1. Introduction

My IT Butler™ Pty Ltd (ACN 693 903 105) ("we", "us", "our", or "My IT Butler™") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and Indonesian data protection regulations including PP 71/2019 and Law No. 27/2022 on Personal Data Protection.

2. Information We Collect

We collect the following types of personal information:

Information You Provide

Contact Information: Name, email address, phone number, business name
Account Information: Login credentials, communication preferences
Service Information: IT environment details, device information, network configurations relevant to providing our services
Payment Information: Billing address, payment method details (processed securely through Wise or PayPal)
Communications: Support tickets, emails, chat messages, and other correspondence

Information Collected Automatically

Usage Data: How you interact with our website and client portal
Device Information: Browser type, operating system, IP address
Cookies and Tracking: Session cookies, analytics data (see Section 9)

Information from Third Parties

Referrals from partners or other clients
Payment confirmation from payment processors
Information from IT vendors when coordinating services on your behalf

3. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery: Providing IT support, consulting, and coordination services
Communication: Responding to inquiries, sending service updates, and providing technical support
Account Management: Managing your client portal account and service subscriptions
Billing: Processing payments and managing invoices
Improvement: Analysing usage patterns to improve our services and website
Legal Compliance: Meeting our legal and regulatory obligations
Security: Protecting against fraud and maintaining the security of our systems

4. Legal Basis for Processing

We process your personal information based on:

Contractual Necessity: Processing required to perform our services
Legitimate Interests: Business operations, service improvement, and fraud prevention
Consent: Where you have given explicit consent (e.g., marketing communications)
Legal Obligations: Compliance with Australian tax and business laws

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of data in transit and at rest
Secure authentication systems with password hashing
Regular security assessments and updates
Access controls limiting data access to authorised personnel
Secure cloud infrastructure with reputable providers
Staff training on data protection and security practices

While we take reasonable steps to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Under the Australian Privacy Principles and Indonesian data protection laws, you have the following rights:

Access: Request access to your personal information we hold
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal obligations)
Portability: Request a copy of your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent where processing is based on consent
Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us at help@myitbutler.com. We will respond within 30 days.

7. Sensitive Documents and Confidential Engagements

Some of our services involve particularly sensitive material, including investigation research, confidential reporting platforms and document redaction. For these engagements:

Confidentiality by default: We never name clients, matters or the people involved in an engagement publicly, including as examples or case studies, without written permission.
Documents you provide: Sensitive documents are stored securely, accessed only for the purpose of the engagement, and deleted on request once the work is complete, subject to our legal and accounting obligations.
Redaction work: When we redact documents for you, we work only on documents you own or are authorised to modify, and we do not attempt to remove or bypass redactions applied by courts, government agencies or other parties.
Investigation material: Research findings and working notes are shared only with you and are never reused, sold or disclosed to third parties.
Anonymous reporting platforms: Where we operate a reporting platform for your organisation, reporter identities are protected by the platform's architecture, and we do not retain logs or metadata that could identify them.

8. Data Retention

We retain your personal information for as long as necessary to:

Provide our services to you
Comply with legal, accounting, and tax requirements (typically 7 years for financial records)
Resolve disputes and enforce our agreements
Maintain security and prevent fraud

When personal information is no longer required, we will securely delete or anonymise it.

9. Cross-Border Transfers

As an Australian company providing global services, your personal information may be transferred to and processed in countries outside your country of residence, including:

Australia: Our primary business operations and data processing
Cloud Service Providers: We use cloud services that may store data in various jurisdictions

We ensure that any cross-border transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

Essential Cookies: Required for the website and portal to function (e.g., authentication)
Analytics Cookies: Help us understand how visitors use our website
Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

11. Third-Party Services

We may share your information with trusted third parties who assist in providing our services:

Payment Processors: Wise and PayPal for secure payment processing
Cloud Providers: Secure hosting and data storage services
Communication Tools: Email, chat, and support ticket systems
IT Vendors: Third-party vendors when coordinating services on your behalf (with your knowledge)

We require all third parties to respect the security of your personal information and treat it in accordance with applicable laws.

12. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

My IT Butler™ Pty Ltd
ACN 693 903 105
Email: help@myitbutler.com

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.