under our agreement with that customer and our Customer Data Ownership and Access Policy.

We do not knowingly collect sensitive information (such as health information) unless it is needed for a specific purpose, you consent, or the law requires or allows it.

3. How we collect it

We collect personal information directly from you where we can: when you contact us, sign an agreement, apply for a role or use our services. We may also collect it from your employer (our customer), from publicly available business sources, or from referees you nominate.

4. Why we collect and use it

• To provide, support and improve our services
• To respond to enquiries and prepare quotes
• To manage our relationship with customers and suppliers, including billing
• To recruit and engage staff and contractors
• To keep our systems and our customers’ systems secure
• To meet our legal and contractual obligations

We will only use your information for another purpose if you agree, or if the law requires or allows it.

5. Who we share it with

We share personal information only where needed:

• With service providers who help us run our business, such as cloud hosting, IT service management, accounting and email providers
• With subcontractors working on a customer engagement, who are bound by confidentiality and privacy obligations no weaker than ours
• With the vendor of a product we support (for example Microsoft), when we raise a support case on a customer’s behalf
• With government agencies or others where the law requires it

We do not sell personal information.

6. Overseas disclosure

We prefer providers that store data in Australia. Some of our service providers may store or access information outside Australia, for example in the United States, the European Union or New Zealand. Where this happens, we take reasonable steps to make sure the provider protects the information in a way consistent with the APPs.

7. Use of AI tools

We may use AI tools to help with our work, such as summarising support tickets or drafting documents. We only use business-grade tools that do not use our or our customers’ data to train their models, and we do not put a customer’s personal information into an AI tool unless that customer has agreed.

We do not make decisions about individuals using fully automated processes that could significantly affect their rights or interests. If that ever changes, we will update this policy to explain the kinds of personal information used and the kinds of decisions made.

8. How we keep it secure

We protect personal information with security measures appropriate to the information, including multi-factor authentication, encryption, least-privilege access, device management and staff training. Our Information Security Policy sets out the detail. We keep personal information only as long as we need it for the purposes above or as the law requires, and then securely delete or de-identify it.

9. Our website

Our website doesn’t use analytics, advertising trackers or cookies, and it has no forms. If you email us, we use your message only to reply and to provide what you ask for. If we add website analytics later, we will use a tool that doesn’t set cookies, and we will update this policy first.

10. Marketing

If we send you news or updates, you can unsubscribe at any time using the link in the email or by contacting us. We comply with the Spam Act 2003.

11. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it. Contact us using the details below. We will respond within 30 days. If we can’t give you access, we will explain why in writing.

12. Data breaches

If a data breach is likely to result in serious harm, we will notify the affected people and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme. If the breach involves information we hold for a customer, we will tell the customer straight away and work with them on notification.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the OAIC at www.oaic.gov.au or on 1300 363 992.

14. Contact us

• Privacy Officer, The Inforge Group Pty Ltd
• Email: privacy@inforge.com.au

15. Changes to this policy

We may update this policy from time to time. The current version will always be on our website, with the date it was last updated.