Privacy Policy

1. The Kinds of Personal Information We Collect

In the course of providing commercial technology advisory, digital transformation, IT programme management, and strategic outsourcing services, we may collect personal information about individuals, including client representatives, contractors, suppliers, and website visitors. This information may include:

• Contact and Identity Information: Name, professional title, corporate employer, work email address, work telephone number, and business mailing address.
• Commercial & Project Details: Information submitted via consultation forms, RFPs, statement of work enquiries, or project governance communications.
• Technical & Telemetry Data: IP addresses, browser types, operating systems, referring website URLs, device identifiers, and aggregated interaction telemetry collected via server logs and privacy-preserving cookies.

We do not seek to collect sensitive information (such as health records, political opinions, or racial/ethnic origin) via our website unless strictly required for a specialized regulatory engagement and provided with explicit consent.

2. How We Collect Personal Information

We collect personal information through lawful and fair means, primarily:

• Direct Interactions: When you complete the enquiry form on our website, email our partners, phone our governance offices, or engage us during commercial discussions.
• Contractual Engagements: In the course of negotiating and delivering client Master Services Agreements (MSAs) or Statements of Work (SOWs).
• Automated Technologies: As you navigate our website, basic connection and telemetry data are recorded by our secure server infrastructure to ensure uptime, security, and performance.

3. Purposes for Which We Collect, Hold, and Use Information

We collect, hold, and use personal information only for purposes reasonably necessary for our business functions and commercial services, including:

• Providing, scoping, and executing digital transformation, IT programme management, and strategic outsourcing engagements.
• Responding to executive consultations, questions, and commercial proposals.
• Managing client relationships, billing, contract administration, and project reporting.
• Ensuring the operational security, integrity, and compliance of our digital platforms.
• Complying with our legal and regulatory obligations under Australian law.

4. Cross-Border Disclosure of Information (APP 8)

Tec4 Partners operates an integrated delivery model combining local client governance in Australia with high-capability delivery centres in India (including corporate offices in Mumbai, Navi Mumbai, New Delhi, and Bengaluru). In providing our services:

• Sovereign Data Storage: Production data, client database repositories, and regulated Australian workloads remain hosted within Australian sovereign cloud perimeters (e.g., AWS Sydney, Azure Australia East) unless a client explicitly contracts otherwise.
• Cross-Border Technical Squads: Dedicated technical squads operating in our India delivery hubs may access administrative or project management details strictly for delivery, testing, and operational support.
• Enforceable Safeguards: Prior to disclosing any personal information overseas, we take reasonable steps under APP 8 to ensure the overseas recipient complies with the APPs, backed by strict contractual data protection agreements, encryption protocols, and confidentiality obligations.

5. Data Security and Storage (APP 11)

We take all reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorized access, modification, or disclosure. Our security controls align with Australian standards, including the ACSC Essential Eight and APRA CPS 234 frameworks:

• Encryption: Mandatory HTTPS / TLS 1.3 encryption for all data in transit across our public and internal digital channels.
• Access Controls: Role-based access controls (RBAC), multi-factor authentication (MFA), and audit logging.
• Secure Infrastructure: Firewalled cloud perimeters, regular vulnerability scanning, and routine security audits.
• Data Retention & Destruction: Personal information is retained only for as long as necessary to fulfill the purpose for which it was collected or to comply with statutory retention requirements, after which it is securely de-identified or destroyed.

6. Access to and Correction of Your Information (APPs 12 & 13)

Under the Australian Privacy Principles, you have the right to request access to the personal information we hold about you and to request that we correct any inaccurate, outdated, incomplete, irrelevant, or misleading information.

To submit an access or correction request, please contact our Privacy Officer using the details below. We will respond within a reasonable timeframe (typically within 30 days) and will not charge a fee for lodging a request.

7. Privacy Complaints and Escalation

If you have a concern or complaint regarding how Tec4 Partners Australia has handled your personal information, please submit your complaint in writing to our Privacy Officer. We take all complaints seriously and will investigate and respond promptly.

If you are not satisfied with our response, you have the right to escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Telephone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

8. Contact Our Privacy Officer

If you have any questions regarding this Privacy Policy or our personal information management practices, please contact: