Privacy Policy — Tmatt Technology

Tmatt Technology Pty Ltd ("we", "us") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Information You Provide

• Contact details: name, email, phone number
• Business information: company name, industry, project requirements
• Communications: emails, messages, support requests

Information Collected Automatically

• Technical data: IP address, browser type, device information
• Usage data: pages visited, time on site, referring URLs
• Cookies: see Section 5 below

2. How We Use Your Information

• Service delivery: providing development, AI solutions, SEO, and other services
• Communication: responding to enquiries, project updates, support
• Business operations: invoicing, analytics, improving our services
• Marketing: promotional communications — only with your consent, opt out any time
• Legal compliance: meeting regulatory requirements, preventing fraud

3. AI Solutions & Data Processing

When we provide AI solutions to clients:

• We act as a data processor on behalf of the client (data controller)
• Data is processed only for the agreed purpose of delivering AI services
• AI systems may use third-party providers (e.g. OpenAI, Google Cloud AI, Anthropic)
• We do not use client data to train AI models beyond the scope of the engagement
• We implement reasonable technical and organisational security measures

4. How We Share Your Information

We do not sell your personal information. We may share it with:

• Service providers: hosting, analytics, email services — only as needed
• AI platforms: when processing data through AI systems as agreed
• Professional advisors: accountants, lawyers, where necessary
• Legal authorities: when required by law or to protect our rights

5. Cookies & Analytics

• Essential cookies: required for the website to function
• Analytics: Google Analytics to understand how visitors use our site

You can opt out via the Google Analytics Opt-out Add-on or by adjusting your browser cookie settings.

6. Data Security

• Encrypted data transmission (HTTPS/TLS)
• Secure access controls and authentication
• Regular security reviews
• Access limited on a need-to-know basis

No method of transmission is 100% secure. We will notify you of any breach as required by the Notifiable Data Breaches scheme.

7. Data Retention

• Client data: duration of engagement plus 7 years (tax/legal)
• Contact form submissions: up to 2 years
• Analytics data: 26 months (Google Analytics default)

You can request earlier deletion — see Section 8.

8. Your Rights

Under Australian Privacy Law

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Complain to us or the OAIC

Additional Rights for EU/EEA Residents (GDPR)

• Erasure: request deletion of your personal data
• Restriction: limit how we process your data
• Portability: receive your data in a portable format
• Object: object to processing based on legitimate interests
• Withdraw consent at any time

9. International Data Transfers

Your data may be processed outside Australia (e.g. United States) through cloud services and AI platforms. We ensure appropriate safeguards are in place with providers that comply with recognised data protection standards.

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page. Material changes will be notified to active clients via email.

12. Contact & Complaints

We respond to privacy requests within 30 days. If unsatisfied, you may lodge a complaint with the OAIC.