Privacy Policy

1. Who we are

GARG and Manocha Pty Ltd is an Australian proprietary company registered under ABN 95 702 542 336. We operate from Perth, Western Australia, and deliver two complementary streams of work:

• Business consulting — advisory services covering strategy, operations, tendering and procurement support, compliance readiness and business improvement for small and medium-sized enterprises.
• Trade services — coordinated trade and maintenance work delivered directly and through a network of licensed subcontractors for commercial and residential clients.

For the purposes of the Privacy Act 1988 (Cth), GARG and Manocha Pty Ltd is the entity responsible for the personal information described in this policy.

2. The Australian Privacy Principles

We are bound by the Privacy Act 1988 (Cth) (the Privacy Act) and the thirteen Australian Privacy Principles (APPs) contained in that Act. The APPs govern how Australian organisations collect, use, disclose, store and give access to personal information.

In summary, the APPs require us to:

• collect personal information only where it is reasonably necessary for our functions or activities, and generally by fair and lawful means;
• take reasonable steps to notify individuals of the purposes of collection and their rights;
• use and disclose personal information only for the primary purpose of collection, or for a related purpose the individual would reasonably expect, or otherwise with consent;
• ensure the personal information we hold is accurate, up to date, complete and relevant;
• protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure;
• give individuals access to their personal information on request, and correct it where necessary;
• not send direct marketing material where an individual has opted out or where consent has been withdrawn;
• observe additional obligations before disclosing personal information to recipients overseas.

This policy sets out how we meet those obligations in practice. You can read the full Australian Privacy Principles on the website of the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

3. Personal information we collect

The types of personal information we collect depend on the nature of your dealings with us. Generally, we may collect and hold:

• your name and, where relevant, the name of your business or organisation;
• your email address and preferred contact details;
• your role or position, where you contact us on behalf of an employer or client organisation;
• details of the services you have enquired about, including project requirements, site locations and scheduling preferences;
• records of correspondence, including emails, quote requests and responses to those communications;
• billing and administrative information needed to issue invoices and receipts (we do not store full card numbers on our systems);
• information provided by contractors and suppliers who work with us, such as licence details, insurance evidence and payment details, where reasonably required to engage them;
• technical information collected automatically when you use our website, such as pages viewed, referral source, approximate region and browser type.

We do not collect sensitive information (such as health information or information about beliefs or affiliations) unless it is reasonably necessary for a specific purpose, you have consented, and the collection is permitted by law. We do not knowingly collect personal information from children.

4. How we collect personal information

Wherever practicable, we collect personal information directly from you. This occurs when you:

• submit a request through our quote form;
• contact us through our contact page or by email;
• engage us for consulting or trade services and provide onboarding information;
• correspond with us about an ongoing project, invoice or enquiry;
• apply to work with us or register interest as a subcontractor or supplier.

We may also collect personal information indirectly, for example:

• from website analytics tools that record how visitors use our pages;
• from referral partners or clients who pass on your contact details with your knowledge;
• from publicly available sources where it is unreasonable or impracticable to collect the information directly from you.

When we collect personal information from you, we will take reasonable steps to notify you of the purposes for which it is being collected and this policy.

5. Why we collect and use personal information

We collect, hold, use and disclose personal information for purposes including:

• responding to enquiries and providing quotations for consulting or trade services;
• delivering the services you engage us to perform, and managing those engagements;
• administering accounts, invoicing, payments and general record keeping;
• coordinating subcontractors, suppliers and site access for trade work;
• improving our website, service offerings and client experience;
• complying with our legal and regulatory obligations, including taxation and business records requirements that apply to us as the holder of ABN 95 702 542 336;
• providing updates or offers where you have requested them or would reasonably expect them, and always with a simple way to opt out.

We will not use or disclose personal information for a purpose that is unrelated to these functions unless we have your consent, you would reasonably expect that use or disclosure, or we are required or permitted by law to do so.

