Privacy Policy
JD Technology Services Pty Ltd (ABN 32 682 813 305) trading as JD Technology Services
Unit 3, 23–25 South Street, Wodonga VIC 3690
contact@jdtech.com.au | (02) 6088 6520
Version 2.0 | Effective Date: 1 January 2026
1. Introduction
JD Technology Services Pty Ltd (ABN 32 682 813 305) trading as JD Technology Services (JDTech, we, us, our) is committed to protecting the privacy of individuals who interact with our business, use our website, or engage us to provide IT services.
This Privacy Policy explains how we collect, use, store, disclose, and manage personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
2. What Is Personal Information?
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true and whether or not it is recorded in material form.
The types of personal information we collect and hold include:
- Contact details — name, email address, phone number, business address
- Business details — company name, ABN, role or position
- Technical information — IP addresses, device identifiers, system configuration details, and access credentials held in connection with IT services
- Billing and financial information — invoice records, payment history (we do not store full credit card details)
- Communications — emails, support tickets, notes, and records of interactions with JDTech
- Website usage data — pages visited, time on site, browser type, and similar analytics data collected via cookies
We do not intentionally collect sensitive information (such as health information, racial or ethnic origin, or criminal history) unless it is directly relevant to providing a service and you have consented to its collection.
3. How We Collect Personal Information
3.1 Directly from you — when you:
- Complete our new client form or contact us via our website
- Sign a proposal, quote, or service agreement
- Contact us by phone, email, or in person
- Submit a support request through our support portal
- Provide us with access credentials or system information in connection with IT services
3.2 Automatically — when you visit our website, we may collect usage data through cookies and analytics tools. See clause 10 for more information.
3.3 From third parties — in limited circumstances, we may receive personal information from referral partners or from clients who provide us with contact details for their staff or personnel in connection with the delivery of services.
Where practicable, we will only collect personal information directly from the individual concerned. Where we receive personal information about an individual from a third party, we will take reasonable steps to notify that individual in accordance with the APPs.
4. Why We Collect Personal Information
We collect personal information for the following primary purposes:
- To provide IT support, managed services, web design, hosting, and related services
- To communicate with clients and respond to enquiries
- To manage accounts, issue invoices, and process payments
- To onboard new clients and manage ongoing service relationships
- To administer and maintain access to client systems and software
- To meet our legal and regulatory obligations
- To improve our services and website
- To send service updates and, where you have not opted out, marketing communications
We will not use or disclose your personal information for a purpose other than those listed above, or a directly related purpose, without your consent — unless required or permitted by law.
5. Disclosure of Personal Information
5.1 We do not sell, rent, or trade personal information to third parties for their own commercial purposes.
5.2 We may disclose personal information to third parties where necessary to deliver our services or meet our obligations, including:
- Cloud platform and infrastructure providers — who host our systems, store data, or provide services we use to operate (see clause 7 regarding overseas disclosure)
- Software vendors — in connection with software licences provisioned or managed on your behalf
- Subcontractors and service partners — who assist in delivering services under our managed services arrangements. These parties are required to handle personal information in accordance with our confidentiality and privacy standards
- Professional advisers — including legal, accounting, and insurance advisers, under obligations of confidentiality
- Law enforcement and regulatory bodies — where required or authorised by law
5.3 In the event that JDTech is involved in a merger, acquisition, or sale of business assets, personal information may be transferred to the acquiring entity as part of that transaction. We will take reasonable steps to ensure the receiving party maintains appropriate privacy protections.
6. Managed Services — Client Data
6.1 In the course of providing managed IT services, JDTech may access, process, or store data belonging to or relating to our clients and their own customers or personnel (Client Data). We process Client Data solely for the purposes of delivering contracted services.
6.2 Our obligations with respect to Client Data — including data security, retention, destruction, and breach notification — are set out in detail in the relevant Managed Services Agreement. Clients who require specific data handling arrangements, including clients in regulated industries such as healthcare, legal, or financial services, should contact us to discuss appropriate agreements before engagement.
6.3 Clients are responsible for ensuring they have the authority and any necessary consents to provide JDTech with access to data relating to their own customers or personnel.
7. Overseas Disclosure
7.1 JDTech’s primary infrastructure — including web hosting, server infrastructure, and backup storage — is located in Australia. We take active steps to store client and operational data within Australia wherever practicable.
7.2 Some of the third-party tools and platforms we use may process or store data outside Australia. This includes:
- Website analytics — our website uses analytics tools that may transmit usage data (including IP addresses) to servers located overseas. This data is used in aggregate and anonymised form to understand how our website is used. You can opt out of analytics tracking through your browser settings or by using an opt-out mechanism provided by the relevant analytics provider.
- Cloud software platforms — some software we use to operate our business (including support, billing, and communication tools) is hosted by overseas providers. These providers are selected on the basis of their compliance with applicable privacy and security standards.
