Slingsby Consulting Pty Ltd (ABN 80 065 196 652, ACN 065 196 652) (we, us, our) respects your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information, including through this website, and how you can access or correct your information or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs), to the extent they apply to us.
1. Information we collect
The kinds of personal information we collect and hold depend on how you deal with us, and may include:
Contact and enquiry information
- your name, email address and phone number;
- your company or organisation name;
- the service you are interested in and the content of your message; and
- any other information you choose to give us when you contact us or engage our services.
Payment information
- When you pay online, you enter your card details directly into secure payment fields hosted by PayPal. We never receive, see or store your full card number, expiry date or security code (CVV).
- We collect the payment amount, the invoice or reference number you enter, and your name and email address. These are passed to PayPal with your payment.
- From PayPal we receive and keep a record of each payment transaction, including the transaction and order identifiers, payment status, amount and currency, the card brand (for example, Visa), the card type and the last four digits of the card, the outcome of any card authentication (such as 3-D Secure) and fraud-check results (such as address and security-code match codes).
Technical information
- Your IP address, which we record with contact form submissions and payment transaction records to help detect fraud and misuse; and
- technical information our hosting provider records in standard server logs (such as IP address, browser type, pages requested and the date and time of the request).
We do not intend to collect sensitive information (as defined in the Privacy Act). Please do not include sensitive information, or card details, in contact form messages.
2. How we collect it
We collect personal information directly from you, for example when you complete our contact form, make a payment, email or call us, or engage our services. We also receive information about your payment from PayPal. If we receive personal information about you that we did not ask for, we will handle it in accordance with the APPs, including destroying or de-identifying it where required.
3. Why we collect and use it
We collect, hold and use personal information to:
- respond to your enquiries and communicate with you;
- provide our advisory services and manage our engagement with you;
- process payments, issue receipts, match payments to invoices and handle refunds;
- detect and prevent fraud, misuse and security incidents;
- maintain business, accounting and tax records and comply with our legal obligations; and
- administer and improve our website and services.
We will not use your personal information for direct marketing unless you have consented or it is otherwise permitted by law. You can opt out of any marketing communications at any time by contacting us.
If you do not provide the information we request, we may be unable to respond to your enquiry, provide our services or process your payment.
4. Cookies and third-party services
Our website does not use its own cookies for advertising or analytics. However, some third-party services used on our website may set cookies or collect information directly from your browser:
- PayPal: the payment page loads PayPal's software, which may use cookies and similar technologies, and collect device and browser information, for security, fraud prevention and payment processing. PayPal handles that information under its own privacy statement.
- Google Fonts: our pages load fonts from Google's servers, which means your IP address and browser information are sent to Google when you visit.
You can control or delete cookies through your browser settings. Blocking cookies used by PayPal may prevent online payments from working.
5. Disclosure
We may disclose personal information to:
- PayPal (PayPal Australia Pty Limited and its related companies), to process card payments, refunds and fraud checks;
- our website hosting and IT service providers (AWS (Amazon Web Services), who store our website, contact form submissions and transaction records on our behalf;
- our professional advisers, such as accountants, auditors and lawyers, where reasonably necessary;
- other third parties you ask us to deal with, or that are involved in delivering your engagement with your consent; and
- government authorities, regulators or others where we are required or authorised by law to do so.
We do not sell personal information.
6. Overseas disclosure
PayPal is part of a global group. Information about your payment may be transferred to, stored in or accessed from countries outside Australia by PayPal and its service providers, including the United States and other countries where PayPal operates. Google (Google Fonts) may also process technical information outside Australia.
Our hosting provider stores our website data in Sydney, Australia.
Where we disclose personal information overseas, we take reasonable steps in the circumstances to ensure the recipient handles it consistently with the APPs, for example by using reputable providers who are bound by privacy and security obligations.
7. Security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include:
- using PayPal's hosted payment fields so that card details never pass through or are stored on our systems;
- using encrypted (HTTPS) connections for our website;
- restricting access to contact submissions and transaction records to authorised people; and
- not storing payment credentials, passwords or security codes in our records.
No method of transmission over the internet or electronic storage is completely secure. If we become aware of a data breach likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act, where it applies to us.
8. Retention
We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law. In particular:
- payment and transaction records are kept for as long as required for tax, accounting and legal purposes (Australian tax law generally requires business records to be kept for five years);
- contact form submissions are kept for 2 years unless they become part of an engagement record.
When personal information is no longer needed, we take reasonable steps to destroy or de-identify it.
9. Access and correction
You can ask for access to the personal information we hold about you, or ask us to correct it if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact us using the details below. We will respond within a reasonable period (usually within 30 days). We may need to verify your identity first. If we refuse your request, we will tell you why in writing and how you can complain, unless it would be unreasonable to do so. We will not charge you for making a request, but we may charge a reasonable fee for giving you access where permitted.
10. Anonymity
You can browse our website without telling us who you are. Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym, but we will generally need your name and contact details to respond to an enquiry, provide services or process a payment.
11. Complaints
If you have a concern about how we have handled your personal information, please contact us in writing using the details below. We will acknowledge your complaint, investigate it and respond to you within a reasonable time (usually within 30 days).
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5288, Sydney NSW 2001
12. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available on this page, with the date it was last updated.
13. Contact us
For privacy questions, requests or complaints, please contact our Privacy Officer:
- Slingsby Consulting Pty Ltd, Attention: Privacy Officer
- Email: admin@slingsbyconsulting.com.au
- Phone: 0495 044 376
- Post: 152 Port Rd, Alberton SA 5014