Privacy Policy

01About this policy

This policy explains how Applecart Digital collects, uses, stores and discloses personal information. Applecart Digital is a trading name of Apple Cart Investments Pty Ltd (ABN 16 618 439 357), a Microsoft 365 consultancy based in Brisbane, Australia. In this policy, "we", "us" and "our" refer to Applecart Digital.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to our website, our enquiry and demo forms, our client Service Desk and the way we deal with clients, prospective clients, suppliers and other contacts.

02What we collect

The information we collect depends on how you deal with us. It may include:

• Contact details such as your name, job title, organisation, email address and phone number.
• Enquiry details you give us through our contact form, by email, phone, Microsoft Teams or in meetings.
• Demo and booking details when you request an Applecart DMS demo or book a call through Microsoft Bookings, including when you open the personal demo link we email to you.
• Service Desk details for client staff who log in to raise requests, including login details and the content of requests.
• Business and billing details needed to quote, deliver and invoice our services.
• Website usage information such as your IP address, browser and device type, pages visited and referring site, collected through cookies and similar technologies.

We don't ask for sensitive information (such as health or racial information) and ask that you don't send it to us. You can generally deal with us without identifying yourself, for example when browsing our website, but we will need your details to respond to an enquiry or provide services.

03How we collect it

We collect most personal information directly from you, for example when you fill in a form on our website, request a demo, book a meeting, email or call us, or engage us for a project.

We may also collect it from your colleagues or organisation (for example when a client nominates project contacts), from publicly available sources such as LinkedIn and company websites, from referrals, and automatically through our website.

04How we use it

We use personal information to:

• respond to enquiries and provide information you ask for;
• send you demo links and arrange meetings;
• scope, quote, deliver and support our services, including through our Service Desk;
• manage our client relationships, accounts and invoicing;
• send you relevant updates, articles and offers, where you have agreed to receive them or would reasonably expect them;
• understand how our website is used and improve it;
• keep our website and systems secure and prevent spam and misuse; and
• meet our legal and regulatory obligations.

We don't use personal information for automated decision-making that has a significant effect on you.

05Client data in your Microsoft 365

When we work in a client's Microsoft 365 or other systems, we may be able to see personal information that belongs to that client, such as staff details, documents and records. We handle that information only to deliver the services we've been engaged for, on the client's instructions, and treat it as the client's confidential information.

That information stays in the client's own environment and is governed by the client's privacy policy and our agreement with them. If you are a client's employee or customer and have a question about that information, please contact the organisation concerned first.

06Marketing

We may send you emails about our services, articles and events. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time using the contact details below. We comply with the Spam Act 2003 (Cth).

We use LinkedIn to share news and articles. We don't use Facebook or other social networks for marketing.

07Cookies and analytics

Our website uses cookies and similar technologies. You can block or delete cookies in your browser settings, although some parts of the site may not work as intended.

08Who we share it with

We don't sell, rent or trade personal information. We share it only where needed to run our business and deliver our services, with:

• Technology providers we use to operate, including Microsoft (Microsoft 365, Teams and Bookings), Pantheon (website hosting), Brevo (website email delivery), Google (analytics and maps), Mailchimp (marketing email) and our accounting and project management systems;
• Subcontractors who help us deliver a project, who are bound by confidentiality obligations;
• Professional advisers such as our accountants, auditors, insurers and lawyers; and
• Others where required or allowed by law, for example to a government agency or court.

09Overseas disclosure

Some of our service providers store or process information outside Australia, mainly in the United States and the European Union. Where we use Microsoft services, we choose Australian data locations where they're available.

We take reasonable steps to make sure overseas providers handle personal information in a way that is consistent with the Australian Privacy Principles.

10Storage and security

We store personal information mainly in our Microsoft 365 environment and in the business systems listed above. We protect it with measures such as multi-factor authentication, role-based access, encryption provided by our platforms, and keeping access limited to people who need it.

We keep personal information only for as long as we need it for the purposes in this policy or to meet legal and record-keeping obligations. After that, we delete or de-identify it.

11Data breaches

If we become aware of a data breach that is likely to result in serious harm, we will act quickly to contain it, assess it and, where required, notify affected people and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

12Access and correction

You can ask to see the personal information we hold about you and ask us to correct it if it's inaccurate, out of date or incomplete. You can also ask us to delete it where we no longer need to keep it.

Contact us using the details below. We'll respond within 30 days and won't charge you for making a request. If we can't give you access or make a correction, we'll explain why in writing.

13Complaints

If you have a concern about how we've handled your personal information, please contact our Privacy Officer first. We'll acknowledge your complaint promptly and aim to resolve it within 30 days.

If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

14LinkedIn integration

We use an integration with LinkedIn to publish content to the Applecart Digital LinkedIn Company Page. How that integration handles information is explained in our LinkedIn integration privacy policy.

15Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

16Contact us