Privacy Policy

1. Who we are and how to contact us

Frostlark Workbit Starzau Pty Ltd is the organisation responsible for this website and for deciding how personal information collected through our services is handled. Our registered business address is 17 Macquarie Street, Parramatta NSW 2150, Australia . Our Australian Company Number is 674 829 163.

Privacy enquiries, access or correction requests, complaints and data protection questions may be sent to info@frostlarkworkbitstarzau.com or raised by telephone on +61 2 8846 9273. Email and telephone details are displayed as plain text to prevent unintended external actions.

2. Scope of this policy

This Privacy Policy applies to visitors to this website, people who request quotations or support, customers who use our computer repair, data recovery or business IT services, authorised representatives of business customers, suppliers and other people who communicate with us.

It explains the kinds of information we may collect, why we collect it, how it may be used and disclosed, the safeguards we apply, how long it may be kept, and the choices and rights available to individuals.

3. Australian privacy framework

We handle personal information in accordance with applicable Australian law, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Notifiable Data Breaches scheme where those laws apply to our activities. These principles govern open and transparent management, collection, use, disclosure, data quality, security, access and correction.

Some obligations may vary depending on the nature and scale of a service, the customer relationship and whether an exemption or additional sector rule applies.

4. GDPR and overseas individuals

Where the European Union or United Kingdom data protection rules apply to a particular interaction, we process personal data consistently with principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

References in this policy to consent, contractual necessity, legal obligations, legitimate interests and individual rights are intended to explain how those rules may apply. Australian law remains the primary framework for our Australian operations.

5. Information we may collect

Depending on the service requested, we may collect names, business names, job titles, postal addresses, email addresses, telephone numbers, enquiry details, service preferences, appointment information, billing records, device identifiers, equipment details, fault descriptions, service histories, technical logs and correspondence.

For business support we may also receive authorised user details, network and system information, asset registers, access permissions and information required to diagnose or manage an agreed environment.

6. Device and data recovery information

Repair and recovery work can involve temporary access to devices, storage media, operating systems, account information or files. We ask customers not to provide access beyond what is reasonably needed. Where access to user content is technically necessary, it is limited to authorised personnel and the purpose of diagnosis, repair, recovery, verification or secure transfer.

Recovered data may contain personal or confidential information belonging to the customer or third parties. The customer must have lawful authority to provide the device and request access or recovery.

7. How information is collected

We may collect information directly when a person completes a form, requests a quotation, visits our premises, provides a device, contacts us, enters a service agreement or communicates during support. We may also receive information from an authorised employer, colleague, insurer, supplier, referral partner or service provider.

Basic technical information may be generated when a browser requests local website files, although this static website does not intentionally use third-party analytics, advertising pixels or social tracking scripts.

8. Purposes of collection and use

We use information to respond to enquiries; assess devices and systems; provide quotations; perform diagnostics, repairs, recovery and managed support; verify customer authority; communicate progress; manage appointments, invoicing and records; protect systems and people; improve service quality; meet legal duties; and resolve complaints or disputes.

We do not use customer device content for unrelated marketing, profiling or sale.

9. Legal bases where GDPR applies

Where a GDPR legal basis is required, processing may be necessary to take steps requested before a contract, perform a service contract, comply with law, protect vital interests, or pursue legitimate interests such as operating a secure support business, preventing fraud, maintaining records and improving service delivery. Consent is used where required and may be withdrawn for future processing.

Withdrawal does not affect processing that was lawful before withdrawal and may not prevent processing required by law or contract.

10. Sensitive information

We do not seek sensitive information unless it is reasonably necessary and lawful for a specific service. A device may nevertheless contain health, biometric, financial, political, religious or other sensitive material. Customers should remove or encrypt unrelated sensitive content before service where practical and should tell us when special handling is required.

11. Children and authorised requests

Our services are intended for adults and authorised business representatives. A parent, guardian or other authorised adult should make enquiries for a child. We do not knowingly solicit personal information directly from children through this website.

12. Website forms and communications

Information entered into a website form is used to prepare and respond to the enquiry. The current static form provides an on-page confirmation and does not by itself guarantee transmission to a server. For an immediate response, individuals should use the displayed telephone number or email address.

Communications may be retained with the related service record so we can understand instructions, document decisions and respond consistently.

13. Cookies and local storage

This website is designed to operate without third-party advertising, analytics or social media cookies. Essential browser functions, hosting infrastructure or a future consent preference may still create strictly necessary technical storage. More information appears in our Cookie Policy.

14. Disclosure to service providers

We may disclose limited information to carefully selected providers that assist with hosting, secure communications, payment administration, specialist repair, parts supply, backup, cybersecurity, professional advice, insurance, debt recovery or legal compliance. Providers receive only information reasonably needed for their role and are expected to protect it.

We may also disclose information where authorised by the individual, required or permitted by law, necessary to prevent a serious threat, or needed to investigate suspected fraud or security incidents.

15. Cross-border handling

Some technology providers or specialist services may process information outside Australia. Before making a relevant disclosure, we consider the nature of the information, provider safeguards, contractual protections and applicable legal requirements. Locations can vary as providers change infrastructure.

Where GDPR transfer rules apply, an approved transfer mechanism or another lawful basis will be used where required.

16. Retention and deletion

We retain information only for as long as reasonably needed for the service, warranty support, security, accounting, insurance, dispute management and legal obligations. Retention periods vary according to record type and risk.

Temporary diagnostic copies and recovered data are deleted or securely rendered inaccessible after completion and any agreed collection period, subject to backups, legal holds and technical limitations. Customers should collect transferred data promptly and maintain their own verified backups.

17. Security safeguards

We use administrative, physical and technical controls appropriate to the circumstances, including access restrictions, authentication, device handling procedures, malware controls, secure storage, encrypted transfer where suitable, staff confidentiality expectations, logging and controlled disposal.

No system can guarantee absolute security. Customers should preserve backups, protect credentials and tell us immediately if instructions, contact details or authorised persons change.

18. Data breaches

Suspected privacy or security incidents are assessed promptly. Where an eligible data breach is likely to cause serious harm and notification is required, we will take reasonable steps to notify affected individuals and the Office of the Australian Information Commissioner, while containing and remediating the incident.

19. Access and correction in Australia

Individuals may request access to personal information we hold and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify identity and authority before responding. Lawful exceptions can apply, and we will explain a refusal where required.

We generally do not charge for making a request, although a reasonable administration fee may apply to providing access where permitted.

20. Additional GDPR rights

Where GDPR rights apply, an individual may request access, rectification, erasure, restriction, portability, or objection to processing, and may complain to a competent supervisory authority. These rights are not absolute and depend on the legal basis, context and exemptions.

21. Automated decision-making and marketing

We do not use information collected through this website to make solely automated decisions that produce legal or similarly significant effects. We do not sell personal information. Direct marketing will be sent only where permitted, and recipients may opt out of future marketing communications.

22. Complaints

Please contact us first with enough detail to investigate a privacy concern. We aim to acknowledge a complaint promptly, assess relevant records and provide a reasoned response. If an Australian complaint remains unresolved, a person may contact the Office of the Australian Information Commissioner. Other regulators or supervisory authorities may be available depending on location.

23. Changes to this policy

We may update this policy when services, technology or legal requirements change. The current version will be published on this page with an updated date. Material changes will be highlighted where reasonably practicable.