Privacy Policy

DataVirtue Consulting (DataVirtue, we, us) is a specialist enterprise data, information management, analytics and AI consulting business based in Queensland, Australia. We are committed to handling personal information responsibly and, where applicable, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy covers personal information we handle through:

• this website, www.datavirtue.com.au;
• enquiries submitted through the website or sent to us by email;
• business development, proposals and client relationship activities;
• events, briefings and other professional interactions; and
• other direct communications with our team.

Information we handle while delivering a consulting engagement is generally governed by the agreement we have with that client, which commonly includes its own confidentiality, privacy, data-handling and security obligations. Those obligations apply in addition to this policy, and where there is any inconsistency the engagement agreement governs the engagement.

This is a business-to-business informational website. There are no accounts, logins, payments or customer portals, so the personal information we collect through it is limited. It may include:

• your name;
• your business email address;
• the organisation you represent;
• your role or other professional contact details, where you choose to supply them;
• the content of the enquiry or message you send us; and
• records of correspondence and communications with us.

When you visit the website, the hosting and network security infrastructure that delivers and protects the site may also process technical information such as your IP address, browser and device information, the pages requested, timestamps and the referring page. This is generated as a normal part of serving and securing a website.

Please do not submit sensitive, confidential, security-classified, commercially restricted or regulated client information through the public enquiry form. A short description of your objective or challenge is enough to start a conversation. If information of that kind needs to be shared, we will arrange an appropriate secure channel first.

We do not seek to collect sensitive information (as that term is used in the Privacy Act) through this website.

We collect personal information:

• directly from you when you complete the enquiry form on the Contact page;
• directly from you when you email, call or otherwise communicate with us;
• through professional and business interactions, such as meetings, briefings, industry events and professional networks; and
• automatically, through the website hosting and security infrastructure described in section 2.

We do not purchase personal information, and we do not run third-party analytics, advertising or tracking scripts on this website. See section 10.

We use personal information to:

• respond to your enquiry;
• discuss potential consulting engagements and prepare proposals;
• communicate with existing and prospective clients;
• operate, secure, maintain and improve the website;
• carry out general administration and legitimate business operations, including record keeping;
• comply with our legal, regulatory and professional obligations; and
• where relevant, invite you to professional events or send you professional communications you would reasonably expect to receive from us.

Submitting an enquiry does not add you to a marketing list. See section 11 for how we handle marketing communications.

The enquiry form on the Contact page collects your name, organisation, work email address and the message you write. All four are required in order to respond to you properly.

This website is a static site with no application database, and enquiries submitted through the form are not stored in a database by the website. The submission is validated by a small server-side function at our hosting provider and passed to our email delivery provider, which delivers it to a DataVirtue mailbox. Both providers process the information for the purpose of delivering your enquiry to us.

Once it reaches us, your enquiry exists as an email in our business email systems and is retained as described in section 9. We use the details to respond to you and to discuss the matter you have raised.

The form includes a hidden anti-spam field that is not visible to visitors and should never be completed by a person. Submissions that complete it are treated as automated and discarded without an email being sent.

We do not sell personal information, and we do not disclose it to third parties for their own advertising or marketing purposes.

Like most professional services firms, we rely on trusted service providers to operate. In connection with this website and our enquiry handling, these cover functions such as:

• website hosting, content delivery and network security (currently Cloudflare);
• delivery of website enquiry emails (currently Resend);
• our business email, communications and productivity systems;
• website analytics, if we enable it in future — none is in use at the date of this policy; and
• professional advisers, such as legal, accounting and insurance advisers, where reasonably necessary.

These providers process information for the purpose of supplying their service to us, and we take reasonable steps to use providers that maintain appropriate security and confidentiality practices.

We may also disclose personal information where required or authorised by law, where necessary to establish or defend a legal claim or to protect the rights or safety of any person, or where you have consented to the disclosure.

Some of the service providers described above operate global infrastructure. As a result, personal information handled through this website — including enquiry content and technical request information — may be stored or processed outside Australia.

Where we disclose personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure it is handled in a manner consistent with this policy and applicable Australian privacy requirements. We do not maintain a public list of every location in which a provider may process information, as this can change as providers operate their networks. If you would like more detail in relation to a specific matter, please contact us using the details in section 16.

We use administrative, organisational and technical measures that are reasonable and appropriate to the information we handle, and to the fact that this is an informational website rather than a system holding client data. These include serving the website over an encrypted connection, keeping credentials for our enquiry handling in provider-managed encrypted configuration rather than in the code delivered to your browser, not storing enquiries in a public-facing database, and limiting access to enquiries to the people who need it to respond.

No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for related business and legal requirements — including responding to and following up enquiries, managing client relationships, handling disputes, and meeting recordkeeping, insurance, tax and other legal obligations.

When personal information is no longer reasonably required for any of those purposes, we take reasonable steps to delete or de-identify it where appropriate. We do not apply a single fixed retention period to every record, because the appropriate period depends on the nature of the information and any legal or contractual requirement that applies to it.

This website does not use advertising, behavioural-tracking, profiling or cross-site-tracking cookies, and it does not run third-party analytics, advertising or social media tracking scripts. We do not build visitor profiles and we do not use the site to target advertising.

The website itself does not set cookies to identify or track you. Our hosting and network security provider may use strictly necessary cookies or similar technical identifiers to deliver content reliably and to protect the site against automated abuse, and its infrastructure generates the technical request logs described in section 2.

If we introduce website analytics or any other tracking technology in future, we will update this policy to describe it.

Completing the enquiry form does not give consent to receive marketing, and we do not add enquiry details to a marketing list automatically.

Where we do send commercial electronic messages — for example an occasional professional update, publication or event invitation — we will do so consistently with applicable Australian requirements, including the Spam Act 2003 (Cth). That means identifying ourselves clearly and including a functional way to unsubscribe.

You can opt out at any time by using the unsubscribe facility in the message or by contacting us using the details in section 16. We will action opt-out requests promptly.

Subject to applicable law, you may request access to the personal information we hold about you, and ask us to correct it if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

Please make requests using the details in section 13. We may need to verify your identity before acting on a request, and we will respond within a reasonable period. In limited circumstances we may be unable to provide access or make a correction — for example where doing so would unreasonably affect another person’s privacy or breach a confidentiality obligation we owe to a client. If that happens, we will explain why.

If you have a question about this policy, or a concern about how we have handled your personal information, please contact us through our Contact page or by email at contact@datavirtueconsulting.com.au.

We will acknowledge your enquiry or complaint, consider it properly, and respond within a reasonable period.

If you are not satisfied with our response, you may be able to raise the matter with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

This website may link to third-party websites, publications or resources for reference. Those sites are operated by others and are governed by their own privacy practices and terms. We are not responsible for the content of third-party websites or for how they handle personal information, and we encourage you to review their privacy policies before providing information to them.

We may update this Privacy Policy from time to time to reflect changes to our practices, the website, or legal and regulatory requirements. The current version is always published on this page, with the last updated date shown at the top.

We encourage you to review this page periodically.

DataVirtue Consulting
Queensland, Australia

Privacy enquiries can be sent through our Contact page or by email to contact@datavirtueconsulting.com.au.