Connect Pro — Privacy Policy

Connect Pro is operated by SINGH GROUP IT SERVICES PTY LTD (ACN 694 557 956, ABN 17 694 557 956), trading as Tassie Tech IT Services.

This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with Connect Pro.

We handle personal information in accordance with applicable Australian privacy law. Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to our activities, we handle personal information consistently with those requirements.

Depending on how you interact with Connect Pro, we may collect information including your name, email address, authentication and account information, business or Workspace information, user roles and permissions, IP address, browser or device information, security and session information, support communications and records of actions performed through the service.

Connect Pro also processes information supplied by customers and people interacting with their forms. This may include names, email addresses, telephone numbers, enquiry content, form responses, uploaded files, signatures, communications and other information selected by the Workspace operating the form.

We do not require customers to provide sensitive information merely to create a normal Connect Pro account. However, information entered into forms or messages could contain sensitive information depending on how a customer configures and uses Connect Pro.

We may collect personal information directly from you when you create or use an account, communicate with us, submit a form, send or receive an enquiry, upload a file or otherwise use Connect Pro.

We may also collect information automatically through application and security systems, including session, IP address, browser, device and operational-event information.

Where a business uses Connect Pro to collect information from its own customers or contacts, that business determines what information it requests. In those circumstances we operate Connect Pro to process and store the information necessary to provide the service.

We may use personal information to provide and operate Connect Pro; authenticate users; establish and administer Workspaces; route and manage enquiries; provide forms and communications; send transactional and account-security emails; maintain security; detect abuse or unauthorised access; troubleshoot and support users; maintain records; improve service reliability; comply with legal obligations; and establish, exercise or defend legal rights.

We do not treat acceptance of our Terms, Privacy Policy or AUP as consent to unrelated marketing.

Businesses using Connect Pro control the information they request from people through their forms and business processes.

Those businesses are responsible for their own privacy notices and for ensuring they have authority to collect and use that information.

If you have submitted information to a business through a Connect Pro form and your request relates primarily to that business's use of the information, you should generally contact that business first.

We will assist where reasonably appropriate and where required by law.

We may disclose or make personal information available to service providers where reasonably necessary to operate Connect Pro, including hosting, infrastructure, transactional email, security, support and related technical service providers.

We may also disclose information where required or authorised by law, to protect the security or integrity of Connect Pro, to investigate suspected unlawful activity, or in connection with a legitimate corporate transaction subject to appropriate protections.

We do not sell personal information to advertisers.

Connect Pro's primary production application, PostgreSQL database and uploaded-file storage are hosted on OVHcloud infrastructure located in Australia.

We may maintain backups and infrastructure copies as part of operating and protecting the service. Where a hosting or backup arrangement results in personal information being disclosed to an overseas recipient, we will identify relevant locations in this Privacy Policy where practicable.

Connect Pro uses Maileroo to provide transactional email services. Maileroo states that its primary data-processing facilities are located in the European Union and that personal data may be transferred to, stored or processed in Germany, the Netherlands, France and Finland, as well as other countries in which Maileroo or its subprocessors maintain facilities.

Other service providers may process information outside Australia where reasonably necessary to provide Connect Pro. Where Australian privacy law applies, we take reasonable steps appropriate to the circumstances in relation to overseas disclosures and the handling of personal information.

We will review this section when our hosting, backup, email or other material subprocessors change.

We take reasonable technical, organisational and administrative measures designed to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

Measures may include access controls, authentication, tenant isolation, encryption provided by applicable infrastructure, logging, rate limits, backups and security monitoring.

No internet-based service can guarantee absolute security.

If we become aware of a data breach, we will assess and respond to it in accordance with applicable legal obligations, including the Notifiable Data Breaches scheme where it applies.

We retain personal information for as long as reasonably necessary to provide Connect Pro, fulfil the purposes described in this policy, maintain security and business records, resolve disputes and meet legal obligations.

Different categories of information may have different retention periods.

Information deleted from active systems may remain temporarily in protected backups until those backups expire or are overwritten through the normal backup lifecycle.

We will not intentionally retain personal information indefinitely where there is no continuing business, legal or security reason to do so.

You may request access to personal information about you that we hold or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Send requests to: tassietech.it@gmail.com

We may need to verify your identity before actioning a request.

There may be circumstances permitted by law where access can be refused or limited. Where required, we will explain the reason.

You may contact us to request deletion of personal information.

Some information may need to be retained where required or permitted by law, for security or fraud prevention, to establish or defend legal claims, or while it remains within protected backup retention cycles.

Where the information is controlled by a business using Connect Pro, we may direct you to that business or work with it as appropriate.

If you believe we have mishandled your personal information, contact:

Please provide enough information for us to understand and investigate your concern.

We will review privacy complaints and respond within a reasonable period.

If the Privacy Act applies to the matter and you are not satisfied with our response, you may also be entitled to contact the Office of the Australian Information Commissioner (OAIC).

Connect Pro may use cookies and similar browser storage that are necessary for authentication, security, user preferences and operation of the application.

We do not describe essential authentication cookies as advertising consent.

If non-essential analytics, advertising or marketing technologies are introduced later, this Privacy Policy and any required consent mechanisms should be updated before those technologies are enabled.

Connect Pro business accounts are not intended for persons under 18 to create independently.

Customers must consider their own legal obligations if they configure forms intended to collect information relating to children.

We may update this Privacy Policy as Connect Pro or applicable requirements change.

Material revisions will receive a new version and effective date.

Where appropriate, we will notify affected users.

Historical published versions should be retained so that an acceptance record can be associated with the policy text that applied at that time.