Privacy Policy
This policy explains how Kipanga collects, uses, and protects your personal information in accordance with the Australian Privacy Principles.
Introduction
Kipanga Pty Ltd (ABN to be confirmed) ('Kipanga', 'we', 'us', or 'our') is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, engage our services, or otherwise interact with us. By using our services, you consent to the practices described in this policy.
Information We Collect
We collect personal information that is reasonably necessary for our business functions and activities. The types of information we collect depend on your interactions with us.
Information You Provide
When you contact us, request a quote, or engage our services, we may collect: your name, email address, phone number, company name and position, project requirements and business needs, billing and payment information, and any other information you choose to provide.
We collect this information through our website contact forms, email correspondence, phone conversations, meetings, and project documentation.
Automatically Collected Information
When you visit our website, we automatically collect certain information including: IP address, browser type and version, operating system, referring URLs, pages viewed and time spent on our site, and device identifiers.
We use cookies and similar technologies to collect this information. You can manage cookie preferences through your browser settings, though some website features may not function properly without cookies.
Information from Third Parties
We may receive information about you from third parties, including: referrals from existing clients or partners, publicly available information from professional networks like LinkedIn, and information from analytics and marketing partners.
How We Use Your Information
We use your personal information for purposes directly related to our business activities and only in ways you would reasonably expect.
Primary Purposes
We use your information to: respond to enquiries and provide quotes, deliver consulting and development services, manage client relationships and projects, process payments and maintain financial records, provide technical support and maintenance services, and communicate about project updates and deliverables.
Secondary Purposes
With your consent or where permitted by law, we may also use your information to: send marketing communications about our services, improve our website and service offerings, conduct market research and analytics, comply with legal obligations, and protect our legitimate business interests.
You can opt out of marketing communications at any time by contacting us or using the unsubscribe link in our emails.
Disclosure of Information
We do not sell, rent, or trade your personal information to third parties. We may disclose your information in limited circumstances as described below.
Service Providers
We may share information with trusted service providers who assist in operating our business, including: cloud hosting providers (AWS), payment processors, email service providers, analytics platforms, and professional advisors (accountants, lawyers).
These providers are contractually bound to protect your information and may only use it to provide services to us.
Legal Requirements
We may disclose information if required by law, court order, or government regulation. We may also disclose information to protect our rights, safety, or property, or to investigate suspected fraud or violations of our terms of service.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your information.
Overseas Disclosure
Some of our service providers operate overseas. When we disclose personal information to overseas recipients, we take reasonable steps to ensure they comply with the APPs or equivalent privacy protections.
Countries where our service providers may be located include the United States (cloud services, analytics), Israel, India, and Vietnam (development teams). We ensure appropriate safeguards are in place for all international data transfers.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, modification, disclosure, or destruction.
Security Measures
Our security measures include: encryption of data in transit and at rest, secure access controls and authentication, regular security assessments and updates, employee training on data protection, and secure disposal of information no longer needed.
Limitations
While we take reasonable precautions, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.
In the event of a data breach that may result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods vary based on the type of information and our legal and business requirements.
Client project records are typically retained for seven years after project completion for legal and accounting purposes. Marketing contact information is retained until you opt out or request deletion. Website analytics data is retained in aggregated form.
When personal information is no longer needed, we securely destroy or de-identify it.
Your Rights
Under the Privacy Act, you have certain rights regarding your personal information. We are committed to honoring these rights.
Access
You have the right to request access to the personal information we hold about you. We will respond to access requests within a reasonable timeframe, usually within 30 days. In some circumstances, we may refuse access or provide access in a different form, as permitted by law.
Correction
If you believe the personal information we hold about you is inaccurate, incomplete, or out of date, you can request that we correct it. We will take reasonable steps to correct information that is found to be inaccurate.
Complaints
If you believe we have breached the APPs or handled your personal information inappropriately, you can lodge a complaint with us. We will investigate and respond within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Third-Party Links
Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Integration with third-party services (such as LinkedIn or GitHub) may involve sharing information with those platforms according to their privacy policies.
Children's Privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal information from children under 18 years of age. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The 'Last Updated' date at the top of this policy indicates when the latest changes were made.
We encourage you to review this policy periodically. For material changes, we may notify you by email or through a prominent notice on our website. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have a privacy-related complaint, please contact us:
Privacy Officer: Kipanga Pty Ltd
Email: hello@kipanga.com
Phone: 1300 867 036
Address: Level 35, 100 Barangaroo Avenue, Sydney NSW 2000
We take all privacy enquiries seriously and will respond within a reasonable timeframe.