Your information, handled properly
Last reviewed: January 2026. Written to the Australian Privacy Principles (APPs) under the Privacy Act 1988.
1. Who we are
Zeeflex IT Solutions (ABN registered, Hobart, Tasmania) is an 'applicable entity' under the Privacy Act 1988 (Cth). This policy explains how we handle personal information in line with the Australian Privacy Principles (APPs).
2. What we collect
Contact details you give us (name, email, phone, address) when you enquire, book or register an account; account credentials (never stored in plain text — passwords are stored as bcrypt hashes with 12 salt rounds); service records we create while supporting you (tickets, notes, times); and, for website visits, hashed (SHA-256) IP addresses for audit and security logs. We do not collect sensitive information unless you provide it for a specific service.
3. Why we collect it
To deliver the services you book; to respond to enquiries; to keep records we're required to keep; and, only where you've consented, to send you our newsletter and offers. We don't sell personal information, and we don't share it with third parties except where delivery of a service requires it (for example, a parts supplier for a repair) or the law requires it.
4. Marketing & the Spam Act 2003
We only send marketing to people who have opted in — you'll see a consent checkbox wherever we ask for your email, and we record it. Every marketing email includes a working unsubscribe link, and unsubscribing takes effect immediately. You can also ask us to stop marketing at any time by emailing [email protected].
5. Security of your information
Access to customer data is limited to staff who need it; systems are MFA-protected and patched under our own policies; data is stored in Australia; and deleted equipment is destroyed with certificates. We treat the security of client data with the same standard we sell — it's the baseline, not an add-on.
6. Access, correction and deletion
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. To make a request, email [email protected] or use the data deletion request form in your portal's security settings. We respond to access requests within 30 days as the Privacy Act requires. Some records (e.g. financial records, audit logs) must be kept for legal reasons; where we can't delete, we'll tell you why and isolate the data.
7. Complaints
If you're unhappy with how we've handled your information, talk to us first — email [email protected] and we'll investigate promptly. If it isn't resolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Policy changes
We'll notify registered users of material changes to this policy by email and publish the updated version on this page with a review date.