7.3 Where personal information is disclosed overseas, we take reasonable steps to ensure the recipient handles that information in a manner consistent with the Australian Privacy Principles. By using our services, you acknowledge that some personal information may be disclosed to overseas recipients in the circumstances described in this clause. For clients engaged under a Managed Services Agreement, data handling and overseas disclosure provisions specific to Client Data are governed by that agreement.
8. Data Storage and Security
8.1 We take the security of personal information seriously. JDTech implements and maintains reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:
- Encrypted storage of access credentials and sensitive data
- Role-based access controls limiting access to authorised personnel
- Secure remote access tools for client system management
- Regular system monitoring and security practices
- Industry-standard password management practices
8.2 While we take these steps, no method of transmission or storage is completely secure. We cannot guarantee absolute security of personal information.
8.3 Where personal information is no longer required, we take reasonable steps to destroy or de-identify it in accordance with clause 9.
9. Data Retention and Destruction
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:
- Client contact details — retained for the duration of the client relationship and for a reasonable period after it ends for follow-up and legal purposes, unless you request deletion
- Client contracts and service agreements — retained for 7 years after the client relationship ends
- Financial records — retained for a minimum of 5 years from the date of the relevant transaction, as required by Australian taxation law
- Security logs and incident records — retained for 1 to 3 years depending on the nature of the record
- Employee records — retained for 7 years after the employment relationship ends
- Website analytics data — retained in accordance with the retention policies of the relevant analytics provider
When personal information is no longer required, it is securely deleted or destroyed using industry-standard methods. Physical storage media is securely wiped prior to disposal or destruction.
10. Cookies and Website Analytics
10.1 Our website uses cookies — small files placed on your device — to improve your browsing experience and understand how visitors use our site. Cookies may be session-based (deleted when you close your browser) or persistent (remaining on your device for a set period).
10.2 We use cookies for the following purposes:
- Essential cookies — necessary for the website to function correctly
- Analytics cookies — to collect anonymised data about how visitors use our website, including pages visited, time on site, and device type. This information is used to improve our website and services
- Preference cookies — to remember your settings and preferences
10.3 Our website uses a third-party analytics service to collect and analyse usage data. This service may transfer data to servers located outside Australia. The data collected is used in aggregate and anonymised form and is not used to identify individual visitors. You can opt out of analytics tracking by adjusting your browser settings to refuse cookies, or by using the opt-out mechanism provided by the analytics service.
10.4 Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of some parts of our website.
11. Direct Marketing
11.1 We may use your contact details to send you service updates, follow-up communications, and occasional marketing material about our services. We will only do so in accordance with the Spam Act 2003 (Cth) and the APPs.
11.2 You may opt out of receiving marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email we send; or
- Contacting us directly at contact@jdtech.com.au
11.3 Opting out of marketing communications will not affect the delivery of service-related communications, including invoices, support responses, or notifications relating to your account.
12. Your Privacy Rights
Under the Australian Privacy Principles, you have the right to:
12.1 Access — request access to the personal information we hold about you. We will respond to access requests within a reasonable time and may charge a reasonable fee to cover our costs in providing access.
12.2 Correction — request that we correct personal information we hold about you that is inaccurate, out of date, incomplete, irrelevant, or misleading. We will take reasonable steps to correct information promptly.
12.3 Deletion — request deletion of your personal information where it is no longer required for the purposes for which it was collected, subject to our legal obligations to retain certain records.
12.4 Anonymity — where practicable and lawful, you may interact with us without identifying yourself. However, we may be unable to provide certain services if we cannot identify you.
To exercise any of these rights, please contact us using the details in clause 16. We will respond within 30 days and will explain our decision if we are unable to fulfil a request.
13. Notifiable Data Breaches
JDTech is subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). If we become aware of an eligible data breach — one that is likely to result in serious harm to one or more individuals — we will:
- Contain the breach and assess its nature and scope as quickly as practicable
- Notify affected individuals as soon as practicable, where required by the NDB scheme
- Notify the Office of the Australian Information Commissioner (OAIC) as required
- Take steps to prevent or mitigate further harm
If you believe your personal information held by JDTech may have been compromised, please contact us immediately using the details in clause 16.
14. Complaints
14.1 If you have a concern or complaint about how JDTech has handled your personal information, please contact us in the first instance using the details in clause 16. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
14.2 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The current version will always be available at jdtech.com.au/privacy-policy/ and will display the effective date of the most recent update.
Where changes are material, we will take reasonable steps to notify affected individuals before the changes take effect. Your continued use of our services or website after the effective date of any update constitutes acceptance of the revised policy.
16. Contact Us
For any privacy-related enquiries, access or correction requests, or complaints, please contact us:
JD Technology Services Pty Ltd
Unit 3, 23–25 South Street, Wodonga VIC 3690
Email: contact@jdtech.com.au
Phone: (02) 6088 6520
Website: jdtech.com.au
JD Technology Services Pty Ltd (ABN 32 682 813 305) trading as JD Technology Services
contact@jdtech.com.au | (02) 6088 6520 | jdtech.com.au