This Privacy Policy explains how AMTEC ADVISORY PTY LTD (ABN 92 697 826 627) (Amtec, we, us or our) collects, holds, uses and discloses personal information.
We are committed to handling personal information transparently and securely. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy laws where they apply to us. Where the Privacy Act does not apply to a particular activity, we aim to follow the same principles as a matter of good business practice.
This policy applies to personal information collected through https://www.amtecadvisory.com, our client portal, meetings and communications, and the delivery of our consulting, software, artificial intelligence, automation, integration, website, data and technical advisory services.
1. Who we are
Amtec is an Australian technology and advisory business. Our registered office is 74 Kooyong Road, Caulfield North VIC 3161, Australia. Our privacy contact is Benji Saddik, who can be contacted at admin@amtecadvisory.com.
This policy applies only to Amtec Advisory. It does not apply to separate companies, products or businesses that may be associated with Amtec.
2. Meaning of personal information
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. It may include contact details, employment information, online identifiers and information contained in business records.
Sensitive information is a category of personal information that includes health information, biometric information, racial or ethnic origin, religious beliefs, political opinions, sexual orientation and criminal-record information. We only collect sensitive information where it is reasonably necessary for our functions and we have consent or another lawful basis.
3. Personal information we may collect
- identity and contact details, including name, business name, position, email address, telephone number and postal address;
- enquiry, proposal and project information, including project requirements, budgets, technical specifications and correspondence;
- account, billing and transaction information, including invoice details and payment status (payment-card information is generally processed by third-party payment providers and is not stored by us);
- meeting, call and demonstration recordings, transcripts and notes where recording is disclosed or consented to;
- website and device information, including IP address, browser type, device identifiers, pages viewed, referral source, interaction data and cookie identifiers;
- marketing and communications information, including preferences, campaign engagement, unsubscribe requests and suppression-list records;
- professional and business information obtained from public sources, referrals, LinkedIn, business directories, data providers and prospecting platforms;
- client portal submissions, including documents, source code, system information, configuration files and credentials provided for a project;
- supplier, contractor and job applicant information; and
- other information provided voluntarily or generated in the course of our relationship.
4. Sensitive information, credentials and client data
Website visitors should not submit health information, identification documents, passwords, API keys, financial records or other sensitive or security-critical information through general website forms or ordinary email.
Prospective or engaged clients may need to provide credentials, API keys or confidential project information. These should be provided only through the secure method nominated by Amtec and only where reasonably necessary for the engagement.
Where a client provides personal information relating to its customers, employees, prospects or other individuals, the client remains responsible for ensuring that it has authority to collect, use and disclose that information and to instruct Amtec to handle it for the project.
5. How we collect personal information
- directly from an individual through forms, calls, meetings, emails, proposals, contracts, payments and the client portal;
- from a client, employer, colleague, referrer or authorised representative;
- from public sources such as company websites, professional profiles, public business registers and social-media platforms;
- from business-data and prospecting providers where their use is permitted;
- automatically through our website, analytics, server logs and cookies; and
- from service providers that support our operations.
6. Why we collect, hold, use and disclose information
- to respond to enquiries, assess potential engagements and prepare proposals;
- to enter into, administer and perform client contracts;
- to design, develop, integrate, test, host, support and maintain technology solutions;
- to communicate, schedule meetings, record agreed meetings and maintain project records;
- to verify identity, manage access, protect systems and investigate security incidents;
- to issue invoices, receive payments and maintain accounting and compliance records;
- to improve our website, services, processes, products and customer experience;
- to conduct lawful business-to-business marketing, relationship management and business development;
- to manage suppliers, contractors, recruitment and internal administration;
- to comply with legal obligations, exercise legal rights and manage disputes; and
- for other purposes disclosed at the time of collection or authorised by law.
7. Direct marketing
We may send marketing communications where permitted by law, including through email and professional networking platforms. We may use contact details collected directly, through an existing relationship, from public business sources or from reputable business-data providers.
Commercial electronic messages will identify the sender and include an unsubscribe mechanism where required. We maintain suppression records and will not knowingly re-add an address that has opted out unless the person later provides valid consent.
You may opt out at any time using the unsubscribe facility in a message or by emailing admin@amtecadvisory.com. Administrative, security and service communications are not marketing and may still be sent where necessary.
8. Cookies and analytics
Our website uses a small number of cookies for analytics and for the booking tool embedded on our pages. We do not run advertising pixels, retargeting tags or session-recording tools on this website.
