Privacy Policy
Tan Ninety Pty Ltd | Effective Date: Jan-2025
1. OUTLINE
1.1 This Privacy Policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It describes how Tan Ninety Pty Ltd (ABN 50148918576) collects, holds, uses, and discloses personal information in connection with its provision of the 1TASK platform and related services.
1.2 Amendment: We may modify this Privacy Policy at any time.
-
1.2.1 Updates will be published on our website at www.1task.com.au/privacy
-
1.2.2 By continuing to use our products or services, you accept the updated policy.
2. PURPOSE
2.1 Primary and Secondary Purposes
We collect, hold, use, and disclose your personal information for the following purposes:
-
To deliver our products and services to you, including preparing and issuing relevant documents (such as account credentials, onboarding material, and user agreements), managing billing and processing transactions, and collecting any amounts owed to us. This is done to fulfil our contractual obligations to you, comply with legal requirements, and for our legitimate interests such as ensuring timely payment.
-
To provide information about our products and services, both those you have requested and others we reasonably believe may interest you. This supports the delivery of contracted services and the continuous improvement of user experience and value.
-
To personalise and enhance your experience with our platform, including remembering your preferences, presenting relevant functionality, and tailoring interactions to your profile. This enables better user engagement and performance of our contractual obligations to you.
-
To support warranty or service obligations, including identifying and resolving issues reported in connection with our platform. This use is based on contractual duties and compliance with applicable laws.
-
To monitor and improve our offerings, by analysing trends and usage data to develop insights, enhance platform features, generate internal reports, and guide business strategy. These activities are in our legitimate interest as a technology provider aiming to optimise delivery and growth.
-
To communicate with you directly, including via email, phone, SMS, in-app messaging, or other means to deliver updates, system notifications, or support responses. This may relate to customer service, system updates, or other service matters.
-
To administer your account, including processing payments, sending reminders or confirmations, and maintaining account records. This helps us comply with billing standards and facilitates smooth delivery of services.
-
To manage complaints or investigate suspected breaches, including verifying your identity, reviewing relevant transactions or interactions, and conducting internal investigations if necessary. This is necessary to maintain service integrity and fulfil legal obligations.
-
To comply with applicable laws and regulations, including those relating to data retention, access, and disclosure, and to protect our rights and operations.
These purposes form the legal and practical foundation for our handling of personal information. Your information is only used or disclosed where we are permitted or required by law, where it is reasonably necessary to achieve one or more of the above purposes, or where you have provided your consent.
3. WHAT WE COLLECT
3.1 Personal information includes:
-
Name, contact details, user credentials
-
Billing and transaction details
-
Device and usage data
-
Employment and role-based identifiers
-
Communications preferences
3.2 Sensitive information (e.g. biometric or health data) will only be collected with your express consent or when voluntarily submitted.
4. HOW WE COLLECT
4.1 We may collect personal information:
-
Via online forms or sign-ups
-
Through customer support or platform interactions
-
From publicly available sources or referrals
-
Through direct or third-party communications
-
From use of the 1TASK platform
4.2 Where we collect information from others about you, we will take reasonable steps to notify you.
4.3 If you provide third-party data to us (e.g. team member or client info), you confirm you have their consent.
4.4 Unsolicited personal information will be securely destroyed if not legally required.
4.5 We support anonymous use where practicable. However, identification may be necessary for legal or practical reasons.
4.6 We will destroy or de-identify personal information once it is no longer required or at your written request (unless retention is required by law).
5. USE
5.1 We use your information:
-
For Primary and Secondary Purposes (see Section 2)
-
As otherwise consented to
-
Only for purposes you would reasonably expect
5.2 We do not sell, rent, or trade personal data.
5.3 Direct marketing: You can opt in or out anytime:
-
During signup
-
Via unsubscribe links in emails
-
By contacting us directly
6. DISCLOSURE
6.1 We may disclose personal information to:
-
Service providers (e.g. IT, hosting, analytics, customer support)
-
Related bodies corporate
-
Legal, financial, or compliance advisors
-
Regulators and authorities as required
-
Third parties authorised by you
-
Entities in the event of company acquisition or restructuring
6.2 Overseas disclosures may occur where required (e.g. cloud storage, platform hosts). While we take steps to protect your data, you acknowledge that overseas recipients may not be subject to the Privacy Act.
6.3 If you are located in the EU, we will take steps to comply with the GDPR Articles 45–49 when applicable.
7. ACCESS AND CORRECTION
7.1 You may request access to or correction of your personal information at any time. We may ask for identity verification.
7.2 We may decline requests if:
-
Required by law
-
The request impacts others’ privacy
-
The information is subject to legal privilege or commercially sensitive
7.3 If access or correction is denied, we will explain why and provide dispute options.
7.4 EU users may request restrictions in line with GDPR Article 18. This may impact service delivery.
8. SECURITY
8.1 We take reasonable steps to:
-
Keep your information accurate and current
-
Prevent unauthorised access, misuse, or loss
8.2 We use secure servers, access controls, and encryption where appropriate.
8.3 If you suspect a data breach, contact us immediately.
9. DATA BREACHES
9.1 We comply with the Notifiable Data Breaches scheme under the Privacy Act.
9.2 If an eligible data breach occurs, we will:
-
Assess the incident
-
Notify affected individuals and the OAIC
-
Publish a statement where required
10. COMPLAINTS
10.1 To lodge a privacy complaint, contact us using the details below.
10.2 We may:
-
Request more information
-
Investigate and engage relevant personnel
-
Provide a formal response within 14 days
10.3 If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
11. CONTACT
Privacy Officer
Tan Ninety Pty Ltd
info at tanninety dot com dot au