Privacy Policy

This Privacy Policy applies to personal information collected from clients, prospective clients, suppliers, and website visitors in connection with our business automation, IT support, and cybersecurity services.

We may collect personal information including, but not limited to: name, job title, employer, contact details (email, phone number), account/login/user information required to deliver services, billing and payment information, communications with us, and technical information related to systems we support where it identifies or could reasonably identify an individual.

We only collect personal information that is reasonably necessary for our business functions and activities.

Personal information may be collected directly from you, including through engagements, proposals, contracts, subscriptions, email/phone/online communications, access provided to systems and tools as part of service delivery, and our website or online forms (where applicable).

We may also collect information from third parties where authorised or required to deliver services.

We use personal information for delivering and managing services, communicating with clients and responding to enquiries, billing/invoicing/account administration, improving services and internal processes, and meeting legal, regulatory, and contractual obligations.

We do not use personal information for purposes unrelated to our services without consent, unless permitted or required by law.

We may disclose personal information to contractors or service providers who assist in delivering services, third-party software/platform providers used as part of agreed services, and regulatory authorities where required by law.

We take reasonable steps to ensure third parties handle personal information in a manner consistent with this Privacy Policy and our (or the industry) security best practices and standards.

Some third-party systems or service providers we use may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure overseas authorised recipients handle personal information in accordance with Australian privacy requirements and security best practices.

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Despite these measures, no system is completely secure, and we cannot guarantee absolute security of personal information.

You may request access to personal information we hold about you and request corrections if the information is inaccurate, out of date, incomplete, or misleading. Requests should be made in writing using the contact details below.

We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to provide our services, meet legal, regulatory, accounting, or reporting requirements, or as otherwise permitted by law. The retention period may vary depending on the nature and scope of the engagement. When personal information is no longer required, it is securely destroyed or de-identified in accordance with applicable laws and industry practices.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint by contacting us using the details below. We will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

We may update this Privacy Policy from time to time. Any changes will apply from the date the updated policy is published or otherwise made available.

For privacy-related enquiries, access requests, or complaints, contact:

Candi Cyber Solutions
Email: info@candisolutions.com.au