We use Google Analytics to understand how the website is used. Our booking pages embed Cal.com, which sets its own cookies to operate the scheduling flow. These tools may collect online identifiers and usage information and may combine it with information held by the relevant provider. Our Cookie Notice sets out the detail.
We do not display a cookie consent banner. Australian law does not require one for the technologies we use, and you can block or delete cookies through your browser at any time.
9. Meeting recordings and transcripts
We may record meetings, calls or demonstrations for note-taking, quality, training, project delivery and evidentiary purposes. We will disclose recording at or before the start of the recording and will obtain consent where required.
Recordings and transcripts are treated as confidential project records. A participant may ask us not to record, although this may affect the way we can document or deliver the engagement.
10. Artificial intelligence and automated tools
We may use artificial-intelligence and automation tools to assist with internal productivity, drafting, coding, analysis and service delivery. We do not knowingly submit sensitive client information, passwords, API keys or other security-critical information to general-purpose artificial-intelligence tools.
Where personal information is used with an artificial-intelligence provider, we take reasonable steps to minimise or de-identify it and to use appropriate business settings and contractual safeguards.
Amtec does not use personal information collected through the website to make automated decisions that have a significant effect on an individual’s rights or interests. Where a client uses technology supplied by Amtec to make or support decisions, the client determines the purpose and remains responsible for the lawfulness, fairness, human oversight and consequences of that use.
11. Disclosure of personal information
We may disclose personal information where reasonably necessary to:
- employees, officers, contractors and professional advisers who need the information and are subject to confidentiality obligations;
- cloud, hosting, software, analytics, communications, security, payment and business-service providers;
- client-authorised users and third parties involved in a project;
- regulators, courts, law-enforcement agencies or other persons where required or authorised by law;
- an actual or proposed purchaser, investor or successor in connection with a corporate transaction, subject to appropriate confidentiality safeguards; and
- other recipients with consent or as otherwise disclosed at collection.
We do not sell personal information or use client data to train Amtec’s internal models.
12. Service providers and overseas handling
We seek to host primary project systems and records in Australia where reasonably available and appropriate. However, many technology providers operate global infrastructure, and personal information may be processed, backed up or accessed in other countries.
Depending on the services used, overseas locations may include the United States, the United Kingdom, countries in the European Economic Area and other jurisdictions in which providers or their subcontractors operate.
Providers may include Google Workspace, Google Drive, Gmail, GitHub, Railway, Cloudflare, Vercel, AWS, Microsoft, Slack, HubSpot, Calendly or Cal.com, Klaviyo, LinkedIn, Meta, Apollo, Instantly, OpenAI, Anthropic, Supabase, Stripe, Xero and other tools reasonably selected for client or internal work.
Where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances before disclosing personal information overseas. The contractual terms, infrastructure and processing locations of third-party providers can change.
13. Security
We take reasonable technical and organisational steps to protect information against misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include multi-factor authentication, access controls, password management, encrypted devices and services, secure portals, least-privilege access, contractor offboarding, backups and incident-response procedures.
No online system is completely secure. Clients must protect their own credentials, promptly revoke unnecessary access and notify us of suspected compromise.
14. Retention and deletion
We retain personal information only for as long as reasonably required for the purpose for which it was collected, to perform contracts, maintain business and tax records, protect legal rights, meet insurance requirements and comply with law.
When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to backups, legal holds and technical limitations.
15. Access and correction
You may request access to personal information we hold about you or ask us to correct inaccurate information by contacting admin@amtecadvisory.com. We may need to verify your identity.
We may refuse or limit access where permitted by law. If we refuse, we will generally provide reasons and available complaint options.
16. Privacy complaints and data incidents
Privacy questions or complaints should be sent to Benji Saddik at admin@amtecadvisory.com. Please provide enough information for us to investigate. We aim to acknowledge a complaint promptly and respond within a reasonable period.
Where applicable, unresolved privacy complaints may be made to the Office of the Australian Information Commissioner.
We maintain processes to assess suspected data breaches and, where the Notifiable Data Breaches scheme applies, to notify affected individuals and the regulator when legally required.
17. Children
Our website and services are not directed to children under 18. We do not knowingly collect personal information directly from children through the website without appropriate authority.
18. Changes to this policy
We may update this policy to reflect changes to our practices, technology or legal obligations. The current version will be published on our website with its effective date.
19. Contact
AMTEC ADVISORY PTY LTD
ABN 92 697 826 627 | ACN 697 826 627
74 Kooyong Road, Caulfield North VIC 3161, Australia
Privacy contact: Benji Saddik
Email: admin@amtecadvisory.com