Privacy policy

Data & Knowledge Enterprise (ABN 54 637 842 641), referred to here as DKE, we or us, respects your privacy. This policy explains what personal information we collect, why we collect it, how we handle it, and how you can access or correct it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

We collect only what we need to respond to you and to run our business:

• Information you give us. Your name, email address, phone number, employer and the content of your enquiry, when you contact us through the website, by email or by phone.
• Information from working together. Contact and role details for the people we deal with at client organisations, and correspondence relating to a project.
• Website usage information. Basic technical information such as pages visited, approximate location derived from IP address, browser type and referring site.

We do not seek sensitive information as defined by the Privacy Act. Please do not send us health, biometric or other sensitive personal information through the website form.

Client data during a project

During a project we may be given access to systems and datasets that belong to a client and that contain personal information about that client's own customers, staff or patients. In that situation the client is the entity responsible for that information, and we handle it as a service provider under the terms of our engagement agreement. Client data is hosted in Australian cloud regions, access is limited to the people who need it for the work, that access is logged, and it is revoked at the end of the engagement.

Cookies and analytics

This website uses no advertising or cross-site tracking cookies. If we add analytics in future, this policy will be updated and, where consent is required, we will ask for it before any non-essential cookie is set.

Why we use your information

• To respond to your enquiry and, where relevant, prepare a proposal
• To deliver and support services under an engagement
• To meet our legal, tax and record keeping obligations
• To improve the website and our services

We do not sell personal information, and we do not add enquiry contacts to a marketing list without asking.

Who we disclose it to

We disclose personal information only where it is needed to do the work or to meet a legal obligation. That can include:

• Our cloud and software providers, including Microsoft Azure and Databricks, used to host and operate solutions
• Members of our own delivery team, including engineers located outside Australia, who work under contractual confidentiality obligations and access controls
• Professional advisers, and government or regulatory bodies where the law requires it

Overseas disclosure

Client data hosted in solutions we build is stored in Australian cloud regions. Some members of our delivery team are located outside Australia and may access systems from there in order to do their work. We take reasonable steps to ensure any overseas recipient handles personal information in a way consistent with the Australian Privacy Principles, including through contractual obligations and access controls. Where a client requires an onshore-only delivery team, we scope engagements accordingly.

How we keep it secure

We use access controls, encryption in transit and at rest on the platforms we operate, logging, and the principle of least privilege. We keep personal information only as long as we need it for the purpose it was collected or as long as the law requires, then delete or de-identify it.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and we will notify any affected client without undue delay.

Accessing and correcting your information

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email info@dkecompany.com.au and we will respond within a reasonable period, normally 30 days. We may need to verify your identity first.

Complaints

If you think we have mishandled your personal information, contact us first at info@dkecompany.com.au and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.