Privacy Policy — PML IT Consultancy

How we handle personal information

This Privacy Policy explains how PML IT Consultancy Pty Ltd collects, uses, stores and discloses personal information. It applies to information collected through this website, through direct engagement with us, and through the provision of our advisory services. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Who we are

PML IT Consultancy Pty Ltd (referred to in this policy as "PML IT Consultancy", "we", "us" and "our") is an Australian-incorporated company providing independent IT consulting services. Our registered office is at 41/401 Pacific Highway, Artarmon NSW 2064, Australia. We are the "APP entity" for the purposes of the Privacy Act and are responsible for the handling of personal information under this policy.

2. What personal information we collect

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. The kinds of personal information we collect depend on the nature of your interaction with us, and may include:

Identity and contact information — your name, role, organisation, business email, business phone number, postal address.
Engagement information — the content of enquiries, proposals, contracts, correspondence, and any information you share with us in the course of an engagement.
Website usage information — server logs, IP address, browser type, pages visited, referring URLs. See our Cookie Policy for details on cookies and similar technologies.
Professional background — where relevant to a service we are providing, your professional history, qualifications, or affiliations.

We do not collect sensitive information (as defined in the Privacy Act) unless you choose to provide it to us for a specific purpose, or we are required to do so by law.

3. How we collect personal information

We collect personal information directly from you wherever practicable. This includes when you submit an enquiry through our website, when you correspond with us by email or phone, when you engage us for services, and when you provide information in the course of an engagement. In some cases we may collect personal information from third parties — for example, from publicly available sources, from a referring party, or from a service provider assisting us with our own operations — but only where it is unreasonable or impracticable to collect it from you directly.

4. Collection, use and disclosure of personal information

We collect, hold, use and disclose personal information for the following purposes:

To respond to your enquiries and to communicate with you about our services.
To provide advisory services to you or your organisation, including preparation of proposals, delivery of engagements, and management of the client relationship.
To meet our legal and regulatory obligations, including record-keeping, tax, anti-money-laundering and other compliance requirements.
To operate and improve our website, our services and our internal business processes.
For any other purpose that was specifically notified to you at the time of collection, or that you have subsequently consented to.

We will not use or disclose your personal information for a purpose other than the primary purpose of collection (or a related secondary purpose that you would reasonably expect) unless you have consented, or we are required or authorised by law.

5. Disclosure to third parties

We may disclose personal information to third parties where necessary for the purposes described above. The kinds of third parties we may disclose to include:

Service providers that assist us with our operations (for example, IT service providers, professional advisers, insurers).
Government and regulatory bodies where we are required to do so by law.
Other parties where you have consented to the disclosure.

Where personal information is disclosed to overseas recipients (for example, an overseas-based cloud service provider), we take reasonable steps to ensure the recipient is bound by privacy obligations equivalent to the Australian Privacy Principles, or that the disclosure is otherwise permitted under the Privacy Act.

6. Data security and retention

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include access controls, encryption in transit and at rest where appropriate, secure backup arrangements, and staff training on privacy obligations. Personal information is retained only for as long as is necessary for the purposes for which it was collected (including for legal, accounting or reporting requirements), after which it is securely destroyed or de-identified.

7. Your rights and how to contact us

You have the right to request access to the personal information we hold about you, and to request correction of that information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading. To make a request, please contact us at contact@pmlitconsultancy.com.au or in writing at the address above. We will respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au).

8. Changes to this policy

This policy may be revised from time to time. The current version is the one dated below. Earlier versions are available on request.

Effective: November 2019. Last updated: September 2026.