Privacy Policy.

1. About this Policy

1.1 This Privacy Policy explains how GIRIH X PTY LTD (ABN 17 670 722 362) ("GIRIH X", "we", "us", "our") collects, uses, holds, discloses, and protects personal information.

1.2 We are an Australian business and we handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

1.3 This Policy applies to our website at girihx.com, our communications with prospective and existing clients, and any services we deliver under engagement.

1.4 This Privacy Policy operates alongside our Terms and Conditions. Where the two cover different subject matter, both apply.

2. What personal information we collect

2.1 The personal information we collect typically includes:

(a) identity and contact details such as your name, business name, role, email address, and phone number;

(b) information you provide when you contact us, complete a form on our website, request a proposal, or correspond with us;

(c) information you provide during an engagement, including project briefs, files, and feedback;

(d) technical information collected automatically when you visit our website, such as IP address, device and browser type, referring URL, pages viewed, and time spent on pages.

2.2 We do not knowingly collect sensitive information (as defined in the Privacy Act 1988). If you provide sensitive information to us voluntarily, we will only handle it in line with the APPs and your instructions.

3. How we collect personal information

3.1 We collect personal information directly from you when you:

(a) submit a contact, enquiry, or proposal request form on our website;

(b) email, call, or meet with us;

(c) engage us to deliver services and provide project information in the course of that engagement;

(d) interact with our content on third-party platforms (for example, professional networking sites) and that platform shares information with us.

3.2 We also collect technical information automatically through cookies and analytics tools when you use our website. See clause 7 below.

4. Why we collect personal information and how we use it

4.1 We collect, hold, and use personal information for purposes including:

(a) responding to enquiries and providing requested information or proposals;

(b) delivering services to clients under an engagement;

(c) operating, maintaining, and improving our website and services;

(d) understanding how visitors use our website so we can refine content and user experience;

(e) sending operational communications relating to an active engagement or enquiry;

(f) complying with our legal, regulatory, accounting, and tax obligations; and

(g) protecting our legitimate business interests, including the security of our systems.

4.2 We will only use personal information for the purposes for which it was collected, for related secondary purposes you would reasonably expect, or as otherwise permitted or required by law.

5. Disclosure of personal information

5.1 We may disclose personal information to:

(a) our personnel and contractors who need it to perform their role;

(b) third-party service providers who help us operate our business and website, including providers of contact form processing, email, hosting, analytics, and customer relationship management tools;

(c) professional advisers such as accountants, auditors, and lawyers, where required;

(d) any party to whom we are required or authorised to disclose information by law.

5.2 We do not sell personal information.

5.3 Where we engage third-party service providers, we take reasonable steps to ensure they handle personal information in a manner consistent with this Policy and the APPs.

6. Data storage and security

6.1 We hold personal information in electronic form using reputable cloud services and internal systems.

6.2 We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include access controls, encryption in transit, and operational security measures.

6.3 No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6.4 We retain personal information for as long as it is needed for the purposes set out in this Policy, or as required by law, after which we will take reasonable steps to destroy or de-identify it.

7. Cookies, analytics, and tracking

7.1 Our website uses cookies and similar technologies to operate, secure, and improve the site, and to understand visitor behaviour in aggregate.

7.2 We use Google Tag Manager and Google Analytics to measure website performance and usage. These tools may set cookies and collect information such as your IP address, device type, pages visited, and referring URL.

7.3 You can control cookies through your browser settings. Disabling cookies may affect the functionality of parts of our website.

7.4 We do not use cookies to identify you personally beyond what is necessary to operate the site and analyse aggregate usage.

8. Your rights

8.1 You have the right to request access to the personal information we hold about you and to ask us to correct any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

8.2 To make a request, please contact us using the details in clause 12. We may need to verify your identity before responding.

8.3 We will respond to your request within a reasonable period. If we decline a request, we will explain why and how you can complain about our decision.

8.4 If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Overseas disclosure

9.1 Some of the third-party service providers we use may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure that the recipient handles the personal information in a manner consistent with the APPs.

9.2 By using our website or engaging our services, you acknowledge that personal information may be processed in jurisdictions outside Australia for the purposes set out in this Policy.

10. Children's privacy

10.1 Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us so we can delete it.

11. Changes to this Policy

11.1 We may update this Privacy Policy from time to time to reflect changes in our practices, our services, technology, or the law.

11.2 The current version will always be available on our website with the "Last updated" date at the top. Continued use of our website or services after a change indicates acceptance of the updated Policy.

12. Contact us

12.1 For questions about this Privacy Policy, to make a privacy request, or to lodge a complaint, please contact:

GIRIH X PTY LTD (ABN 17 670 722 362)
Email: hello@girihx.com

12.2 We will acknowledge your enquiry promptly and aim to respond substantively within 30 days.