Privacy Policy

1. Scope

This policy explains how Microconcept collects, holds, uses, discloses, and protects personal information when you use our website, contact our team, or engage us for AI consulting and delivery services.

2. Information We Collect

We may collect:

• Identity and contact details (name, email, phone, company, role).
• Project and commercial details you share through forms, calls, and proposals.
• Technical usage data (device, browser, pages visited, referral source, session data).
• Communication records when you contact support or sales.

3. How We Collect Information

We collect information directly from you (forms, email, calls, workshops) and automatically via cookies, analytics tools, and website security logs. In client engagements, we may process data provided by the client under contractual instructions.

4. Why We Use Information

• To respond to enquiries, prepare proposals, and deliver consulting services.
• To secure, maintain, and improve our website and service quality.
• To comply with legal obligations, contracts, and regulatory requests.
• To send service updates and relevant business communications.

5. AI and Client Data Handling

For AI consulting engagements, Microconcept applies privacy-by-design and data minimisation practices. We do not use client confidential data to train shared/public models unless explicitly authorised in writing. We use role-based access controls, encryption in transit and at rest, and controlled retention windows where practical.

6. Disclosure to Third Parties

We may disclose information to trusted service providers (hosting, analytics, communications, payment, and professional advisors) only as needed to operate our business and deliver services. Where data is handled by third parties, we apply contractual safeguards and due diligence.

7. Overseas Processing

Some providers may process data outside Australia. Where this occurs, we take reasonable steps to ensure equivalent privacy and security protections through contractual, technical, and governance controls.

8. Security and Governance

Our controls are informed by Australian Privacy Principles and security practices commonly expected in regulated environments, including APRA CPS 234 style controls for risk assessment, access management, incident response, and third-party oversight.

9. Access, Correction, and Complaints

You can request access to or correction of your personal information, or lodge a privacy complaint, by contacting us using the details below. We aim to acknowledge privacy requests within a reasonable period.

10. Contact

Email: [email protected]
Website: microconcept.com.au

This policy is general information and not legal advice. For compliance obligations specific to your organisation, obtain independent legal advice.