Privacy Policy

Effective Date: 12 March 2025

Last Updated: 12 August 2026

​

Arafura Data (referred to as "we", "our" or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information and how we manage that information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where they apply.

​

This Privacy Policy applies to personal information collected through the Arafura Data website, our consultancy and other services, and our Microsoft cloud services where we provide users with access to systems such as Microsoft Entra ID and Power BI.

​

1. Information We Collect

We may collect and hold the following types of personal information when you interact with Arafura Data or use our services:

​

Personal and contact information:
Name, email address, telephone number, job title, organisation, business details and other contact information.

​

Account and access information:
Where we provide access to our systems or services, including Microsoft Entra ID, Microsoft 365 or Power BI, we may collect information such as your name, email address, organisation, user account information, user type, access permissions and information relating to authentication and system access.

 

Financial information:
Billing and payment information, including billing address, transaction details and information required to issue invoices and process payments.

​

Website usage information:
Information such as IP address, browser type, device information, pages visited, time spent on our website and other information collected through cookies and analytics tools.

​

Information provided to us in the course of our services:
Information you provide to us when engaging Arafura Data for consultancy, data analysis, reporting, training or other services.

​

We do not generally seek to collect sensitive information unless it is reasonably necessary for a particular service and is collected and handled in accordance with applicable privacy laws.

​​​

2. How We Collect Personal Information

​

We may collect personal information:

​

• directly from you when you contact us, engage our services, complete a form or otherwise communicate with us;

• from your organisation where it engages Arafura Data to provide services;

• when you are provided with access to our Microsoft cloud services or other systems;

• through our website, including through cookies and analytics technologies;

• from third-party service providers where reasonably necessary to provide our services; and

• from publicly available sources where appropriate for our business activities.

​

Where practicable, we will collect personal information directly from the individual to whom it relates.

​​

3. How We Use Personal Information

​

We may collect, hold and use personal information for purposes including: ​

• providing consultancy services, including data analysis, reporting, business intelligence and strategic insights;

• providing and administering access to our services, including Microsoft Power BI and Microsoft Entra ID;

• authenticating users and managing user permissions and security;

• communicating with you and responding to enquiries;

• managing client relationships and accounts;

• processing transactions, issuing invoices and providing related support;

• improving our services, website functionality and user experience;

• maintaining the security and integrity of our systems;

• complying with legal and regulatory obligations; and

• resolving disputes and managing complaints.

​

​

We will generally only use or disclose personal information for the purpose for which it was collected or for a related purpose that would reasonably be expected, unless otherwise permitted or required by law.

​

4. Microsoft Cloud Services and External Users

Arafura Data uses Microsoft cloud services, including Microsoft Entra ID and Microsoft Power BI, to provide and administer certain services.

 

Where you are given access to an Arafura Data Microsoft environment, including as an external or guest user, we may collect and hold information such as your name, email address, organisation, account information, access permissions and information relating to your use of the relevant service.

 

This information may be used to:

• establish and manage your user account;

• authenticate your identity;

• provide access to authorised services and information;

• manage and review access permissions;

• maintain system security;

• investigate and respond to security or access issues; and

• administer and support the services provided to you.

​​

Access to Arafura Data systems is controlled through appropriate permissions and access management arrangements.

​

5. Sharing and Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary to provide our services or conduct our business.

​

These third parties may include:

​

• technology and cloud service providers;

• payment processors and financial service providers;

• website hosting and analytics providers;

• professional advisers, including accountants, lawyers and other consultants;

• contractors or service providers engaged by Arafura Data; and

• government agencies, regulators or other parties where disclosure is required or authorised by law.

​​

​

Where we engage third-party service providers to process personal information on our behalf, we take reasonable steps to ensure that appropriate privacy and security arrangements are in place.

​

We will not sell personal information to third parties.

​

6. Overseas Disclosure and Processing

Some of the technology, cloud, website, analytics and other service providers used by Arafura Data may process or store information outside Australia.

​

Where personal information is disclosed to an overseas recipient, Arafura Data will take reasonable steps to ensure that the information is handled in accordance with applicable Australian privacy requirements.

 

The location in which information is processed or stored may vary depending on the service provider and the services being used. Where practicable, relevant information about overseas recipients and their locations will be provided or made available through the applicable service provider's privacy and data-processing documentation.

​

7. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

​

Depending on the circumstances, security measures may include access controls, authentication mechanisms, encryption, secure cloud services, password protection, system permissions and other technical and organisational safeguards.

 

No method of transmission over the internet or electronic storage is completely secure.

While we take reasonable measures to protect personal information, we cannot guarantee the absolute security of information transmitted to or stored by us.

​​

8. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve website functionality, understand how visitors use our website and analyse website traffic.

​

Cookies are small files stored on your device that allow a website to recognise your device and, depending on their purpose, remember certain preferences or information.

​

You may be able to disable cookies through your browser settings. Disabling cookies may affect some website functionality.

​

Third-party analytics or website service providers may also collect information about website usage in accordance with their own privacy policies.

​

9. Access and Correction

You may request access to personal information that Arafura Data holds about you and request that we correct information that is inaccurate, incomplete or out of date.

​

Requests for access or correction should be made using the contact details provided in Section 12 of this Privacy Policy.

​

We will respond to requests in accordance with applicable privacy laws.

​

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide our services, to meet legal, accounting or regulatory requirements, or for other legitimate business purposes.

​

When personal information is no longer required, we will take reasonable steps to securely delete or de-identify it, where practicable and appropriate.

​

11. Privacy Complaints

If you believe that Arafura Data has mishandled your personal information or has not complied with applicable privacy obligations, you may make a complaint to us.

​

Complaints should be made in writing to info@arafuradata.com and should provide sufficient information for us to investigate the matter.

 

We will acknowledge and investigate privacy complaints and will provide a response within a reasonable period, generally within 30 days where practicable.

 

If you are not satisfied with our response, or if your complaint is not resolved, you may contact the Office of the Australian Information Commissioner (OAIC).

 

Information about making a privacy complaint to the OAIC is available from the OAIC website.

​

12. Contact Us

If you have any questions about this Privacy Policy, wish to request access to or correction of your personal information, or wish to make a privacy complaint, please contact us:

​

Arafura Data
PO Box 38495
Winnellie NT 0821
Australia

 

Email: info@arafuradata.com
Website: www.arafuradata.com

​​

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or applicable privacy requirements.

​

The current version will be published on the Arafura Data website and will include the date it was last updated.

​

We encourage you to review this Privacy Policy periodically to remain informed about how Arafura Data manages personal information.

​