1. The kinds of information we collect
We may collect personal information such as your name, contact details, company, role, payment details, project information, support requests, usage data (IP address, browser, device), and communications with us. If you engage us as a supplier or contractor we may also collect business and KYC details required for invoicing and compliance. We do not intentionally collect sensitive information unless you choose to provide it and it is reasonably necessary for our activities.
2. How we collect information
We collect personal information directly from you (for example via our website forms, emails, meetings, or calls), from your authorised representatives, from systems we operate for you, and from third-party services you connect (e.g. Stripe, Microsoft, Google). We may also collect limited information automatically via cookies and similar technologies when you use our websites or services. You can control cookies via your browser; disabling cookies may affect site functionality.
3. Purposes for which we collect, use and disclose information
We use personal information to: provide and improve our services; respond to enquiries; carry out projects under Statements of Work; operate our websites; process payments and billing; perform security, auditing and troubleshooting; send service-related communications; and where you have consented or it is otherwise permitted, send marketing about our services (you may opt out at any time).
4. Lawful basis
We process personal information where it is necessary for our functions and activities, with your consent, to perform a contract with you, to comply with law, or where we have a legitimate interest that is not overridden by your privacy rights.
5. Disclosure to third parties and overseas recipients
We may disclose personal information to: our personnel and contractors; payment processors (e.g. Stripe); cloud/providers (e.g. Microsoft Azure, reputable hosting providers); professional advisers; and service partners needed to deliver our work. Some recipients may be located outside Australia (for example in the United States, EU, or Asia-Pacific regions) where their privacy laws may differ. Where appropriate we use contractual and technical measures to protect information disclosed overseas.
6. Security
We use administrative, technical and physical safeguards aligned to secure software development practices (e.g. least privilege access, encryption in transit where supported, code review, logging and monitoring). No method of transmission or storage is guaranteed secure; we cannot promise absolute security.
7. Access, correction and retention
You may request access to the personal information we hold about you and to request corrections if it is inaccurate, out of date, incomplete, irrelevant or misleading. We retain personal information for as long as needed for the purposes described above or as required by law, after which we take reasonable steps to de-identify or delete it.
8. Marketing communications
You can opt out of marketing emails by using the unsubscribe link included in the message or by contacting us. Service and transactional communications may still be sent.
9. Your choices
If you choose not to provide certain personal information, we may not be able to respond to your enquiry or deliver some services. If you provide us with someone else's personal information, you must ensure you have their permission to do so.
10. Complaints
If you believe we have breached the APPs, please contact us using the details below. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
11. Contact us
TIWALA CO — Sydney, NSW, Australia
Phone: +61 476 531 846 · Email: hello@tiwalaco.com.au
12. Changes to this policy
We may update this Privacy Policy to reflect changes to our practices or for legal, regulatory or operational reasons. We will post the updated version on this page with a new “Last updated” date.