Elevia homeLog in

Privacy Policy

Last updated: 28 July 2026

1. Introduction

1.1. Elevia Group Pty Ltd (ACN 673 635 320) ("Elevia", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, store, share, and disclose your personal information in connection with our hosted solution and related implementation, subscription, and managed services, as well as via our website and related online interactions (collectively, the "Services").

1.2. This Privacy Policy is designed to comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and should be read in conjunction with our Website Terms and Conditions. By using our Services or accessing our website, you acknowledge that you have read and understood this Privacy Policy and the collection, use, and disclosure of your personal information as described in it. Where the law requires your consent, such as for direct marketing or sensitive information, we obtain it separately.

1.3. Where we process personal information contained in client data in the course of delivering the Services, we do so on behalf of the relevant client and in accordance with our agreement with that client.

2. Personal Information We Collect

2.1. Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined in the Privacy Act 1988 (Cth). The types of personal information we may collect include:

  1. Identification and contact details: your full name, mailing address, email address, telephone number(s), date of birth, gender, and, where applicable, your professional role and company details.
  2. Billing and payment information: billing details such as your ABN, credit or debit card information processed securely via our payment service providers, and any other information required to manage invoicing.
  3. Technical information: IP address, browser type, device information, operating system, screen resolution, and other similar data collected automatically when you access our website.
  4. Usage data: information regarding your interactions with our website and Services, including pages viewed, session information, and statistics, to help us monitor and improve our Services.
  5. Communication data: records of your correspondence with us, whether by email, telephone, or other means.
  6. User-provided content and feedback: any content you choose to provide on our website, for example via surveys, contact forms, or other interactive features, including any comments, queries, or feedback.

2.2. We do not generally collect sensitive information as defined in the Privacy Act 1988 (Cth), which includes, for example, details relating to racial or ethnic origin, political opinions, or health. If sensitive information is required for a specific purpose, we will only collect it with your express consent or as otherwise authorised by law. We ask that you do not provide sensitive information unless we expressly request it.

3. How We Collect Personal Information

3.1. We collect personal information through various channels, including:

  1. Direct interactions: when you contact us via email, telephone, post, or in person during meetings or consultations, and when you complete forms on our website.
  2. Automated technologies: as you interact with our website, we may automatically collect technical and usage data via cookies and other tracking technologies.
  3. Third parties and public sources: we may receive personal information from third parties, such as business partners or public sources, to verify or supplement the information you provide.

4. Purpose of Collection and Use of Personal Information

4.1. We use your personal information for purposes directly related to the provision and improvement of our Services. These purposes include, but are not limited to:

  1. Provision of Services: to deliver, manage, and improve our Services and tailor them to your business requirements.
  2. Improving our website and Services: analysing website usage, enhancing functionality and performance, and developing new service features.
  3. Client relationship management: to communicate with you regarding our Services, respond to enquiries, and provide customer support.
  4. Administrative and legal purposes: to process payments, manage accounts, comply with legal obligations, conduct audits, and resolve disputes.
  5. Marketing and communications: to inform you about our Services, updates, or events that may be of interest to you. We will obtain your consent before sending any direct marketing communications.
  6. Security and fraud prevention: to verify your identity, protect against unauthorised access, and prevent fraud or other harmful activities.

4.2. We will only use or disclose your personal information for the primary purposes for which it was collected or for secondary purposes if:

  1. you have consented to the use or disclosure;
  2. you would reasonably expect such use or disclosure in relation to the primary purpose; or
  3. the use or disclosure is required or authorised by law.

5. Disclosure of Personal Information

5.1. We may disclose your personal information to:

  1. Our employees, consultants, and service providers: who require the information to provide or support our Services. These parties are contractually bound to handle your personal information securely and confidentially.
  2. Regulatory and government authorities: as required by law, regulation, or legal process.
  3. Other third parties: with your consent, or where permitted or required by law, for purposes such as business transfers, mergers, or restructuring.

5.2. All third parties with whom we share your personal information are required to protect it in a manner consistent with this Privacy Policy and the APPs.

6. International Data Transfers

6.1. We store and process your personal information primarily in Australia.

6.2. Some of our service providers, for example payment, hosting, analytics, and communications providers, may store or process your personal information overseas. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it consistently with the APPs.

