Privacy Policy
Last updated: 1 October 2026
At Augmented IT, protecting information is what we do for our clients every day, and we hold ourselves to the same standard. This Privacy Policy explains how Augmented IT Pty Ltd (ACN: 700577573) trading as Augmented IT ("Augmented IT", "we", "us" or "our") collects, uses, stores, discloses and protects your personal information.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to our website at augmentedit.com.au, our services, and any other dealings you have with us.
What is personal information?
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. It includes your name, contact details and information about your role or business dealings with us.
The personal information we collect
The kinds of personal information we collect depend on how you deal with us. They may include:
• Contact details: your name, job title, business name, email address, phone number and business address
• Enquiry details: information you give us when you request a consultation, IT health check or cybersecurity assessment, such as your business size, current IT setup and the challenges you want to solve
• Client account information: details of authorised contacts, service requests, support tickets, billing records and communications with our team
• Technical information: your IP address, browser type, device information, pages visited and how you arrived at our website, collected through cookies and similar technologies (see our Cookie Policy)
• Marketing preferences: whether you have subscribed to or opted out of our communications
• Recruitment information: if you apply for a role with us, your resume, work history, qualifications and referee details
We do not usually need sensitive information, such as health information or information about your racial or ethnic origin. If we ever need it, we will only collect it with your consent or where the law requires or allows it.
How we collect personal information
We collect personal information directly from you wherever it is reasonable and practical to do so. This includes when you:
• complete a form on our website, such as a consultation or contact request
• call us, email us or meet with us
• become a client or an authorised contact for a client
• subscribe to our updates or attend an event or webinar
• apply for a job with us
Sometimes we collect personal information from third parties, such as your employer when you are nominated as a contact for one of our clients, our technology partners, referrers, or publicly available sources like LinkedIn and business directories.
If we receive personal information we did not ask for, we will check whether we could have collected it lawfully. If not, we will destroy or de-identify it where it is lawful and reasonable to do so.
Dealing with us anonymously
You can browse our website and ask general questions without telling us who you are. To provide a consultation, assessment or our services, we will need your name and contact details.
Why we collect and use personal information
We collect, hold and use personal information to:
• respond to your enquiries and provide consultations, IT health checks and cybersecurity assessments
• deliver, manage and support our IT services, including managed IT, cybersecurity, cloud, AI and automation, and Microsoft solutions
• verify the identity of people who contact us on behalf of a client, which is an important security control
• send quotes, invoices and service communications
• improve our website, services and client experience
• send you news, insights and offers that may interest you, where you have agreed or where the law allows
• assess job applications
• meet our legal, regulatory and insurance obligations
• protect our business, our clients and our systems from fraud and security threats
We only use personal information for the purpose we collected it for, a related purpose you would reasonably expect, or another purpose you consent to or the law allows.
Information we access when providing IT services
When we manage, support or secure a client's systems, we may be able to access personal information stored in those systems, such as the client's staff, customer or supplier records. Our client is responsible for that information. We only access it as needed to deliver the agreed services, follow our client's instructions and the terms of our service agreement, and protect it with the same security controls we apply to our own systems.
If you have a question about how one of our clients handles your personal information, please contact that organisation directly.
Direct marketing
We may send you information about our services, events and insights by email or phone. Every marketing email includes a simple way to unsubscribe, and you can also opt out at any time by contacting us. We comply with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth). We never sell your personal information.
Who we disclose personal information to
We may disclose personal information to:
• our staff and contractors who need it to do their work
• technology partners and vendors involved in delivering a solution you have engaged us for, such as Microsoft, AWS, Apple or Google, including for licensing and support
• service providers who help us run our business, such as cloud hosting, email, customer relationship management, accounting, payment and IT security providers
• our professional advisers, such as lawyers, accountants and insurers
• government agencies, regulators or law enforcement where the law requires or allows it
• anyone else you have authorised us to share it with
Our service providers may only use personal information to provide services to us, and we require them to keep it secure and confidential.
Disclosure overseas
Some of our service providers store or process data outside Australia. Countries where personal information is likely to be held include [the United States, Ireland, Singapore and New Zealand]. Wherever possible, we choose Australian data centre regions for our own systems and those we manage for clients. Where information is disclosed overseas, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs.
