PRIVACY POLICY

1. Introduction

Blue Moon IT ("we", "our", "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

By accessing our services, website, or providing us with your personal information, you consent to the practices described in this Privacy Policy.

2. Personal Information We Collect

2.1 Types of information

We may collect the following types of personal information:

• Name, address, and contact details (including phone number and email address)
• Business details, including Australian Business Number (ABN)
• Payment and transaction details
• Technical information and usage data when you access our services or website
• Communications between you and our team
• Any other information relevant to the services we provide

2.2 Collection methods

We collect personal information directly from you when you:

• Register for our services
• Contact us via phone, email, or our website
• Complete forms or surveys
• Use our services or visit our website
• Interact with us on social media platforms

3. Purpose of Collection

We collect personal information for purposes including:

• Providing and improving our IT services
• Processing payments and maintaining accounts
• Communicating with you about our services
• Technical support and customer service
• Marketing and promotional activities (with consent)
• Compliance with legal and regulatory obligations
• Internal business operations and planning

4. Data Storage and Security

4.1 Storage location

All customer information is stored in secure, Australian-based servers. We do not transfer your personal information overseas unless we have your explicit consent or are required by law to do so.

4.2 Security measures

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of sensitive data
• Secure access controls and authentication procedures
• Regular security assessments and updates
• Staff training on privacy and data protection
• Physical security measures for our premises and systems

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee its absolute security.

5. Disclosure of Personal Information

We may disclose your personal information to:

• Our employees and contractors who need access to provide our services
• Service providers who assist us in operating our business (subject to appropriate confidentiality obligations)
• Professional advisers (such as lawyers, accountants, and auditors)
• Regulatory authorities, law enforcement bodies, and courts as required by law
• Any other party with your consent

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Access and Correction

You have the right to access and request correction of the personal information we hold about you. To request access or corrections, please contact our Privacy Officer using the contact details provided at the end of this policy.

We will respond to your request within a reasonable timeframe (usually within 30 days). We may charge a reasonable fee for providing access to your information, but we will inform you of any cost before fulfilling your request.

7. Complaints

If you believe that we have breached your privacy or you have concerns about how we have handled your personal information, please lodge a complaint with our Privacy Officer using the contact details provided below.

We will:

• Acknowledge receipt of your complaint within 7 days
• Investigate your complaint and provide a response within 30 days
• Take appropriate measures to resolve the issue

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.

8. Direct Marketing

We may use your personal information to send you promotional materials about our services. You may opt out of receiving marketing communications at any time by:

• Using the unsubscribe function in our electronic communications
• Contacting us using the details provided below

9. Cookies, Analytics and Third-Party Services

9.1 What are cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you interact with them.

9.2 Strictly necessary services

The following services are essential for our website to function and are loaded without requiring your consent:

• Authentication (admin_token cookie) — A secure, HTTP-only session cookie used for administrator authentication. Expires after 8 hours. No personal data is shared with third parties.
• Cloudflare Turnstile — Used on forms to protect against spam and abuse. Cloudflare Inc. (USA) may process your IP address and browser information. Cloudflare Privacy Policy.
• Stripe — Used for secure payment processing on our online store and remote support bookings. Stripe Inc. (USA) processes payment and transaction data. Stripe Privacy Policy.

9.3 Analytics cookies (consent required)

We use Google Analytics to understand how visitors use our website. These cookies are only set after you give consent via our cookie banner:

• _ga — Distinguishes unique users. Expires after 2 years.
• _gid — Distinguishes unique users. Expires after 24 hours.

Google LLC (USA) processes this data on our behalf. Google Privacy Policy.

9.4 Marketing cookies (consent required)

We use Google Ads conversion tracking to measure the effectiveness of our advertising. These cookies are only set after you give consent:

• Google Ads conversion tracking — Records when a user completes an action after clicking an ad. Google LLC (USA) may process your IP address and browsing data.

9.5 Local storage

We also use your browser's local storage (not cookies) for:

• Cookie consent preference — Remembers whether you accepted or rejected non-essential cookies so we don't ask again.
• Shopping cart — Stores your cart contents for our online store.

9.6 International data transfers

Some of the third-party services listed above are operated by companies based in the United States. When you consent to analytics or marketing cookies, your data (including your IP address and browsing behaviour) may be transferred to, stored, or processed in the United States. We rely on your explicit consent as the legal basis for these transfers.

9.7 Managing your preferences

You can change your cookie preferences at any time by clearing your browser's local storage for this site, which will cause the consent banner to reappear on your next visit. You can also configure your browser to block cookies entirely, though this may limit your ability to use some features of our website.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated policy will be posted on our website with the revised date. We encourage you to periodically review this page to stay informed about how we protect your personal information.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact our Privacy Officer: