Privacy Policy

Last updated: 29 April 2026

This policy explains how MasterKeyIT handles information collected through our website, enquiries, AI implementation, website, app development, automation, and related services.

1. Who We Are

MasterKeyIT Pty Ltd, trading as MasterKeyIT, provides AI consulting, AI implementation, website development, app development, automation, and related technology services to Australian businesses. In this policy, "MasterKeyIT", "we", "us", and "our" refer to MasterKeyIT Pty Ltd.

2. Information We Collect

We may collect personal information you provide directly, including your name, email address, phone number, business name, role, website, business requirements, messages, booking details, and information included in files, briefs, emails, or forms you send us.

We may also collect technical information such as IP address, device and browser details, pages visited, referral source, approximate location, timestamps, form security signals, and usage information needed to operate, secure, and improve the website and our services.

3. How We Use Information

We use information to respond to enquiries, provide quotes, deliver services, manage client relationships, schedule calls, send service-related communications, improve our website and offerings, detect misuse, protect security, comply with legal obligations, and promote relevant MasterKeyIT services where permitted by law.

4. AI, Automation, and Client Data

Where you ask us to build, configure, or advise on AI systems, we may process business information you provide so we can understand your requirements and deliver the engagement. You are responsible for ensuring you have the right to share any third-party, employee, customer, confidential, regulated, or sensitive information with us.

Unless expressly agreed in writing, do not send us highly sensitive information such as health records, government identifiers, payment card data, passwords, secret keys, or information you are not authorised to disclose.

5. Service Providers

We may use trusted service providers for hosting, email, forms, analytics, security, CRM, scheduling, payment processing, AI model APIs, project management, and business operations. These providers may process information for us under their own security and privacy terms.

6. Disclosure

We do not sell personal information. We may disclose information to service providers, professional advisers, contractors, authorities where required by law, parties involved in a business transfer, or where reasonably necessary to protect our rights, users, clients, systems, or the public.

7. Security

We use reasonable technical, organisational, and administrative safeguards designed to protect information against unauthorised access, misuse, interference, loss, modification, or disclosure. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

8. Data Retention

We keep information only for as long as reasonably needed for the purposes described in this policy, including service delivery, legal, tax, accounting, dispute, backup, and security needs. We may retain de-identified or aggregated information for analytics and improvement.

9. Cookies and Analytics

Our website may use cookies, local storage, analytics, and similar technologies to remember preferences, understand usage, secure forms, and improve performance. You can control cookies through your browser settings, but some functionality may be affected.

10. Overseas Processing

Some providers may store or process information outside Australia. Where this occurs, we take reasonable steps to use reputable providers and appropriate safeguards, but overseas privacy laws may differ from Australian law.

11. Access, Correction, and Deletion

You may request access to, correction of, or deletion of personal information we hold about you, subject to legal exceptions. We may need to verify your identity before actioning a request.

12. Marketing

If you receive marketing from us, you can opt out by using the unsubscribe method provided or contacting us. We may still send non-marketing communications such as service, security, billing, or legal notices.

13. Data Breaches

If we become aware of an eligible data breach under the Australian Privacy Act 1988 (Cth), we will assess and respond in accordance with applicable legal obligations, including notification where required.

14. Changes

We may update this policy from time to time. The updated version will be posted on this page with a new last updated date.

15. Contact

For privacy requests or questions, contact hello@masterkeyit.com.au.

Business: MasterKeyIT Pty Ltd, Melbourne, Victoria, Australia.