6. Disclosure of personal information

We do not sell, rent or trade personal information. We may disclose personal information to third parties where reasonably necessary for the purposes described above, including:

• service providers who support our operations, such as website hosting, email, cloud storage, analytics and accounting providers;
• licensed subcontractors and suppliers engaged to deliver trade services, limited to the details they need to perform the work;
• professional advisers, such as accountants, auditors and lawyers, where reasonably required;
• government bodies, regulators or courts where disclosure is required or authorised by law;
• any other person with your consent or at your direction.

Where we disclose personal information to a service provider, we take reasonable steps to ensure the provider handles that information consistently with this policy and the Australian Privacy Principles.

7. Overseas disclosure

Some of the technology providers we use may store or process data on servers located outside Australia. Before disclosing personal information to an overseas recipient, we take reasonable steps, consistent with APP 8, to ensure the recipient does not breach the Australian Privacy Principles, unless an exception in the Privacy Act applies. Where the location of a provider is not apparent, you may ask us for details by emailing ceo@gargandmanocha.site.

8. Cookies, analytics and website data

Our website may use cookies and similar technologies to keep the site functioning, remember your preferences and understand how visitors use our pages. This helps us improve content, navigation and performance.

• Essential cookies support core site functionality and security.
• Analytics tools may collect aggregated, largely de-identified data such as page views, session duration and referral sources.

Most browsers allow you to refuse cookies or delete them through your browser settings. If you block cookies, some features of the website may not function as intended. Analytics data is used in aggregate form wherever practicable and is not used to identify individual visitors.

9. Security and retention of personal information

We take reasonable steps, consistent with APP 11, to protect the personal information we hold from misuse, interference, loss and unauthorised access, modification or disclosure. These steps include access controls on our systems, secure storage practices, and limiting access to personal information to team members and providers who need it to perform their roles.

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, to satisfy our legal, accounting and record-keeping obligations, and to resolve disputes. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

10. Access to and correction of personal information

Under APP 12 and APP 13, you have a right to request access to the personal information we hold about you and to request corrections where that information is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, email ceo@gargandmanocha.site with enough detail for us to identify the information concerned. We will respond within a reasonable period, generally within thirty (30) days. We will usually provide access free of charge; however, where a request is complex or onerous, we may charge a reasonable fee to cover the cost of locating, compiling and supplying the information, and we will tell you before any fee applies.

If we refuse a request for access or correction, we will give you written reasons for the refusal and information about how you may complain about our decision.

11. Marketing communications

We may occasionally send service updates, reminders or offers by email where you have consented, where you have requested such communications, or where the message relates to services we have previously provided to you and you would reasonably expect to receive it.

Every marketing communication will include a clear way to opt out of future messages, and we will act on opt-out requests promptly. You can also withdraw consent or change your preferences at any time by emailing ceo@gargandmanocha.site.

12. Notifiable data breaches

The Notifiable Data Breaches scheme in Part IIIC of the Privacy Act requires organisations to notify affected individuals and the OAIC where an eligible data breach occurs — that is, where unauthorised access to, disclosure of, or loss of personal information is likely to result in serious harm to individuals and remedial action cannot prevent that harm.

If an eligible data breach involving personal information we hold occurs, we will carry out a prompt assessment and, where the scheme applies, notify affected individuals and the OAIC as required, including with recommendations about steps individuals can take in response.

13. Complaints and feedback

If you believe we have breached the Australian Privacy Principles or mishandled your personal information in any way, please let us know. Complaints can be made by emailing ceo@gargandmanocha.site. Please include a description of the concern, any relevant dates or correspondence, and the outcome you are seeking.

We take all privacy complaints seriously. We will acknowledge your complaint promptly, investigate the matter fairly and provide a written response, generally within thirty (30) days of receipt.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) via oaic.gov.au. The OAIC can advise you about its complaint-handling process and time limits.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. The current version will always be published on this page, along with the date of the most recent update at the top of the document.

Material changes will apply from the date of publication on this website. Continued use of our website or services after an updated policy is published constitutes acceptance of the updated policy.

15. How to contact us

If you have any questions about this Privacy Policy, the personal information we hold about you, or how we handle privacy matters, please contact us:

• Entity: GARG and Manocha Pty Ltd
• ABN: 95 702 542 336
• Location: Perth, Western Australia
• Email: ceo@gargandmanocha.site

We aim to respond to all privacy enquiries within five (5) business days.