Privacy Policy | Cloud Grand Pty Ltd

This Privacy Policy explains how Cloud Grand Pty Ltd ("we", "us", or "our") collects, uses, discloses, and protects personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We're committed to being transparent about our data handling practices and giving you clear understanding of your rights. If any part of this policy is unclear, please don't hesitate to contact us - we're happy to explain things in plain English.

1. Who We Are

Cloud Grand Pty Ltd
ABN: 84 615 520 379
Registered Address: 36/10 Benson Street, Toowong QLD 4066
Email: services@cloudgrand.com.au
Phone: 07 3059 4600
Privacy Officer: Available on request

As a small to medium enterprise operating in the IT services sector, we handle personal information primarily in the context of providing professional services to our clients. We're dedicated to protecting your privacy while delivering the high-quality technology solutions you need.

2. What Information We Collect

We collect personal information only when it's necessary to provide our services, respond to your enquiries, or comply with legal obligations. We may collect the following types of personal information:

Contact Details: Your name, email address, phone number, and postal address - collected so we can communicate with you about your enquiries, service requests, or ongoing projects
Business Information: Company name, ABN (Australian Business Number), business address, and industry details - collected to understand your business context and tailor our services appropriately
Service Requests: Details of IT services you've requested, project requirements, technical specifications, and timeline expectations - collected to understand what you need and deliver the right solution
Technical Data: Your IP address, device type, browser version, and operating system (when visiting our website) - collected for security purposes, to monitor site performance, and to improve user experience
Communication Records: Email correspondence, phone call records (where lawful), meeting notes, and project documentation - collected to maintain an accurate record of our interactions and work performed
Payment Information: Invoices, payment methods (we do NOT store full credit card details), and billing history - collected to process payments for our services

Important: We do not collect sensitive information such as health data, religious beliefs, political opinions, or criminal history unless specifically required for a particular service engagement and with your explicit consent.

3. How We Collect Your Information

We collect personal information directly from you through various channels:

When you submit our contact form on this website - you voluntarily provide your name, contact details, and enquiry information
When you call, email, or visit us in person - we record your contact details and the nature of your enquiry or service request
When you sign up for our newsletter or request information - we collect your email address and any other details you choose to provide
When you engage our services - we collect additional business information, technical details, and project-specific requirements necessary to deliver the contracted services
When you attend events or presentations hosted by us - we may collect your name, business card, or registration details for follow-up purposes
Through cookies and similar technologies - when you browse our website, we collect technical data about your device and browsing patterns (see our Cookie Policy for details)

We also collect information from third parties in limited circumstances, such as verifying business details through the Australian Business Register or obtaining professional references, but we always make an effort to verify this information with you directly where possible.

4. How We Use Your Information

We use your personal information only for the purposes for which we collected it, or for other purposes you would reasonably expect. Specifically, we use your information:

To respond to your enquiries and provide the information or services you've requested, including sending you quotations, proposals, or technical documentation
To deliver the IT services you have contracted - this includes configuring systems, providing support, managing your infrastructure, and performing maintenance tasks
To maintain and manage our relationship with you - including keeping records of your account, past interactions, service history, and any issues or requests
To send you relevant marketing communications about our services, events, or special offers - but only if you've given us permission (opt-in consent) or where legally permitted, and always with an easy unsubscribe option
To comply with legal and regulatory obligations - such as tax reporting requirements, anti-money laundering checks, and data retention obligations
To improve our products and services - by analysing aggregate trends, identifying common issues, and understanding how our services are used to make them better for all clients
To protect our business and other users - by monitoring for security threats, preventing fraud, and investigating any misuse of our services or website

We do not use your personal information to create detailed profiles for the purpose of selling to third parties or for any purpose that would be surprising to you.

5. Disclosure of Information

We do not sell, rent, or lease your personal information to third parties for their marketing purposes. This is a fundamental commitment we make to all our clients and website visitors.

