Privacy policy
How we collect, use, store and disclose personal information, aligned to the Australian Privacy Principles.
This policy is a draft prepared for review. It has not been checked by a solicitor and is not legal advice.
1. What this policy covers
This policy explains how Indexus collects, uses, stores and discloses personal information, and how you can access or correct it. It is written against the Australian Privacy Principles in the Privacy Act 1988 (Cth).
2. What we collect
When you contact us through this website we collect your name, company, email address, phone number if you give it, and whatever you write in the enquiry field. If you become a client we also hold the business information needed to deliver the engagement, which may include access to your systems and the data in them.
We do not collect sensitive information as defined in the Act unless it is genuinely necessary for an engagement and you have consented.
3. Why we collect it
To respond to your enquiry, to deliver services you have engaged us for, and to meet our legal and record-keeping obligations. We do not sell personal information and we do not use enquiry details for unrelated marketing.
4. How it is stored and for how long
Information is held in business systems protected by access controls and authentication. We keep enquiry records only as long as needed to deal with the enquiry and meet our obligations, and client records for the period our professional and legal obligations require. When information is no longer needed we destroy or de-identify it.
5. Third parties and overseas disclosure
Delivering our services involves third-party platforms. Depending on the engagement these may include AI model providers such as Anthropic, OpenAI, Microsoft and Google, business systems such as WorkflowMax and Xero, and standard cloud hosting and email providers.
Some of these providers process data outside Australia, including in the United States. Where an engagement involves personal information passing through an AI provider, we agree the specific arrangement with you in writing before it starts, including which provider, what data, and where it is processed.
6. Access and correction
You can ask what personal information we hold about you, and ask us to correct it, by emailing scott@indexus.com.au. We will respond within a reasonable period. If we refuse a request we will tell you why in writing.
7. Complaints
If you believe we have mishandled your personal information, contact us first at scott@indexus.com.au and we will investigate and respond in writing.
If you are not satisfied with our response you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.
8. Contact
Privacy enquiries: scott@indexus.com.au. Indexus, Sydney, Australia.