Soveriq Pty Ltd (Soveriq, we, us) is a governance, risk and compliance consultancy based in Melbourne, Victoria. This policy explains how we handle personal information, and it is written to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We advise organisations on privacy and information security for a living. We have written this policy to be read and understood rather than to be technically unassailable, and we hold ourselves to what it says.
What we collect
Information you give us through this website
Our contact form asks for your name, work email address, organisation, approximate staff headcount, the frameworks or services you are interested in, and details about your project. You choose what to tell us. If you would rather not use the form, email us instead.
Information you give us during an engagement
If we work together, we will handle information about your organisation and the people in it — names, roles and contact details of the staff we deal with, and whatever appears in the systems, registers and documents we assess. Some of that will be personal information belonging to your employees or customers.
Information collected automatically
Our website host records standard technical information such as IP address, browser type and pages visited. We do not currently run any analytics or advertising tools on this site. If we add analytics in future it will be for understanding how people find and use the site — not for advertising, profiling or tracking you across other websites — and we will update this policy before doing so.
Why we collect it
- To respond to your enquiry and prepare a scope and price.
- To deliver services you have engaged us for.
- To meet our own legal, insurance and record-keeping obligations.
- To send occasional updates about our services, where you have asked for them or where we reasonably expect you would want them. Every such message includes an unsubscribe option, and one request is enough.
We do not sell personal information, and we never will. We do not trade, rent or share it with data brokers, advertising networks or list providers. We do not use it to build profiles for anyone else's purposes. If that ever changes, it will not change quietly.
Who we share it with
We disclose personal information only where we need to, and only to:
- Service providers who operate our systems — principally our website platform and our email and document systems. They act on our instructions and may not use your information for their own purposes.
- Contractors working on an engagement, who are bound by confidentiality obligations equivalent to our own.
- Anyone you ask us to, or where we are required by law.
Where your information is held
This matters to some of our clients more than others, so we will be precise rather than reassuring.
Consulting delivery is onshore. Client engagement material — assessments, risk registers, evidence, reports — is held in Soveriq's own environment and worked on in Australia by people located in Australia.
This website is not. Our site is built and hosted on Webflow, a platform operated from the United States. Form submissions and standard web server logs are handled on that platform and may be stored or processed overseas. That is an overseas disclosure under Australian Privacy Principle 8, and we are telling you about it rather than leaving you to infer it.
If you would prefer not to have your enquiry pass through an overseas platform, email info@soveriq.com.au instead of using the form, and say so — we will keep the exchange within our own systems.
How long we keep it
Enquiries that do not lead to an engagement are kept while they remain commercially relevant and then deleted. Engagement records are kept for as long as we need them to deliver and stand behind our work, and to meet legal, tax and professional indemnity obligations — typically seven years after the engagement ends. After that they are securely destroyed or de-identified.
How we protect it
We apply the controls we would expect of a client: multi-factor authentication on all accounts, access granted on a least-privilege basis and reviewed periodically, encryption in transit and at rest, device security controls, and logging of access to client material.
No control set is perfect, and we will not claim otherwise. If a data breach occurs that is likely to result in serious harm, we will assess and notify in accordance with the Notifiable Data Breaches scheme, and we will tell affected people and the Office of the Australian Information Commissioner as that scheme requires.
Cookies
This site uses only the cookies necessary for it to function and to remember basic preferences. It does not use advertising or cross-site tracking cookies. You can block or delete cookies through your browser; the site will still work.
Accessing and correcting your information
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email privacy@soveriq.com.au. We will respond within 30 days and we do not charge for access requests.
Where we hold personal information as a service provider to a client organisation, that organisation controls it. We will point you to them and, if you ask, tell them you have been in touch.
Complaints
If you think we have mishandled your personal information, tell us first at privacy@soveriq.com.au. We will acknowledge within five business days and give you a substantive response within 30 days.
If you are not satisfied with how we handle it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. You do not need our permission to do that, and we would rather you escalate than stay unhappy.
Changes to this policy
We will update this page when our practices change and revise the date at the top. If a change materially affects how we handle information you have already given us, we will contact you rather than relying on you noticing.
Contact
Soveriq Pty Ltd, ABN 59 700 831 465
Melbourne, Victoria, Australia
privacy@soveriq.com.au
.png)