1. Our Commitment to Your Privacy

Sovereign Data Defence ("we", "us", "our") is committed to protecting the privacy of our clients and website users. This policy outlines how we collect, use, disclose, and secure your personal information in accordance with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth).

This policy applies to information provided to us through our website (sovereigndatadefence.com), during the service booking process, and in the course of delivering our services.

2. What Personal Information We Collect

We collect information that is necessary for us to provide our specialised services to you. The types of personal information we may collect include:

• Contact Information: Your name, the name of your organisation, business address, email address, and phone number.
• Service Information: Details of your service request, including the types and quantity of assets for processing, preferred service dates, and any specific project requirements you provide.
• Financial Information: Purchase Order numbers, billing details, and information required for invoicing and payment processing.

Crucially, we do not collect, view, or store any of the personal or sensitive data contained on the IT assets (hard drives, computers, etc.) that you provide to us for erasure. Our process is designed to securely destroy this data, not access it.

3. How We Collect Your Information

We collect personal information directly from you when you:

• Complete the Secure Service Enquiry form on our website.
• Correspond with us via email or phone.
• Engage with us to provide a quotation or scope a project.
• Provide details required for service delivery and invoicing.

We may also collect non-identifiable data about your use of our website, such as your IP address, browser type, and pages visited, to improve our website and services.

4. Purpose of Collection and Use

We collect and use your personal information for the following purposes:

• To respond to your enquiries and provide you with information about our services.
• To prepare and provide accurate quotations for our services.
• To schedule and coordinate the on-site delivery of our services.
• To perform our contractual obligations, including the certified erasure of data and secure asset disposal.
• To issue Certificates of Destruction upon completion of the service.
• For billing, invoicing, and processing payments.
• To comply with our legal and regulatory obligations.

5. Disclosure of Personal Information

We do not sell, trade, or rent your personal information to others. We may disclose your information to third parties only in the following limited circumstances:

• Third-Party Service Providers: We may share necessary information (such as site address) with trusted partners who assist us in operating our business, such as secure e-waste recycling partners for the disposal of *sanitised* hardware. These partners are contractually bound to maintain the confidentiality and security of your information.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or as requested by a government or law enforcement authority.

6. Data Security and Retention

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. Our security measures include secure storage of electronic data, access controls, and procedural safeguards.

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, to provide you with services, and to comply with our legal obligations for record-keeping.

7. Access and Correction

You have the right to request access to the personal information we hold about you and to request its correction if it is inaccurate, incomplete, or out-of-date. To make a request, please contact us using the details below.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review this policy periodically.

9. Enquiries and Complaints

If you have any questions about this policy or wish to make a complaint about a potential breach of the Australian Privacy Principles, please use our secure contact form. We will investigate your complaint and respond to you in a timely manner.