Privacy Policy
This policy explains how Innoca Tech Pty Ltd ("Innoca Tech", "HEC", "we", "us") manages personal information. It is separate from our Consumer Data Right Policy, which applies to CDR data.
1. Information we collect
Depending on how you interact with us, we may collect:
- name, business name, email, telephone number and contact details;
- project, property, drawing, document and service information;
- quotes, invoices, payment status and commercial records;
- communications with us, including email and portal messages;
- account, authentication, audit and security information;
- website and service usage information reasonably required to operate, secure and improve our services.
2. How we collect information
We collect information directly from you, from people acting for your organisation, through our website and portal, through connected services you authorise, and from public or business sources where reasonably necessary for our services.
3. Why we use information
We use personal information to provide and administer our services; prepare quotes and invoices; deliver projects; communicate with clients; operate our portal and connected workflows; manage payments; maintain business records; improve service quality; prevent misuse and security incidents; and comply with legal obligations.
4. Disclosure
We may disclose information to service providers that help us operate our business, such as hosting, email, document storage, payment, accounting, communications and technology providers, and to professional advisers or authorities where required by law. We do not sell personal information.
5. Overseas handling
Some non-CDR service providers may operate infrastructure or support services outside Australia. Where this occurs, we take reasonable steps appropriate to the service and information involved. CDR data is handled under the separate Consumer Data Right Policy and is subject to stricter controls.
6. Security
We use technical and organisational controls designed to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. Controls include access restrictions, authentication, logging, network security, backups, patching and security review appropriate to the system.
7. Retention
We retain information only for as long as reasonably required for the purpose for which it was collected, legal and contractual obligations, dispute resolution, security and legitimate business record-keeping. Information is deleted or de-identified when it is no longer reasonably required, subject to lawful retention requirements.
8. Access and correction
You may ask us for access to personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. We may need to verify your identity before acting on a request.
9. Complaints
If you have a privacy concern, contact us with your name, contact details and enough information to understand the issue. We will acknowledge the complaint promptly, investigate it fairly and provide a response within a reasonable period. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
10. Contact
Privacy Contact — Innoca Tech Pty Ltd / House Energy Certified
Email: paul@houseenergycertified.com
Phone: 02 9130 2898
11. Review
We review this policy at least annually and when our information practices or legal obligations materially change.