Automated decision-making
[Option A, if no automated decisions are made] We do not use computer programs to make decisions about you using your personal information that could significantly affect your rights or interests. Our people make or review all decisions about our services, pricing and engagement. If this changes, we will update this policy before the change takes effect.
[Option B, if automated decisions are made] We use computer programs that use your personal information to make, or substantially and directly assist in making, some decisions that could significantly affect you. The kinds of personal information used are [describe]. The kinds of decisions made solely by a computer program are [describe]. The kinds of decisions where a computer program substantially and directly assists a person are [describe]. You can contact us to ask for a person to review any such decision.
How we store and protect personal information
We store personal information in secure cloud systems and business applications. As a cybersecurity provider, we apply controls aligned with the Australian Cyber Security Centre's Essential Eight, including:
• multi-factor authentication on all business systems
• role-based access, so staff can only see the information they need
• encryption of data in transit and, where supported, at rest
• regular patching, backups and security monitoring
• staff training in privacy and security
We keep personal information only for as long as we need it for the purposes in this policy or as the law requires, such as tax and financial record-keeping obligations. After that, we securely destroy or de-identify it.
Data breaches
If a data breach involving personal information is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.
Accessing and correcting your personal information
You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. We will need to verify your identity first, and we will respond within 30 days. We do not charge for requests, unless providing access involves significant cost, in which case we will tell you first. If we refuse a request, we will explain why in writing and tell you how to complain.
Making a privacy complaint
If you have a concern about how we have handled your personal information, please contact our Privacy Officer using the details below and tell us what happened. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner:
• Website: oaic.gov.au
• Phone: 1300 363 992
Links to other websites
Our website may link to third-party websites, such as our technology partners. We are not responsible for their privacy practices, so we encourage you to read their privacy policies.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services or our technology. The latest version will always be on this page, with the date it was last updated.
Contact us
Privacy Officer, Augmented IT
• Phone: 1300 91 31 63
• Email: hello@augmentedit.com.au
• Post: 175 Pitt Street, Sydney NSW 2000
At Augmented IT, protecting information is what we do for our clients every day, and we hold ourselves to the same standard. This Privacy Policy explains how Augmented IT Pty Ltd (ACN: 700577573) trading as Augmented IT ("Augmented IT", "we", "us" or "our") collects, uses, stores, discloses and protects your personal information.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to our website at augmentedit.com.au, our services, and any other dealings you have with us.
What is personal information?
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. It includes your name, contact details and information about your role or business dealings with us.
The personal information we collect
The kinds of personal information we collect depend on how you deal with us. They may include:
• Contact details: your name, job title, business name, email address, phone number and business address
• Enquiry details: information you give us when you request a consultation, IT health check or cybersecurity assessment, such as your business size, current IT setup and the challenges you want to solve
• Client account information: details of authorised contacts, service requests, support tickets, billing records and communications with our team
• Technical information: your IP address, browser type, device information, pages visited and how you arrived at our website, collected through cookies and similar technologies (see our Cookie Policy)
• Marketing preferences: whether you have subscribed to or opted out of our communications
• Recruitment information: if you apply for a role with us, your resume, work history, qualifications and referee details
We do not usually need sensitive information, such as health information or information about your racial or ethnic origin. If we ever need it, we will only collect it with your consent or where the law requires or allows it.
How we collect personal information
We collect personal information directly from you wherever it is reasonable and practical to do so. This includes when you:
• complete a form on our website, such as a consultation or contact request
• call us, email us or meet with us
• become a client or an authorised contact for a client
• subscribe to our updates or attend an event or webinar
• apply for a job with us
Sometimes we collect personal information from third parties, such as your employer when you are nominated as a contact for one of our clients, our technology partners, referrers, or publicly available sources like LinkedIn and business directories.
If we receive personal information we did not ask for, we will check whether we could have collected it lawfully. If not, we will destroy or de-identify it where it is lawful and reasonable to do so.
Dealing with us anonymously
You can browse our website and ask general questions without telling us who you are. To provide a consultation, assessment or our services, we will need your name and contact details.
