Privacy Policy

Enigma Global Technologies Pty Ltd ("Enigma", "we", "us", "our") is committed to protecting the privacy of individuals who interact with our website, services, and team. This Privacy Policy explains how we collect, use, disclose, and manage personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website (enigmaglobal.co) or engaging our services, you agree to the collection and use of information described in this policy.

1. What Personal Information We Collect

We may collect the following types of personal information:

• Contact information: Name, email address, phone number, company name, and job title — collected when you submit a form, book a Discovery Sprint, or contact us directly.
• Usage data: IP address, browser type, pages visited, time spent on pages, and referring URLs — collected automatically via analytics tools (including HubSpot) when you visit our website.
• Communications: The content of emails, messages, or other correspondence you send to us.
• Client engagement data: Information you provide during our service delivery, including business processes, system details, and personnel information necessary to deploy and operate AI systems on your behalf.

We do not intentionally collect sensitive information (as defined in the Privacy Act) unless specifically required and with your explicit consent.

2. How We Collect Personal Information

We collect personal information:

• Directly from you when you complete a contact form, book a call, or engage our services
• Automatically through website analytics tools when you browse our website
• Through email and other direct communications
• From publicly available sources, such as LinkedIn, for business development purposes

3. Why We Collect Personal Information

We collect and use personal information to:

• Respond to enquiries and book Discovery Sprints
• Deliver our AI Workforce, Software Development, and BOB Retainer services
• Send service updates, invoices, and reporting relevant to your engagement
• Improve our website and service offerings through analytics
• Comply with our legal and regulatory obligations
• Send marketing communications about our services (where you have opted in or where permitted by law)

4. Disclosure of Personal Information

We may disclose personal information to:

• Service providers: Third-party tools we use to operate our business, including HubSpot (CRM and marketing automation), Google Analytics, and cloud infrastructure providers. These providers are contractually required to handle your data in accordance with applicable privacy law.
• Professional advisors: Lawyers, accountants, or auditors where required.
• Law enforcement or regulatory bodies: Where required by law or to protect our legal rights.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Data Storage and Security

Your personal information is stored on secure servers located in Australia and, where third-party tools are used, potentially in the United States (e.g., HubSpot servers). We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access — including encryption in transit (TLS), access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Notifiable Data Breaches

We comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

7. Marketing Communications

If you have provided your contact details through our website or direct engagement, we may occasionally send you information about our services. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any email we send
• Emailing us at anthony.gavin@enigmaglobal.co with the subject "Unsubscribe"

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and collect analytics data. This includes:

• Essential cookies: Required for the website to function correctly.
• Analytics cookies: Used by HubSpot and Google Analytics to understand how visitors interact with our website.
• Marketing cookies: Used to track visitors for remarketing purposes (where consent is obtained).

You can control cookies through your browser settings. Disabling cookies may affect the functionality of parts of our website.

9. Access, Correction and Complaints

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you
• Request correction of personal information that is inaccurate or out of date
• Complain about how we have handled your personal information

To exercise these rights, please contact us at anthony.gavin@enigmaglobal.co. We will respond to your request within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent update. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or requests, please contact:

Anthony Gavin
Founder & CEO, Enigma Global Technologies Pty Ltd
Email: anthony.gavin@enigmaglobal.co
Melbourne, Victoria, Australia