Legal · Privacy

Privacy Policy

XpansionIT takes privacy seriously. This policy explains what information we collect when you use this website or engage us, why we collect it, how we use it, and what choices you have.

Effective: Q1 - please replace before launch

1. Who we are

XpansionIT is a software development team based in Adelaide, South Australia. We act as the data controller for personal information collected through this website. You can reach us at xpansion.it@gmail.com.

2. What we collect

We collect three categories of information:

  • What you tell us: name, email address, company, role, and the contents of any project brief you send through the contact form or directly by email.
  • Application data: when you apply to a role, the information you provide in your application and any attachments.
  • Technical data: anonymised analytics about how the site is used (pages visited, referrer, anonymised IP, device type). We do not use this to identify individuals.

3. Why we collect it

  • To reply to your enquiry and assess whether your project is a fit.
  • To review job applications and respond to candidates.
  • To improve the website and understand which content is useful.
  • To meet our legal obligations (record keeping, audit trails).

4. Lawful basis

We process your information on the basis of your consent (when you send a brief or apply), our legitimate interest (responding to enquiries, running the business), and where required by law.

5. How long we keep it

  • Project briefs and email correspondence: kept while we are actively in conversation, then archived for up to 24 months unless we remain in an engagement.
  • Job applications: retained for up to 12 months for follow-up consideration, unless you ask us to delete them sooner.
  • Engagement records: retained for the period required by Australian tax, employment, and contractual law (typically 7 years for financial records).

6. Who we share it with

We share personal information only with:

  • Service providers we use to run the business (email, calendar, accounting, secure storage). All providers are bound by data protection agreements.
  • Authorities, when required by law (subpoena, court order, statutory obligation).

We do not sell personal information, ever. We do not share contact details with marketing networks or data brokers.

7. Cookies and analytics

This site uses a minimal set of cookies for essential functionality. Anonymised analytics may be used to understand site traffic; we do not run cross-site tracking and do not embed third-party advertising pixels.

8. Your rights

Under the Australian Privacy Act and similar regulations (including GDPR if you are in the EU/UK), you have the right to:

  • Request a copy of the personal information we hold about you.
  • Ask us to correct anything that is wrong.
  • Ask us to delete your information, subject to legal record-keeping obligations.
  • Withdraw consent for any processing based on consent.
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.

To exercise any of these rights, email xpansion.it@gmail.comwith the subject "Privacy request". We respond within one business day and action requests within 30 days.

9. How we keep it safe

Information is stored on encrypted infrastructure with access restricted to the people who need it. We do not store payment card information ourselves; all billing runs through trusted providers.

10. International transfers

We may store information with service providers located outside Australia. Where we do, we use providers that meet Australian Privacy Principle standards and, where applicable, EU Standard Contractual Clauses.

11. Changes to this policy

We will update this policy when our practices change. The effective date at the top of this page reflects the latest revision. Material changes will be communicated to clients and applicants directly.

12. Contact

Questions or requests about privacy? Email xpansion.it@gmail.com. We respond within one business day.