Privacy Policy

Last updated: 23 May 2026

Planfix IT Consultancy is the trading name of KITE UNION PTY LTD (ABN 83 612 596 291) ("Planfix", "we", "us", "our"). We respect your privacy and are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

We collect the following types of personal information:

• Identity and contact details (name, email, phone, company name, role)
• Engagement-related information you provide via discovery call forms, contact forms or email - including descriptions of your business challenge, current technology stack and intended outcomes
• Technical information collected automatically - IP address, browser, device, pages viewed, referrer
• Marketing attribution data (UTM parameters and click identifiers) where you arrive from a marketing campaign

We do not seek to collect sensitive information (as defined in the Privacy Act) and ask that you do not include such information in form submissions. If sensitive information is genuinely relevant to an engagement, we will agree in writing how it should be shared and protected.

2. How we collect it

We collect personal information directly from you when you submit a web form, email us, call us, or engage us for consulting services. We collect technical information automatically through Google Analytics and standard server logs. We may also receive information about you from publicly available sources (such as ASIC, ABR or your company's public website) where relevant to scoping an engagement.

3. Why we collect it

We use the information to:

• Respond to enquiries and deliver consultancy services
• Issue and reconcile invoices and meet tax record-keeping obligations
• Improve our website and understand which marketing channels are effective
• Send service-related communications (e.g. engagement updates, invoices)
• Send marketing communications where you have consented or where the law otherwise permits
• Comply with legal obligations (tax records, ABR, anti-spam, anti-money laundering reporting, etc.)

4. Cookies and analytics

We use cookies for two purposes: (a) to remember your consent to our terms, and (b) to record marketing attribution so we know which campaigns are working. We also use Google Analytics 4 to understand aggregate site usage; Google Analytics is a service provided by Google LLC (United States) - see section 6 (Overseas disclosure). You can clear cookies through your browser settings at any time, and opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

5. Disclosure

We do not sell your personal information. We may disclose it to:

• Service providers who help us operate the website or the business (email, hosting, analytics, CRM, invoicing)
• Our sister software development practice, Kite Union, where an engagement requires build-side delivery
• Professional advisors (accountants, lawyers, auditors)
• Government bodies and law enforcement where required by law (including the Australian Taxation Office and, where applicable, the Australian Cyber Security Centre)
• A successor entity in the event of a sale, merger or restructure of the business, on terms that require the recipient to honour this Privacy Policy

6. Overseas disclosure (APP 8)

Some of our service providers store or process personal information outside Australia. In particular, Google Analytics (United States) and our transactional email provider may process information overseas. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles the information consistently with the Australian Privacy Principles, including by relying on contractual protections offered by the provider.

7. Storage and security

We store personal information on cloud infrastructure operated by reputable providers, primarily located in Australia. Some technical processing (notably analytics aggregation) occurs in the United States as described in section 6. We apply reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure - including TLS encryption in transit, access controls and the principle of least privilege.

8. Data retention

We retain personal information for as long as it is needed for the purposes set out in section 3, and to comply with legal obligations. As guidance:

• Engagement records and tax records: at least seven years from the end of the engagement (Australian Taxation Office requirement)
• Discovery call enquiries that do not progress to an engagement: up to two years, then deleted or de-identified
• Marketing list entries: until you unsubscribe, then retained on a suppression list to honour the unsubscribe
• Website analytics: anonymised after the standard retention period configured in Google Analytics

9. Access and correction

You have a right under the Privacy Act to request access to, and correction of, the personal information we hold about you. To make a request, email info@planfix.au. We will respond within 30 days. In some cases we may need to verify your identity before releasing information, and we may charge a reasonable fee for processing large or complex requests.

10. Marketing communications

We only send marketing communications in accordance with the Spam Act 2003 (Cth) - to people who have consented, or whose existing business relationship with us makes the communication relevant and expected. Every marketing email includes a clear unsubscribe link, and we action unsubscribe requests within five business days. You can also unsubscribe at any time by emailing info@planfix.au.

11. Complaints

If you believe we have breached the Australian Privacy Principles, please contact us at info@planfix.au. We will acknowledge your complaint within five business days and provide a substantive response within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

12. Children

Our services are directed at businesses and business representatives. We do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

13. Updates

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page indicates when the most recent change was made. Material changes will be highlighted on the website.

14. Contact

Planfix IT Consultancy
KITE UNION PTY LTD
ABN 83 612 596 291
PO Box 1403
North Ryde NSW 2113
Australia
info@planfix.au
+61 (04) 3283 3024