Privacy Policy
Effective Date: 18 August 2025
Last Updated: 18 August 2025
1. Purpose and Scope
This Privacy Policy applies to website visitors, clients, employees, contractors, vendors, and third parties. It outlines what personal information we collect, how it is used, protected, disclosed, and the rights available.
2. Legal Framework
Yarra Tech complies with the Privacy Act 1988 (Cth) and APPs, aligns with ISO/IEC 27001 standards, and adheres to the Notifiable Data Breaches (NDB) Scheme.
3. Definitions
Personal Information: data that identifies an individual.
Sensitive Information:
financial or security-related data.
Processing: collection, use, storage,
disclosure, or deletion of personal data.
4. Information We Collect
Identity & Contact Data, Service Data, Website Data (forms, cookies, analytics), Financial Data, Employment & Contractor Data.
5. Methods of Collection
Direct collection from individuals, automated collection (cookies, monitoring), and from trusted third-party systems.
6. Purpose of Use
To deliver services, provide support, conduct security monitoring, improve website performance, send communications (with consent), and meet legal obligations.
7. Data Security
We implement encryption, MFA, least-privilege access, vulnerability scanning, patching, monitoring, and incident response aligned with ACSC and OVIC frameworks.
8. Disclosure of Information
We disclose data only to service partners, regulators, auditors, or law enforcement where necessary. We do not sell or rent personal information.
9. International Transfers
Where overseas processing is required, we ensure contractual safeguards and compliance with cross-border data protection requirements.
10. Data Retention
Data is retained only as long as necessary for services and compliance. Upon termination, client data is securely deleted or returned
11. Individual Rights
You may access, correct, or request deletion of your data, withdraw marketing consent, and lodge complaints with the OAIC.
12. Cookies & Website Analytics
Cookies are used to improve navigation, personalize content, and monitor performance. You can disable cookies in your browser settings.
13. Privacy by Design & Impact Assessments
All new or changed systems undergo Privacy Impact Assessments, applying privacy-by-design principles before deployment.
14. Breach Notification
In case of a breach, individuals and regulators will be notified within 72 hours under the NDB Scheme.
15. Accountability & Governance
All staff are trained in privacy, regular audits are conducted, and policies are reviewed annually under our ISMS.
16. Updates to this Policy
We may update this Privacy Policy. Updates will be posted with a revised “Last Updated” date.
17. Contact Us
Yarra Tech Group Pty Ltd
Melbourne, Victoria, Australia
Email:
info@yarratechgroup.com
Phone:
+61 434 111 414
