Our Commitment to Your Privacy

At rifnalavore, we understand that your financial data and personal information require the highest level of protection. This privacy policy explains how we collect, use, store, and safeguard your information when you engage with our business communications services.

We operate under Australian privacy laws, including the Privacy Act 1988 and the Australian Privacy Principles (APPs). Your trust is fundamental to our business relationship, and we're committed to transparent handling of your personal information.

Information We Collect

Personal Information

When you interact with our services, we may collect:

• Contact Details: Name, email address, phone number, business address
• Business Information: Company name, industry sector, business size, communication preferences
• Financial Communications Data: Transaction records, payment processing information, account details
• Technical Information: IP address, browser type, device information, access logs
• Communication Records: Email correspondence, support tickets, meeting notes, consultation records

Automatically Collected Information

Our systems automatically gather certain technical data to improve service delivery and security. This includes session duration, page interactions, error reports, and system performance metrics.

How We Use Your Information

Your personal information helps us deliver effective business communication services. Here's how we use different types of data:

Data Storage and Security

Storage Locations

Your data is primarily stored within Australia using local data centres that comply with Australian privacy standards. Some backup systems may utilise overseas facilities in countries with adequate privacy protections.

Security Measures

• Encryption: All sensitive data is encrypted both in transit and at rest using industry-standard protocols
• Access Controls: Strict role-based access ensures only authorised personnel can view your information
• Regular Audits: We conduct quarterly security assessments and annual third-party audits
• Incident Response: Comprehensive procedures for detecting, responding to, and reporting security incidents
• Staff Training: Regular privacy and security training for all team members handling personal data

Data Retention

We retain your personal information for as long as necessary to provide services and meet legal obligations. Business communication records are typically kept for seven years to comply with Australian business record requirements. Account information is maintained while your account remains active, plus three years following account closure.

Sharing Your Information

We don't sell your personal information to third parties. However, we may share your data in these specific circumstances:

Service Providers

Trusted partners who help deliver our services, including payment processors, cloud hosting providers, and communication platforms. All service providers sign strict confidentiality agreements and are required to handle your data according to Australian privacy standards.

Legal Requirements

When required by Australian law, court orders, or regulatory investigations. We'll notify you of such requests unless legally prohibited from doing so.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred to the new entity. You'll be notified of any such changes and your rights regarding your personal information.

Your Privacy Rights

Under Australian privacy law, you have several important rights regarding your personal information:

How to Exercise Your Rights

To make a privacy-related request, contact our Privacy Officer using the details below. We'll respond within 30 days and may request identity verification for security purposes. Most requests are processed free of charge, though complex requests may incur reasonable administrative costs.

Making a Complaint

If you're concerned about how we've handled your personal information, you can lodge a complaint with us directly. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).

International Data Transfers

While we primarily store data within Australia, some processing activities may involve overseas locations. When we transfer data internationally, we ensure adequate protection through:

• Selecting countries with privacy laws substantially similar to Australia's
• Using contractual safeguards that require overseas recipients to protect your information
• Implementing technical measures to maintain data security during transfer
• Regular compliance monitoring of international service providers

Updates to This Policy

We review this privacy policy annually and update it when necessary to reflect changes in our practices or legal requirements. Material changes will be communicated via email to active clients, and we'll post updates on our website with clear effective dates.

Continued use of our services after policy updates indicates acceptance of the revised terms. If you disagree with changes, please contact us to discuss your options.

Children's Privacy

Our business communication services are designed for commercial clients and aren't intended for individuals under 18. We don't knowingly collect personal information from children. If we become aware that we've collected information from someone under 18, we'll take steps to delete that information promptly.