Privacy Policy

Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, phone number, and organisation details
• Communication Records: Details of your inquiries, consultations, and correspondence with us
• Technical Information: IP address, browser type, and website usage data collected through standard web analytics
• Professional Information: Information about your organisation, services, and operational needs relevant to our consulting services

How We Use Your Information

We use your information to:

• Respond to your inquiries and provide requested information
• Deliver consulting services and support
• Communicate with you about our services and relevant updates
• Improve our website and services
• Comply with legal and regulatory obligations

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• With trusted service providers who assist in operating our business (under strict confidentiality agreements)
• When required by law or to protect our legal rights
• Within the Mitr Companies Pty Ltd group of companies when relevant to providing you with services

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Where Your Information Is Stored

This website runs on the Base44 platform, which stores application data in the United States by default and may use subprocessors in other countries. Information you submit through our forms may therefore be stored or processed outside Australia. We take reasonable steps under APP 8.1 to ensure overseas providers handle personal information consistently with the APPs.

Notifiable Data Breaches

If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the OAIC under Part IIIC of the Privacy Act 1988 (Cth).

Your Rights

Under Australian privacy law, you have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Opt-out of marketing communications
• Lodge a complaint about our handling of your information

Complaints

If you believe we have mishandled your personal information, please email hello@mitram.com.au. We will acknowledge your complaint within 5 business days and respond in writing within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

Cookies and Analytics

Our website uses two categories of cookies:

• Essential cookies: Required for the website to function correctly, such as maintaining your session. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site so we can improve it. These are only used if enabled and you can control them through your browser preferences.

You can manage or disable non-essential cookies through your browser settings at any time.

Direct Marketing

With your consent, we may send you emails about our services and updates relevant to the NDIS sector. You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting hello@mitram.com.au. We comply with the Spam Act 2003 (Cth) and only send commercial electronic messages with your consent.

Retention of Information

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is typically retained for up to 24 months after your last interaction. Information collected as part of a consulting engagement is retained for the duration of the engagement and for seven years thereafter for record-keeping and legal compliance purposes. You may request deletion of your information at any time, subject to our legal obligations.

Children Under 18

Our website and services are directed at organisations and professionals in the NDIS and community services sector. We do not knowingly collect personal information from children under 18 years of age. If you believe a child has provided us with personal information, please contact us at hello@mitram.com.au and we will take steps to delete that information.

NDIS Participant Information

This website does not collect NDIS participant health records, NDIS numbers, or any personal information about NDIS participants. If you are an NDIS participant or their representative, please contact your service provider directly. Any participant-related information handled during a consulting engagement is managed under a separate agreement and in accordance with applicable NDIS quality and safeguarding requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.