Privacy Policy
How Infin IT collects, uses, stores and discloses personal information, and how you can access or correct it.
Who this applies to
This policy applies to Infin IT Pty Ltd ("Infin IT", "we", "us") and covers personal information we handle through this website, our client engagements and our business operations.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
What we collect
We collect only what we need to respond to you and to run our business:
- Enquiry details — your name, work email, organisation and the message you send through our contact form or by email.
- Engagement information — contact details of client personnel, and information necessary to deliver the services agreed with your organisation.
- Technical information — basic server and security logs, including IP address and browser type, retained for security and reliability purposes, and website analytics as described under Cookies and analytics below.
We do not require you to create an account to use this website, and we do not knowingly collect information from children.
How we use it
We use personal information to reply to enquiries, to deliver and administer our services, to meet our legal and contractual obligations, and to protect our systems.
We do not sell personal information. We do not add enquirers to marketing lists without consent, and any marketing communication we do send includes an unsubscribe option.
Who we share it with
We may disclose personal information to service providers who support our operations — for example cloud hosting, email and form-handling providers — under contracts that require them to protect it and use it only for the purposes we specify.
Some of these providers may store data outside Australia. Where that occurs, we take reasonable steps to ensure the overseas recipient handles the information consistently with the APPs.
We may also disclose information where required or authorised by law.
Client data in our engagements
When we work on client systems, the client is generally the entity responsible for the personal information involved, and we act on their instructions under the terms of our engagement.
We apply least-privilege access, use client-controlled environments where possible, and do not use client data to train models or for any purpose outside the engagement without written authorisation.
How we protect it
We apply access controls, encryption in transit and at rest, logging and regular review to the systems we operate. Our approach is described in more detail on our Security page.
We retain personal information only as long as needed for the purpose it was collected or as required by law, and then destroy or de-identify it.
Accessing and correcting your information
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email hello@infinit.com.au and we will respond within a reasonable period, normally within 30 days.
If you are not satisfied with how we have handled your information or a privacy complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy from time to time. The current version and its effective date are always published on this page.