Why we collect and use personal information
We collect, hold and use personal information to:
• respond to your enquiries and provide consultations, IT health checks and cybersecurity assessments
• deliver, manage and support our IT services, including managed IT, cybersecurity, cloud, AI and automation, and Microsoft solutions
• verify the identity of people who contact us on behalf of a client, which is an important security control
• send quotes, invoices and service communications
• improve our website, services and client experience
• send you news, insights and offers that may interest you, where you have agreed or where the law allows
• assess job applications
• meet our legal, regulatory and insurance obligations
• protect our business, our clients and our systems from fraud and security threats
We only use personal information for the purpose we collected it for, a related purpose you would reasonably expect, or another purpose you consent to or the law allows.
Information we access when providing IT services
When we manage, support or secure a client's systems, we may be able to access personal information stored in those systems, such as the client's staff, customer or supplier records. Our client is responsible for that information. We only access it as needed to deliver the agreed services, follow our client's instructions and the terms of our service agreement, and protect it with the same security controls we apply to our own systems.
If you have a question about how one of our clients handles your personal information, please contact that organisation directly.
Direct marketing
We may send you information about our services, events and insights by email or phone. Every marketing email includes a simple way to unsubscribe, and you can also opt out at any time by contacting us. We comply with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth). We never sell your personal information.
Who we disclose personal information to
We may disclose personal information to:
• our staff and contractors who need it to do their work
• technology partners and vendors involved in delivering a solution you have engaged us for, such as Microsoft, AWS, Apple or Google, including for licensing and support
• service providers who help us run our business, such as cloud hosting, email, customer relationship management, accounting, payment and IT security providers
• our professional advisers, such as lawyers, accountants and insurers
• government agencies, regulators or law enforcement where the law requires or allows it
• anyone else you have authorised us to share it with
Our service providers may only use personal information to provide services to us, and we require them to keep it secure and confidential.
Disclosure overseas
Some of our service providers store or process data outside Australia. Countries where personal information is likely to be held include [the United States, Ireland, Singapore and New Zealand]. Wherever possible, we choose Australian data centre regions for our own systems and those we manage for clients. Where information is disclosed overseas, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs.
Automated decision-making
[Option A, if no automated decisions are made] We do not use computer programs to make decisions about you using your personal information that could significantly affect your rights or interests. Our people make or review all decisions about our services, pricing and engagement. If this changes, we will update this policy before the change takes effect.
[Option B, if automated decisions are made] We use computer programs that use your personal information to make, or substantially and directly assist in making, some decisions that could significantly affect you. The kinds of personal information used are [describe]. The kinds of decisions made solely by a computer program are [describe]. The kinds of decisions where a computer program substantially and directly assists a person are [describe]. You can contact us to ask for a person to review any such decision.
How we store and protect personal information
We store personal information in secure cloud systems and business applications. As a cybersecurity provider, we apply controls aligned with the Australian Cyber Security Centre's Essential Eight, including:
• multi-factor authentication on all business systems
• role-based access, so staff can only see the information they need
• encryption of data in transit and, where supported, at rest
• regular patching, backups and security monitoring
• staff training in privacy and security
We keep personal information only for as long as we need it for the purposes in this policy or as the law requires, such as tax and financial record-keeping obligations. After that, we securely destroy or de-identify it.
Data breaches
If a data breach involving personal information is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.
Accessing and correcting your personal information
You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. We will need to verify your identity first, and we will respond within 30 days. We do not charge for requests, unless providing access involves significant cost, in which case we will tell you first. If we refuse a request, we will explain why in writing and tell you how to complain.
Making a privacy complaint
If you have a concern about how we have handled your personal information, please contact our Privacy Officer using the details below and tell us what happened. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner:
• Website: oaic.gov.au
• Phone: 1300 363 992
Links to other websites
Our website may link to third-party websites, such as our technology partners. We are not responsible for their privacy practices, so we encourage you to read their privacy policies.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services or our technology. The latest version will always be on this page, with the date it was last updated.
Contact us
Privacy Officer, Augmented IT
• Phone: 1300 91 31 63
• Email: hello@augmentedit.com.au
• Post: 175 Pitt Street, Sydney NSW 2000
