Privacy Policy

How tharionmelva protects and manages your personal information in accordance with Australian privacy laws

Last Updated: March 15, 2025

1. Introduction and Scope

tharionmelva (ABN 42 123 456 789) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and other applicable Australian privacy laws.

This policy applies to all personal information we collect through our budget approval workflow platform, website at tharionmelva.com, mobile applications, and any related services we provide. By using our services, you consent to the collection and use of your information as described in this policy.

We are bound by the Australian Privacy Principles and this policy reflects our commitment to transparent data handling practices for all Australian users and businesses.

Our head office is located at Level-1/126 Margaret St, Brisbane City QLD 4000, Australia, and we primarily serve businesses operating within Australia. This policy covers all interactions with our platform, including account creation, budget submission processes, approval workflows, and customer support communications.

2. Personal Information We Collect

We collect personal information necessary to provide our budget approval workflow services effectively. The types of information we collect depend on how you interact with our platform and the services you use.

Information collected directly from you includes:

  • Contact details: name, email address, phone number, business address
  • Professional information: job title, department, company name, ABN/ACN
  • Account credentials: username, password, security questions
  • Budget and financial data: budget requests, approval limits, spending categories
  • Communication records: support tickets, feedback, survey responses
  • Payment information: billing address, payment method details (processed securely through third-party providers)

We automatically collect certain technical information when you use our platform, including IP addresses, browser type and version, operating system, referring URLs, pages viewed, time stamps, and device identifiers. This information helps us maintain platform security, improve performance, and understand user behavior patterns.

For business accounts, we may collect additional information about your organization's structure, approval hierarchies, budget categories, and spending patterns to customize our workflow tools for your specific needs. We only collect information that is necessary for the proper functioning of our services.

3. How We Use Your Personal Information

We use your personal information for specific, legitimate business purposes related to providing and improving our budget approval workflow services. Our primary uses include platform operation, customer service, security maintenance, and business communications.

Your information enables us to create and manage user accounts, process budget submissions, facilitate approval workflows, generate financial reports, and provide customer support. We analyze usage patterns to improve our platform's functionality and develop new features that better serve our users' needs.

We never sell your personal information to third parties or use it for purposes unrelated to our budget approval workflow services without your explicit consent.

For marketing communications, we only contact existing customers about service updates, new features, or relevant business insights. You can opt out of marketing communications at any time while continuing to receive essential service-related notifications about your account and budget activities.

We may use aggregated, de-identified data for research purposes to understand budget approval trends and improve our services. This research data cannot be traced back to individual users or organizations and helps us develop better tools for the Australian business community.

4. Information Sharing and Disclosure

We maintain strict controls over information sharing and only disclose personal information when necessary for service delivery, legal compliance, or with your explicit consent. We do not engage in the sale or rental of personal information to third parties.

Within your organization, information is shared according to the approval hierarchies and access levels you configure in our platform. Budget data and approval workflows are only visible to authorized personnel within your company as determined by your account settings and organizational structure.

We work with trusted service providers who assist with platform hosting, payment processing, email communications, and technical support. These providers are contractually bound to protect your information and can only use it for the specific services they provide to us. All service providers must meet our security standards and comply with Australian privacy requirements.

Legal disclosure may occur if required by Australian law, court orders, or government regulations. We will notify affected users unless legally prohibited from doing so. We may also disclose information to protect our legal rights, prevent fraud, or ensure platform security when we believe such action is necessary.

In the event of a business transaction such as a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We would notify users of any such change in ownership and provide options regarding their personal information.

5. Your Privacy Rights Under Australian Law

Under Australian privacy legislation, you have specific rights regarding your personal information. We are committed to facilitating the exercise of these rights and respond to requests promptly and transparently.

Access Rights

Request access to your personal information and receive a copy of the data we hold about you

Correction Rights

Request correction of inaccurate or outdated personal information in our systems

Complaint Rights

Lodge complaints about our privacy practices with us or the Australian Privacy Commissioner

To exercise your rights, contact us at info@tharionmelva.com with your full name, account details, and specific request. We will verify your identity and respond within 30 days. For access requests, we provide information in a clear, understandable format and explain any codes or abbreviations used.

