Privacy policy

Effective Date: July 1, 2025

CodeWorks WA (referred to as "we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy outlines how we collect, use, disclose, and manage your personal information in accordance with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth) (the "Commonwealth Privacy Act"). We also acknowledge and commit to preparing for compliance with the Privacy and Responsible Information Sharing Act 2024 (WA) (the "WA PRIS Act") and the Information Commissioner Act 2024 (WA) (the "WA IC Act"), which will govern privacy for Western Australian government entities and their contracted service providers upon full commencement.

1. What is Personal Information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not. This can include your name, address, email address, phone number, and other information that can be used to identify you.

Sensitive information is a sub-set of personal information that is given a higher level of protection under the Commonwealth Privacy Act (and similarly under the WA PRIS Act's Information Privacy Principles). Sensitive information includes information about your health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, or criminal record.

2. Collection of Personal Information

We collect personal information for the primary purpose of providing our software development services, managing our business operations, and for marketing activities.

We may collect personal information in various ways, including:

Directly from you: When you contact us, enquire about our services, engage us for a project, participate in surveys, or interact with us via email, phone, or in person.
From third parties: In some circumstances, we may be provided with information by third parties, such as business partners, public sources, or service providers. In such cases, we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.
Through our website: When you visit our website, we may collect information such as your IP address, browser type, referring pages, and the time and date of your visit. This information is primarily used for analytical purposes to improve our website and services. We may use cookies and similar tracking technologies (please refer to our Cookie Policy for more details).

The types of personal information we may collect include:

Contact details: Name, email address, phone number, physical address.
Professional information: Company name, job title, project details, requirements, and feedback related to our services.
Billing and payment information: For service provision (though sensitive financial details are typically processed by third-party payment gateways and not stored directly by us).
Communications: Records of your interactions with us, including emails, phone calls, and meeting notes.

We only collect personal information that is reasonably necessary for, or directly related to, our functions or activities.

3. Purpose of Collection and Use of Personal Information

We collect and use your personal information for the following purposes:

To provide our services: To understand your software development needs, deliver contracted services, manage projects, and provide support.
To communicate with you: To respond to your enquiries, provide updates on our services, and send important notices.
For marketing and promotional activities: To inform you about new services, special offers, and other information we believe may be of interest to you. You may opt-out of receiving marketing communications from us at any time by contacting us or using the unsubscribe link provided in our emails.
For internal record-keeping and administration: To manage our business operations, including invoicing, accounting, and internal reporting.
To improve our services and website: To analyse trends, gather demographic information, and enhance user experience.
To comply with legal obligations: To meet our legal and regulatory requirements, including those under the Commonwealth Privacy Act and, where applicable, the WA PRIS Act.

4. Disclosure of Personal Information

We may disclose your personal information in a number of circumstances, including:

To third-party service providers: We may share your information with trusted third-party service providers who assist us in delivering our services, such as cloud hosting providers, payment processors, and project management tools. These third parties are bound by confidentiality obligations and are only permitted to use your information for the specific purposes for which we engage them.
With your consent: Where you have provided your explicit consent for us to do so.
Where required or authorised by law: Such as in response to a subpoena, court order, or other legal process under Australian Commonwealth or Western Australian law.
In case of a business transfer: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

We will take reasonable steps to ensure that any third parties to whom we disclose personal information adhere to privacy principles similar to those in this policy or are subject to laws that protect your information to an equivalent standard.

If CodeWorks WA provides services to a Western Australian government agency or public entity under a contract, we will, as a contracted service provider, comply with the Information Privacy Principles (IPPs) and other relevant provisions of the WA PRIS Act as contractually required and upon their commencement.

5. Cross-Border Disclosure of Personal Information

CodeWorks WA may utilise cloud-based services or engage with third-party providers located overseas. This may mean that your personal information is stored or processed in countries other than Australia. We will only disclose your personal information to overseas recipients if we have taken reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles in relation to the information, or if you have consented to the disclosure after we have informed you that this principle will not apply.

6. Security of Personal Information

We are committed to protecting your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. We implement reasonable physical, technical, and administrative safeguards to protect the personal information we hold.

These measures include:

Secure storage of digital and physical records.
Access controls and authentication procedures for our systems.
Data encryption where appropriate.
Regular security assessments and updates.
Staff training on privacy and data security.

When your personal information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your personal information, unless we are required by law to retain it.

7. Access to and Correction of Personal Information

You have a right to access the personal information we hold about you and to update and/or correct it, subject to certain exceptions under the Commonwealth Privacy Act. If you wish to access your personal information, please contact us in writing.

We will not charge any fee for your access request, but we may charge an administrative fee for providing a copy of your personal information.

To protect your personal information, we may require identification from you before releasing the requested information.

It is important to us that your personal information is accurate, complete, and up-to-date. We will take reasonable steps to make sure that the personal information we collect, use, or disclose is accurate, complete, and up-to-date. If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us immediately. We will take reasonable steps to correct any inaccurate, incomplete, or outdated information.

8. Anonymity and Pseudonymity

Wherever it is lawful and practicable, you have the option of not identifying yourself, or of using a pseudonym, when dealing with CodeWorks WA. However, in many situations, we require your personal information to provide our services effectively.

9. Notifiable Data Breaches Scheme

In the event of an eligible data breach of personal information that is likely to result in serious harm to any individual, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme of the Commonwealth Privacy Act, which requires us to notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

Furthermore, if CodeWorks WA is acting as a contracted service provider to a Western Australian government entity, we will also comply with the notifiable information breach scheme established under the WA PRIS Act upon its commencement, including notifying affected individuals and the Western Australian Information Commissioner of any notifiable information breaches.

10. Complaints About Privacy

If you have any complaints about our privacy practices or believe we have breached the Australian Privacy Principles (or the WA PRIS Act's Information Privacy Principles if applicable), please contact us using the details below. We will investigate your complaint and endeavour to provide a timely and appropriate response.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. If your complaint relates to our handling of information under the WA PRIS Act as a contracted service provider to a WA government entity, you may also be able to complain to the Western Australian Information Commissioner once the relevant provisions of the WA IC Act and PRIS Act commence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on our website, and we encourage you to review this policy periodically. Your continued use of our services or website after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our handling of your personal information, please contact us at:

Email: info@codeworkswa.com.au
Phone: 0459 962 012

Last Updated: April 9, 2026