Privacy Policy

1. Introduction

The Technical Touch ("we", "us", or "our") is a regional technology firm headquartered in Gippsland, Victoria, Australia. We are committed to protecting the privacy and personal information of our clients, website visitors, and business partners.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information when you interact with us, including but not limited to:

• Identity Information: Full name, date of birth, and job title
• Contact Details: Email address, phone number, and postal/residential address
• Business Information: Company name, ABN/ACN, and business type
• Technical Information: Device details, network configurations, system specifications, and credentials shared for service delivery purposes
• Billing Information: Bank account or payment card details (processed securely through our payment provider)
• Communication Records: Records of correspondence including emails, phone calls, and support tickets

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical Data: IP address, browser type and version, device type, operating system, and screen resolution
• Usage Data: Pages visited, time spent on pages, referring URLs, and click patterns
• Location Data: General geographic location derived from your IP address (not precise GPS data)

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide IT support, cybersecurity services, networking solutions, and mobile phone configuration as requested
• Communication: To respond to enquiries, send service-related notifications, and provide customer support
• Billing & Payments: To process payments, issue invoices, and manage accounts
• Scheduling: To arrange appointments, site visits, and follow-up consultations
• Security: To protect against fraud, unauthorized access, and malicious activity
• Improvement: To analyse website usage and improve our services, content, and user experience
• Legal Compliance: To meet our obligations under Australian law, including record-keeping and reporting requirements
• Marketing: To inform you about relevant services or promotions, only if you have opted in — you can unsubscribe at any time

4. Legal Basis for Processing

In accordance with the Australian Privacy Principles, we process your personal information based on the following grounds:

• Consent: You have provided explicit or implied consent for us to collect and use your information
• Contract Performance: The information is necessary to fulfil a contract or service agreement with you
• Legal Obligation: We are required by law to collect, retain, or disclose certain information
• Legitimate Interest: We have a legitimate business interest in using your information (e.g., improving service quality) that does not override your privacy rights

5. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to support our operations (e.g., payment processing, email delivery, cloud hosting). These providers are bound by confidentiality obligations and are only given access to the information necessary to perform their functions.

5.2 Legal Requirements

We may disclose personal information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to:

• Protect the rights, property, or safety of any person
• Prevent or investigate fraud or unlawful activity
• Comply with lawful requests from Australian or international authorities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred. We will notify you of any such change and ensure your privacy is maintained.

6. Data Security

As a cybersecurity-focused firm, we implement industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption: Sensitive data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication (MFA) enforced for all staff
• Network Security: Firewalls, intrusion detection/prevention systems, and regular vulnerability assessments
• Staff Training: All personnel undergo regular privacy and security awareness training
• Auditing: Periodic security audits and penetration testing

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Client Records: Retained for a minimum of 7 years in accordance with Australian tax and business record-keeping requirements
• Support Tickets & Communications: Retained for the duration of the client relationship plus 2 years
• Website Analytics: Aggregated and anonymised data retained indefinitely; identifiable data purged after 24 months
• Marketing Consent Data: Retained until you withdraw consent

Once retention periods expire, information is securely deleted or permanently anonymised.

8. Your Rights

Under the Australian Privacy Principles, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Opt-Out: Withdraw consent for marketing communications at any time
• Data Portability: Request your data in a structured, machine-readable format where applicable
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy

To exercise any of these rights, please contact us using the details provided in Section 13 below.

9. Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required for the website to function correctly (e.g., navigation, security)
• Analytics Cookies: Help us understand how visitors interact with our website so we can improve it
• Preference Cookies: Remember your settings and choices (e.g., language, accessibility options)

You can control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not use cookies for targeted advertising.

10. Third-Party Links

Our website may contain links to external websites that are not operated by us. We are not responsible for the content, privacy practices, or policies of those websites. We recommend reviewing the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are primarily directed toward businesses, schools, and adults in the Gippsland region. We do not knowingly collect personal information from children under 16 without parental or guardian consent. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated by posting an updated version on this page with a revised "Last Updated" date.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: