Privacy Policy

1. Who we are

This policy applies to Throughline Automation (ABN 59 701 869 598), of Melbourne, Victoria, Australia (we, us, our). It covers this website and the services we provide to our clients.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the Act does not strictly apply to a business of our size, we have chosen to apply these standards anyway.

2. What we collect

Information you give us. When you book an assessment, contact us, or become a client, we may collect your name, business name, email address, phone number, role, the nature of your enquiry, and any information you choose to include in messages or documents you send us.

Information collected automatically. When you visit this website we may record your IP address, browser and device type, the pages you view, and the referring page or advertisement. Where you arrive from an online advertisement, we may record the campaign identifiers attached to that link so we can understand which advertising works.

Information from third parties. For business development we may collect business contact details and company information from publicly available sources and from commercial business data providers. This is limited to business contact information — the name, role, business email address and employer of people in a professional capacity.

Client system data. Delivering an automation project usually requires access to systems that contain your organisation's data, which may include personal information about your staff, customers or clients. We treat that data as confidential and handle it under the terms of our services agreement with you. We do not use it for any purpose other than delivering the services you have engaged us for.

3. Sensitive and health information

We do not seek sensitive information as defined in the Privacy Act. Where we work with healthcare or allied health practices, our work is limited to administrative workflows. We do not build or operate systems that make clinical decisions. Where a project unavoidably touches systems containing health information, we handle that information under the Privacy Act, applicable state health records legislation, and the additional confidentiality terms in our services agreement.

4. Why we collect it

• To respond to enquiries and arrange assessments
• To scope, quote, deliver and support automation projects
• To send information about our services, where we are permitted to do so
• To understand which marketing activity is effective
• To meet our legal, tax and record-keeping obligations

We do not sell personal information.

5. Cookies and website tracking

This website does not set advertising cookies of its own. Where you arrive from an advertisement, campaign identifiers are held temporarily in your browser's session storage so that a subsequent booking can be attributed to that campaign. This is cleared when you close the tab.

Where we run paid advertising, our advertising platforms may set their own cookies or identifiers to measure whether an advertisement led to a booking. You can control this through your browser settings and through the advertising preferences offered by those platforms.

Our booking process is provided by a third-party scheduling platform. Information you enter into the booking form is handled by that provider as well as by us.

6. Direct marketing

We send commercial electronic messages in accordance with the Spam Act 2003 (Cth). Every marketing message we send identifies us, and contains a working unsubscribe facility. We act on unsubscribe requests promptly and at no cost to you.

Where we contact a business address obtained from a public source, we rely on the position under the Spam Act that publication of a business address without a statement to the contrary may indicate consent to receive messages relevant to that role. If you would prefer not to hear from us, tell us once and we will not contact you again.

7. Who we disclose it to

We disclose personal information to service providers who help us operate, including:

• Website hosting and content delivery
• Email and productivity services
• Customer relationship management
• Appointment scheduling
• Business data and enrichment providers
• Advertising platforms, for measurement
• Our accountants, insurers and professional advisers

We also disclose personal information where required or authorised by law.

8. Overseas disclosure

Some of the providers above store or process data outside Australia, including in the United States and, in the case of global content delivery networks, in a range of countries determined by network routing. Before disclosing personal information to an overseas recipient we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including through the contractual terms offered by those providers.

Where we can choose an Australian data region for a service, we do. Our customer relationship management data is held in an Australian region.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encrypted connections, access controls, multi-factor authentication on our business accounts, and limiting access to those who need it.

No method of transmission or storage is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will respond in line with the Notifiable Data Breaches scheme, which includes notifying affected individuals and the Office of the Australian Information Commissioner.

10. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires. Business records are generally retained for seven years for tax purposes. Client system access is revoked at the end of an engagement. Where information is no longer needed and we are not required to keep it, we destroy or de-identify it.

11. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Contact us using the details below. We will respond within a reasonable period, normally within 30 days. There is no charge for making a request. If we refuse a request we will tell you why in writing.

12. Complaints

If you think we have mishandled your personal information, contact us first and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5218, Sydney NSW 2001.

13. Changes to this policy

We may update this policy. The current version is always available at this address, with its effective date at the top. Material changes affecting existing clients will be communicated directly.

14. Contact us

Privacy enquiries
Throughline Automation
Email: hello@throughlineautomation.com
Phone: 0491 442 602
Melbourne, Victoria, Australia