Australian Privacy Act

This document is published in English. The English text is the governing version.

Our statement of compliance with the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme.

1. Our commitment

AI Solution Technologies Pty Ltd (“AI Solution Technologies”, “we”, “us” or “our”), which owns and operates the Hivenox platform, is committed to complying with the Privacy Act 1988 (Cth) (the “Privacy Act”) and the thirteen Australian Privacy Principles (“APPs”) in Schedule 1. This Statement summarises our obligations and how we meet them, and should be read with our Privacy Policy and our Australian Privacy Principles (APP) Statement.

2. Application of the Privacy Act

The Privacy Act regulates how organisations handle personal information. We treat ourselves as bound by the Privacy Act and the APPs in respect of the personal information we collect and handle in operating Hivenox, and apply equivalent standards across our operations.

3. Personal and sensitive information

“Personal information” is information or an opinion about an identified or reasonably identifiable individual. “Sensitive information” is a special category (including health, biometric and similar information) with additional protection. In operating Hivenox, we collect sensitive information only where reasonably necessary and with consent, or where otherwise permitted by law. Where Customers store sensitive information in their accounts, the Customer is the controller and is responsible for having a lawful basis to do so.

4. How we comply

Our key measures include:

maintaining a clearly expressed, up-to-date Privacy Policy available free of charge;
collecting only personal information reasonably necessary for our functions, by lawful and fair means;
providing notice at or before collection;
using and disclosing personal information only for permitted purposes;
taking reasonable steps to keep information accurate, up to date and complete;
protecting information with appropriate security and destroying or de-identifying it when no longer required;
providing access and correction rights; and
taking reasonable steps before disclosing information overseas to ensure APP-consistent handling.

5. Notifiable Data Breaches scheme

Part IIIC of the Privacy Act establishes the Notifiable Data Breaches (“NDB”) scheme. Where an eligible data breach likely to result in serious harm occurs and cannot be adequately remediated, we will promptly notify affected individuals and the OAIC, and, where the breach affects Customer Data, the relevant Customer under our Data Processing Agreement.

6. Overseas disclosure (APP 8)

We use cloud and technology providers that may process personal information outside Australia. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs, or we rely on another exception permitted under APP 8 and section 16C of the Privacy Act.

7. Access, correction and complaints

You may request access to and correction of your personal information and complain if you believe we have breached the Privacy Act. Contact our Privacy Officer using the details below. If unsatisfied, you may escalate to the OAIC (www.oaic.gov.au; 1300 363 992; GPO Box 5288, Sydney NSW 2001).