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC). The OAIC can investigate privacy complaints and has the power to make determinations about privacy breaches under Australian law.

6. Data Security and Protection Measures

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes both technical and administrative safeguards designed to meet Australian data protection standards.

Technical security measures include encryption of data in transit and at rest, secure server infrastructure hosted in Australian data centers, regular security audits, multi-factor authentication, and automated monitoring systems that detect potential security threats. We use industry-standard SSL/TLS encryption for all data transmissions.

Administrative measures include staff training on privacy requirements, background checks for personnel with access to personal information, regular review of access permissions, and incident response procedures. All employees sign confidentiality agreements and receive ongoing privacy training.

We maintain cyber insurance coverage and have established incident response procedures to address any potential data breaches in accordance with Australian notification requirements.

Regular security assessments and penetration testing help us identify and address potential vulnerabilities. We also maintain detailed logs of system access and data handling activities for security monitoring and compliance purposes.

7. Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, meet our legal obligations, and resolve any disputes. Our retention periods are based on Australian legal requirements and business needs.

Information Type Retention Period Legal Basis
Account Information 7 years after account closure Corporations Act requirements
Financial Records 7 years from end of financial year Tax and accounting legislation
Communication Records 3 years from last contact Business record keeping
Technical Logs 2 years from creation Security and system maintenance

When personal information is no longer required, we securely delete or anonymize it using methods that prevent recovery or reconstruction. For physical records, we use certified destruction services. Digital data is overwritten using industry-standard deletion methods.

You may request early deletion of your personal information, subject to our legal obligations and legitimate business interests. We will assess each request individually and delete information where legally permissible.

8. International Data Transfers

We primarily store and process personal information within Australia using local data centers and service providers. However, some of our technology partners and service providers may be located overseas, which could involve international transfer of personal information.

When international transfers are necessary, we ensure appropriate safeguards are in place to protect your information. This includes using service providers in countries with adequate privacy protections as recognized by Australian law, or implementing contractual protections that require overseas recipients to handle personal information in accordance with Australian Privacy Principles.

Countries where your information might be processed include New Zealand, Singapore, and certain European Union member states that have been assessed as providing adequate data protection. We do not transfer personal information to countries without adequate protection unless specific safeguards are implemented.

You have the right to request details about any overseas transfers of your personal information and the safeguards we have implemented to protect your data during such transfers.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform, maintain security, and analyze usage patterns. Cookies are small text files stored on your device that help us remember your preferences and improve platform functionality.

Essential cookies are necessary for platform operation and cannot be disabled. These include session management cookies, security tokens, and load balancing cookies that ensure proper platform functionality and protect against unauthorized access.

Analytics cookies help us understand how users interact with our platform, which features are most valuable, and where improvements can be made. This information is used in aggregate form and does not identify individual users. You can disable analytics cookies through your browser settings without affecting essential platform functionality.

We do not use advertising cookies or tracking pixels for marketing purposes. Our cookie usage is limited to what is necessary for platform operation and service improvement. You can manage cookie preferences through your browser settings or contact us for assistance with cookie-related concerns.

10. Changes to This Privacy Policy

We review and update this Privacy Policy regularly to ensure it remains current with our practices and applicable Australian privacy laws. Changes may be necessary due to new features, legal requirements, or improvements to our privacy practices.

Significant changes to this policy will be communicated through multiple channels including email notifications to account holders, prominent notices on our platform, and updates to our website. We will provide advance notice of material changes that affect how we handle personal information.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this policy periodically to stay informed about how we protect your personal information.

Continued use of our services after policy changes constitutes acceptance of the updated terms. If you do not agree with changes to our privacy practices, you may discontinue using our services and request deletion of your personal information subject to legal and contractual obligations.

Privacy Inquiries and Contact Information

For questions about this Privacy Policy, to exercise your privacy rights, or to lodge a privacy complaint, please contact us using the following information:

Privacy Officer tharionmelva Level-1/126 Margaret St, Brisbane City QLD 4000, Australia Email: info@tharionmelva.com Phone: +61 7 5529 9170

We aim to respond to all privacy inquiries within 30 days. For urgent privacy matters, please clearly mark your communication as "Privacy - Urgent" and we will prioritize your request.