Privacy policy

1. Who this policy applies to

This policy applies to Reyrd Pty Ltd (ABN 89 699 139 618, ACN 699 139 618), referred to below as we, us or Reyrd. It covers personal information handled through this website at reyrdtec.site and in the course of providing our services.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act. Where we handle personal information on behalf of a client, we do so under the terms of our engagement with that client, and the client remains responsible for its own privacy obligations.

2. The personal information we collect

We collect only the personal information reasonably necessary for our functions and activities. This ordinarily includes:

• Contact details — name, email address, organisation name and position, provided when you contact us or engage us.
• Engagement information — correspondence, instructions, scope documents, and the records we handle for you as part of an engagement.
• Supplier and third-party details — contact details of suppliers, subcontractors and other parties, where a client asks us to maintain those registers on their behalf.

We do not seek sensitive information as defined in the Privacy Act 1988 (Cth), and we ask that you do not send it to us unless we have specifically asked for it and explained why it is needed.

3. How we collect personal information

Wherever it is reasonable and practicable, we collect personal information directly from the individual it concerns. In practice we collect it when you:

• email us at [email protected], including through the contact form on this website;
• enter into or perform an engagement with us; or
• are named in records a client asks us to maintain, in which case we collect the information from that client.

The contact form on this website does not transmit anything to us by itself. It opens a message in your own email application, addressed to us, which you choose whether to send.

4. Why we collect, hold and use personal information

We collect, hold and use personal information to:

• respond to enquiries and prepare written scopes of work;
• deliver, administer and report on the services we have been engaged to provide;
• maintain registers, records and correspondence on behalf of clients;
• issue invoices and keep the financial and business records we are required to keep; and
• meet our legal and regulatory obligations.

We do not use personal information for direct marketing, and we do not sell, rent or trade personal information.

5. Disclosure of personal information

We disclose personal information only where it is necessary for a purpose set out above, and only to:

• the client on whose behalf we hold the information;
• suppliers, contractors or other parties where disclosure is part of the agreed scope of work;
• our professional advisers, where they are bound by confidentiality; and
• a court, regulator or other authority where we are required or authorised by law to do so.

Overseas recipients

This website is delivered through hosting and email infrastructure that may store or process data on servers located outside Australia. Before disclosing personal information to an overseas recipient we take steps that are reasonable in the circumstances to ensure the recipient handles it consistently with the Australian Privacy Principles, as required by APP 8.

6. Cookies and website analytics

This website is a set of static pages. It does not set cookies, does not run analytics or advertising scripts, and does not build a profile of visitors. Our hosting provider may keep standard server logs, which can include IP addresses, for security and operational purposes.

7. Security of personal information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Those steps include access controls on the accounts and storage we use, restricting access to those who need it for the engagement, and documented offboarding when access is no longer required.

No method of transmission or storage is completely secure. If we become aware of an eligible data breach, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

8. Data quality and retention

We take reasonable steps to ensure the personal information we hold is accurate, up to date, complete and relevant to the purpose for which it is held. Please tell us if your details change.

We retain personal information for as long as it is needed for the purpose it was collected, and for as long as we are required to keep it under Australian law. When it is no longer required and we are not required to retain it, we destroy it or de-identify it. Records held on behalf of a client are returned or dealt with as set out in the engagement.

9. Access and correction

Under APP 12 and APP 13, you may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Send your request to [email protected].

We will ask you to verify your identity, and we will respond within a reasonable period. Access is normally provided free of charge, though we may charge for the reasonable cost of supplying it in a particular form. If we refuse access or correction, we will tell you why in writing and explain how to complain.

Where we hold information on behalf of a client, we may need to refer your request to that client, and we will tell you if we do.

10. Anonymity and pseudonymity

Under APP 2 you may deal with us anonymously or using a pseudonym where it is lawful and practicable to do so. In most cases, however, we cannot prepare a scope of work or provide services without knowing who you are and how to reach you.

11. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please complain to us first in writing at [email protected]. Set out what happened and what you would like us to do. We will acknowledge your complaint, investigate it, and respond in writing within a reasonable period.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC), which can investigate privacy complaints about Australian entities under the Privacy Act 1988 (Cth).

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The current version is always published on this page, and the date at the top shows when it was last updated.

13. How to contact us

Privacy enquiries, access requests and complaints all go to the same address: [email protected]. Please write to us rather than telephoning, so that a record of your request exists from the outset.