PRIVACY POLICY

Last updated: October 2026

Citilink Technology respects the privacy of individuals and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store and disclose personal information when you interact with Citilink Technology, including through our website, enquiries and provision of technology services.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The Privacy Act applies to certain Australian organisations, including organisations above the relevant turnover threshold and some organisations that are covered regardless of turnover.

1. What Personal Information We May Collect

The personal information we collect will depend on how you interact with us.

It may include:

  • your name

  • business or organisation name

  • job title or role

  • email address

  • telephone number

  • business contact details

  • information submitted through website enquiry forms

  • details about your IT environment or technology requirements

  • correspondence and communications with us

  • billing, account or administrative information

  • information required to provide technical support or technology services

  • website usage, device, browser and technical information.

Where necessary for the provision of services, we may also encounter or access information held within systems belonging to our business clients.

We only seek to collect personal information that is reasonably necessary for our business activities and service delivery.

2. How We Collect Personal Information

We may collect personal information directly from you when you:

  • submit an enquiry through our website

  • contact us by telephone or email

  • request a quotation or consultation

  • become a client

  • engage us to provide IT or technology services

  • communicate with us in relation to technical support

  • otherwise provide information to us.

We may also receive information from:

  • your employer or organisation

  • authorised representatives

  • technology vendors and service providers

  • referrals

  • business partners

  • third-party systems used in connection with our services

  • publicly available sources, where appropriate.

Our website may also automatically collect limited technical information through cookies, analytics tools and similar technologies.

3. How We Use Personal Information

We may use personal information to:

  • respond to enquiries

  • assess your business or technology requirements

  • provide quotations, proposals and service information

  • deliver and manage IT services

  • provide technical support

  • administer client accounts

  • communicate about projects, support requests or ongoing services

  • manage billing and business records

  • maintain and improve our website and services

  • monitor security and protect our systems

  • manage relationships with clients, vendors and suppliers

  • comply with legal, regulatory or contractual obligations

  • send service communications and, where permitted, relevant business or marketing communications.

4. Client Systems And Technical Access

As an IT service provider, Citilink Technology may require authorised access to client devices, networks, Microsoft 365 environments, cloud platforms, servers, applications or other systems in order to provide agreed services.

In performing those services, we may incidentally encounter personal information belonging to our clients, their employees, customers or other individuals.

Where this occurs, we will only access or use that information as reasonably necessary to provide the authorised services, meet our contractual obligations, maintain security or comply with applicable law.

The client remains responsible for ensuring it has the appropriate authority to provide Citilink Technology with access to its systems and information.

5. Disclosure Of Personal Information

We may disclose personal information where reasonably necessary to:

  • provide requested services

  • work with technology vendors or service providers

  • administer cloud, software, backup or security platforms

  • process business administration or billing

  • obtain professional advice

  • comply with legal requirements

  • protect our legal rights, systems or security

  • respond to lawful requests from courts, regulators or government authorities.

We do not sell personal information.

6. Third-Party And Cloud Service Providers

Citilink Technology uses third-party technology and business service providers in operating our business and delivering services.

These may include providers of:

  • website hosting

  • cloud services

  • Microsoft 365 services

  • email

  • data storage

  • backup

  • security platforms

  • remote support tools

  • accounting or administration systems

  • analytics and website services.

Some providers may store or process information outside Australia.

Where the Australian Privacy Principles apply and personal information is disclosed to an overseas recipient, APP 8 may require reasonable steps to ensure that the overseas recipient handles that information consistently with the APPs, subject to applicable exceptions.

Because the location of cloud infrastructure and sub-processors can change, the countries in which information is processed may depend on the particular platform or service being used.

7. Cookies And Website Analytics

Our website may use cookies and similar technologies to support website functionality, understand how visitors use the website and improve website performance.

These technologies may collect information such as:

  • browser type

  • device type

  • pages visited

  • time spent on the website

  • referring website

  • general usage and technical information.

You can generally control or disable cookies through your browser settings. However, disabling some cookies may affect the way the website functions.

8. Direct Marketing

Where permitted by law, we may use contact information to communicate with existing or prospective clients about Citilink Technology services that may be relevant to them.

Where marketing electronic messages are sent, Australian spam laws generally require consent, identification of the sender and a functional unsubscribe option.

You may opt out of marketing communications at any time by using the unsubscribe function provided or contacting us directly.

Service-related and administrative communications may still be sent where required.

9. How We Protect Personal Information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

Depending on the circumstances, these measures may include administrative, technical and physical safeguards.

Because no online system or technology environment is completely risk-free, we cannot guarantee absolute security of information transmitted or stored electronically.

10. Data Breaches

Where applicable, Citilink Technology will assess and respond to eligible data breaches in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

The NDB scheme applies to entities subject to relevant Privacy Act obligations and can require notification where an eligible data breach is likely to result in serious harm.

11. Retention Of Personal Information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain appropriate business records and comply with legal or contractual obligations.

When personal information is no longer reasonably required, we may take appropriate steps to securely destroy or de-identify it, subject to legal and operational requirements.

12. Access And Correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

Requests can be made using the contact details below.

We may need to verify your identity before providing access or making changes.

In some circumstances, applicable law may permit or require us to decline access. If this occurs, we will provide an explanation where required.

The APPs specifically address access to and correction of personal information.

13. Privacy Enquiries And Complaints

If you have a question or concern about how we handle personal information, please contact us using the details below.

We will review your enquiry or complaint and aim to respond within a reasonable period.

If you are not satisfied with our response and the Privacy Act applies, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC).

14. Third-Party Websites

Our website may contain links to third-party websites.

Citilink Technology is not responsible for the privacy practices or content of those websites. You should review the relevant privacy policy before providing personal information to a third-party service.

15. Changes To This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, business practices or legal obligations.

The current version will be published on our website with the date of the latest update.

The OAIC recommends keeping an APP Privacy Policy clearly expressed, current and reflective of actual information-handling practices.

16. Contact Us

For questions, privacy enquiries, access or correction requests, or complaints, please contact:

Citilink Technology
Website: www.citilinktechnology.com.au