We may disclose your personal information in the following limited circumstances:

To service providers who help us operate our business - such as cloud hosting providers, payment processors, or email marketing platforms - but only where necessary for them to perform their services on our behalf, and subject to strict confidentiality agreements that require them to handle your data securely and only for the purpose we specify
To regulatory authorities where required by law - such as the Australian Taxation Office, Australian Securities and Investments Commission (ASIC), or other government bodies when legally obligated to do so
To courts or tribunals in legal proceedings - where we're involved in legal disputes and disclosure is required by court order or legal process
To your existing IT provider - where you've engaged us to take over from another provider, we may receive information from them to facilitate a smooth transition (with your consent)
With your explicit consent - where you specifically authorise us to share your information with a named third party for a specific purpose
In connection with a business sale or acquisition - where personal information may be transferred as part of an asset sale, but we will notify you in advance where legally required

We take care to ensure that any recipient of your personal information is required to protect it appropriately and use it only for the purposes we've authorised.

6. Security of Your Information

Protecting your personal information is a priority for us. We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, disclosure, or modification. These measures include:

Physical security: Securing physical access to our offices and any paper records through locked storage, restricted access areas, and proper disposal of confidential documents when no longer needed
Technical safeguards: Implementing firewalls, encryption (both in transit and at rest), multi-factor authentication for sensitive systems, regular security patches, and intrusion detection systems to protect digital information
Access controls: Limiting access to personal information on a need-to-know basis, so that only staff who require access to perform their duties can view sensitive data
Regular reviews: Conducting periodic reviews of our security practices, risk assessments, and compliance with current best practices and legal requirements
Staff training: Ensuring all staff understand their privacy obligations and are trained on secure handling of personal information
Incident response: Maintaining a documented incident response plan in the event of a data breach, including procedures for containment, investigation, notification, and remediation

While we take all reasonable steps to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to continuously improving our security measures and responding promptly to any security incidents that may occur.

7. Retention and Disposal

We retain your personal information for as long as necessary to:

Provide the services you've contracted
Maintain records required by law (such as tax records for 7 years, or consumer law records for 3 years)
Resolve any disputes or complaints that may arise
Meet our legitimate business interests (such as improving services based on historical data)

When information is no longer needed for these purposes and is no longer legally required, we securely dispose of it in accordance with our document retention policies. Physical documents are shredded, digital files are permanently deleted, and backups are overwritten according to standard industry practices.

8. Your Rights

Under Australian privacy law, you have the right to:

Access: Request access to the personal information we hold about you. We will provide this information in a practical and timely manner, typically within 30 days
Correction: Request correction of any inaccurate, incomplete, or out-of-date information we hold about you. We will take reasonable steps to correct or update your information
Withdraw consent: Withdraw your consent for marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly
Complain: Complain about our handling of your personal information if you believe we've breached the Privacy Act or the Australian Privacy Principles. We take all complaints seriously and will investigate and respond to them promptly
Make a complaint to the OAIC: If you're not satisfied with our response to your complaint, you can make a complaint to the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, please contact us using the details provided in Section 11 below. We will process your request in accordance with the relevant legal timeframes.

9. Cookie Usage

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and understand how visitors interact with our site. We only use essential cookies for core functionality and may use analytics cookies (which collect anonymised, aggregate data) to improve our content and services. Please see our Cookie Policy for detailed information about what cookies we use, why we use them, and how you can manage your cookie preferences.

10. Cross-Border Data Transfers

Some of our service providers may store or process your personal information outside Australia (for example, cloud hosting providers located in other countries). Where this occurs, we take steps to ensure that the overseas recipient is required to protect your information in a manner substantially similar to the standards in the Privacy Act. We will inform you if any cross-border transfers are involved in your specific service engagement.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, services, or legal requirements. The current version will always be available on this page with the "Last updated" date clearly displayed at the top. We encourage you to review this policy periodically (perhaps every few months) to stay informed about how we handle your personal information.

If we make significant changes that materially affect your privacy, we will notify you prominently on our website or through other communication channels if you've provided contact details. Your continued use of our website or services after any policy changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, how we handle your personal information, or if you'd like to exercise your rights under Australian privacy law, please don't hesitate to contact us. We're committed to addressing your concerns promptly and providing clear, helpful responses.

Cloud Grand Pty Ltd
ABN: 84 615 520 379
36/10 Benson Street, Toowong QLD 4066
Email: services@cloudgrand.com.au
Phone: 07 3059 4600
Business hours: Monday to Friday, 9:00 AM - 5:00 PM (AEST)

We aim to respond to all privacy enquiries within 5 business days. If you're not satisfied with our response to a privacy complaint, you can also make a complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. Thank you for taking the time to understand our practices - your trust is something we value highly and work hard to maintain.