Purpose
OPC IT Pty Ltd (OPC, we, our or us) is committed to protecting the privacy and security of personal information. This Policy explains how we collect, use, store, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This Policy applies when you engage with our services, visit our website, communicate with us, apply for work, work with us, or otherwise provide personal information to OPC.
Scope
This Policy applies to personal information OPC holds about:
- Customers and prospective customers.
- Suppliers, business partners and professional advisers.
- Website visitors and people who make online enquiries.
- Contractors and consultants.
- Job applicants.
- Employees and former employees, where applicable.
- Other individuals whose personal information is collected by OPC
Personal information we collect
The information we collect depends on our relationship with you and may include:
- Personal and contact information
- Name, address, email address and telephone number.
- Organisation, job title and country of residence.
- Payment, billing and transaction information.
- Service and technical information
- IP address, device and browser information, operating system and unique device identifiers.
- System and application logs, diagnostic data and website usage information.
- Support tickets, service records and communications.
- Location information where enabled or required for a location-based service.
- Employment and recruitment information
- Resume, employment history, qualifications and certifications.
- Reference checks, identification and right-to-work documents.
- Sensitive information
Where reasonably necessary and lawful, OPC may collect sensitive information, including health information, criminal history checks and identity verification documents. We only collect sensitive information with consent or where otherwise permitted by law, and apply additional safeguards appropriate to its sensitivity.
How we collect personal information
OPC may collect personal information:
- Directly from you when you contact us, make an enquiry, complete a form or enter into an agreement.
- Through our website, cookies, analytics tools and online forms.
- During service delivery, support and security activities.
- During recruitment and employment processes.
- From publicly available sources.
- From third parties authorised to provide information on your behalf.
Where practical, we collect personal information directly from the individual concerned. Consent may be express, such as selecting an online consent option, or implied from the circumstances and your actions, where permitted by law.
Why we collect personal information
OPC collects, uses and holds personal information where reasonably necessary for our business functions and activities, including to:
- Deliver managed it, professional and other services.
- Respond to enquiries and provide customer support.
- Manage customer, supplier and business relationships.
- Process payments, invoices and other transactions.
- Administer recruitment and employment.
- Provide service, product, event and promotional information, subject to your communication preferences.
- Monitor security, prevent fraud and manage operational risk.
- Comply with legal, regulatory, contractual, audit and record-keeping obligations.
- Improve our website, services and customer experience.
We use personal information for the purpose for which it was collected, a related purpose you would reasonably expect, or another purpose permitted by law or with your consent.
Disclosure of personal information
OPC may disclose personal information where necessary to:
- Employees and authorised contractors who require it to perform their duties.
- Cloud, technology, payment and other service providers.
- Professional advisers, including accountants, auditors and legal advisers.
- Government agencies, regulators and law enforcement authorities.
- Third-party suppliers engaged to support service delivery.
- A purchaser or successor in connection with a sale, restructure or transfer of all or part of our business.
- Protect or enforce legal rights, prevent fraud or illegal activity, or comply with law.
OPC does not sell personal information. We take reasonable steps to ensure third parties handle personal information consistently with applicable privacy requirements.
Overseas disclosure
OPC may use cloud-based platforms and service providers that store or process information outside Australia. Where personal information is disclosed overseas, OPC takes reasonable steps to ensure the recipient maintains privacy and security standards consistent with applicable Australian privacy requirements.
Data security and data breaches
OPC takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include:
- Multifactor authentication and role-based access controls.
- Encryption and secure cloud platforms.
- Security monitoring, logging and cybersecurity controls.
- Staff confidentiality obligations and awareness training.
- Regular review of security controls.
No internet transmission or storage system can be guaranteed to be completely secure. If an eligible data breach occurs, OPC will take appropriate remedial action and provide notifications as required by law, including information about steps affected individuals can take to reduce potential harm.
Retention and disposal
OPC retains personal information only for as long as reasonably required to deliver services, meet contractual and legal obligations, maintain business records and protect legitimate business interests. When information is no longer required, we take reasonable steps to securely destroy or de-identify it, subject to legal requirements.
Website, cookies and third-party sites
- Website information and cookies
When you use our website, OPC may automatically collect technical and usage information, including browser, device, operating system, IP address and diagnostic information. We may use cookies and similar technologies to improve website functionality, monitor performance, remember preferences, understand visitor behaviour and support advertising activities.
Where required, we will seek consent before using cookies that are not strictly necessary. Cookies may include:- Functionality cookies that remember selected preferences, such as language or location.
- Analytics cookies that help us understand use and performance.
- Advertising cookies that record browsing activity and may support relevant advertising through third-party partners.
- You can manage or disable cookies through your browser settings. Some website features may not function correctly if cookies are disabled.
- Third-party sites
Our website may contain links to websites and services not owned or controlled by OPC. These links are provided for convenience and do not imply sponsorship, endorsement or approval. OPC is not responsible for the privacy practices of third-party sites. You should review the privacy notice of each site you visit.
Choices and marketing communications
You are not required to provide personal information, but if you choose not to do so, OPC may be unable to respond to an enquiry, provide information or deliver some services.
You may opt out of marketing or promotional communications at any time by using an unsubscribe option provided in the communication or by contacting OPC through our website or the Privacy Officer. Service and administrative communications may still be sent where necessary.
Access and correction
You may request access to personal information OPC holds about you or ask us to correct information that is inaccurate, incomplete or out of date. Requests should be made in writing to the Privacy Officer. OPC may verify your identity before processing a request.
We will respond within a reasonable timeframe and, where practicable, within 30 calendar days. Access may be refused or limited where permitted by law. If we refuse a request, we will generally provide written reasons and information about how to complain, unless it would be unreasonable or unlawful to do so.
Privacy complaints
If you believe OPC has breached your privacy or mishandled your personal information, contact the Privacy Officer using the details below. We will investigate the complaint and respond within a reasonable timeframe. If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner.
Changes to this Policy
OPC may update this Policy to reflect changes in legislation, technology, operations or privacy practices. The current version and its effective date will be available on our website. We encourage you to review the Policy periodically.