7. Data Retention

7.1. We will retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, or reporting requirements.

7.2. Specific retention periods may vary depending on the type of information and the nature of our relationship with you. For example:

  1. Account and transaction information: retained for the duration of your engagement plus a period required by law, typically up to 7 years.
  2. Usage and technical data: retained for a period sufficient for analysis and improvement of our Services, generally not exceeding 2 years, unless a longer retention period is required.

8. Your Rights and Choices

8.1. Under Australian privacy law you have the right to access and to seek correction of the personal information we hold about you, and to opt out of direct marketing, as set out in paragraphs (a), (b), and (f). We also offer, as a matter of practice, the choices in paragraphs (c) to (e):

  1. Access: you have the right to request access to the personal information we hold about you.
  2. Correction: you may request that we correct any inaccurate or incomplete information.
  3. Deletion: in certain circumstances, you may request that we delete your personal information.
  4. Objection: you may ask us to stop processing your personal information in certain circumstances.
  5. Withdrawal of consent: where we rely on your consent to process your personal information, you may withdraw that consent at any time.
  6. Opt-out of marketing: you have the right to opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in the communication or by contacting us using the details in clause 15.

8.2. To exercise these rights, please contact us using the details provided in clause 15.

9. GDPR Rights for European Residents

9.1. Although our Services are provided exclusively in Australia, if you reside in the European Union you may have enhanced rights under the General Data Protection Regulation (GDPR). These rights include:

  1. Access and correction: requesting access to and correction of your personal information.
  2. Deletion and portability: requesting deletion or data portability of your personal information under certain conditions.
  3. Objection and restriction: objecting to or restricting our processing of your personal information.

9.2. To exercise any of these rights, please contact us using the details provided in clause 15.

10. Security Measures

10.1. We take commercially reasonable steps to protect your personal information from unauthorised access, modification, disclosure, or loss. Our security measures include, but are not limited to:

  1. Encryption: use of industry-standard encryption, such as TLS for data in transit and encryption for data at rest.
  2. Access controls: implementation of access controls and authentication measures.
  3. Regular reviews: regular review and updating of our security practices and procedures.
  4. Employee training: ongoing security awareness and training for our staff.

10.2. Please note that while we strive to protect your personal information, no security system is impenetrable and we cannot guarantee absolute security.

10.3. If we become aware of a data breach that is likely to result in serious harm, we will assess it and, where it is an eligible data breach, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

11. Cookies and Tracking Technologies

11.1. We may use cookies and similar tracking technologies on our website to collect technical and usage information, which helps us to improve our website's performance and user experience. The types of cookies we may use include:

  1. Essential cookies: necessary for the proper functioning of our website and cannot be switched off.
  2. Performance cookies: allow us to collect information on how visitors use our website, which helps us to enhance its performance.
  3. Functionality cookies: enable the website to remember your preferences and provide enhanced functionality.

11.2. You can adjust your browser settings to manage or block cookies. However, please note that some parts of our website may not function properly if cookies are disabled.

12. Links to Third-Party Websites

12.1. Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites and encourage you to review their privacy policies before providing any personal information.

13. Children's Privacy

13.1. Our website and Services are not directed towards children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information.

14. Changes to This Privacy Policy

14.1. We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

14.2. Any material changes will be communicated by updating the "Last updated" date on this Privacy Policy and, where appropriate, by notifying you directly.

14.3. We encourage you to review this Privacy Policy periodically to stay informed about our information practices and your privacy rights.

15. Contact Us

15.1. If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer at [email protected].

15.2. We will endeavour to respond to your enquiry within 30 days.

16. Complaints

16.1. If you believe that we have breached this Privacy Policy or the APPs, you may lodge a complaint with our Privacy Officer using the contact details in clause 15.

16.2. If you are not satisfied with our response, you may contact the OAIC at:

Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Australia
Phone: 1300 363 992

17. Anonymity and Pseudonymity

17.1. Where practicable, we provide you with the option of not identifying yourself or using a pseudonym when dealing with us. However, certain interactions or Services may require you to provide your personal information.

18. Government Identifiers

18.1. We do not use government identifiers, such as tax file numbers or Medicare numbers, as a means of identifying individuals in our records.