Privacy Policy

This policy explains how Varma Advisory collects, uses, stores and discloses personal information. We are committed to handling personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who we are

Varma Advisory (ABN 64 323 842 670) is a business and technology consulting practice based in Canberra, ACT. In this policy, “we”, “us” and “our” refer to Varma Advisory.

Information we collect

When you contact us through our website, we may collect:

• your name and business or organisation name
• your email address and phone number
• your industry and organisation size
• details of your enquiry
• an indicative budget, if you choose to provide one

We only collect information that is reasonably necessary to respond to you and provide our services. You may contact us without identifying yourself, although we may then be unable to respond fully to your enquiry.

How we collect information

We collect personal information directly from you when you complete our contact form, email or call us, or communicate with us during an engagement. We may also collect limited technical information automatically when you visit our website, as described below.

Why we use your information

We use your personal information to:

• respond to your enquiry
• prepare proposals and quotes
• deliver, manage and invoice our services
• meet our legal and regulatory obligations

Information we never request through the website

We will never ask you to provide passwords, access credentials or confidential production data through our website or contact form. Please do not include this kind of information in an enquiry. Where an engagement requires access to your systems or data, this is agreed formally and handled through appropriate, secure arrangements.

Disclosure of information

We do not sell, rent or trade your personal information. We may disclose it to trusted service providers who help us operate our business, such as our website hosting provider, WordPress.com (operated by Automattic), and email and productivity services. These providers may store data outside Australia, including in the United States. Where information is disclosed overseas, we take reasonable steps to ensure it is handled in a way that is consistent with the Australian Privacy Principles.

We may also disclose personal information where required or authorised by law.

Website analytics and cookies

Our website may use cookies and similar technologies, including analytics provided by our hosting platform, to understand how visitors use the site and to improve it. This information is generally aggregated and does not identify you personally. You can set your browser to refuse or delete cookies, although some parts of the website may not work as intended.

Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. This includes using reputable service providers, access controls and secure passwords. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Retention

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law, for example for tax and business record-keeping. When it is no longer needed, we take reasonable steps to destroy or de-identify it.

Access and correction

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. We will respond within a reasonable time. In limited circumstances permitted by law, we may decline a request and will explain why.

Marketing

We will only send you marketing communications, such as updates or newsletters, if you have consented to receive them. You can opt out at any time by using the unsubscribe option in the message or by contacting us.

Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact us

For privacy questions, access or correction requests, or complaints, please get in touch through our contact page.

Changes to this policy

We may update this policy from time to time. The current version will always be published on this page, with the date it was last updated.

This policy is provided for general information and should be reviewed by the business owner before relying on it.