Privacy Policy

1. Introduction

Vault Outsourcing (“Vault”, “we”, “us”, or “our”) is committed to protecting the privacy of individuals who interact with our services. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website (vaultoutsourcing.com) or engaging our services, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following categories of personal information:

• Contact information — name, email address, phone number, company name
• Business information — company size, industry, services of interest
• Communications — messages submitted via contact forms, emails, or live chat
• Website usage data — pages visited, browser type, IP address, referral source (collected via cookies and analytics tools)
• Consultation information — notes and records from discovery calls or meetings

We do not knowingly collect sensitive information (as defined by the Privacy Act) unless you voluntarily provide it and it is necessary for the delivery of our services.

3. How We Use Your Information

We use personal information for the following purposes:

• To respond to enquiries and provide requested information about our services
• To schedule and conduct consultations
• To deliver and manage our offshore staffing services
• To send service-related communications and updates
• To improve our website, services, and user experience
• To comply with legal and regulatory obligations
• To send marketing communications where you have consented or where we have a legitimate interest

4. Disclosure to Third Parties

We may disclose personal information to the following categories of third parties:

• Service providers — CRM systems, email platforms, scheduling tools, and analytics providers used to operate our business
• Recruited candidates — limited contact information shared only as required for the service delivery process
• Legal and regulatory authorities — where required by law or court order

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Any third-party service providers are contractually bound to protect information in accordance with Australian privacy law.

Some of our service providers are located overseas (including the Philippines). We take reasonable steps to ensure overseas recipients protect information consistently with the APPs.

5. Data Security

We implement robust technical and organisational security measures to protect personal information from unauthorised access, loss, misuse, or disclosure. These include:

• ISO 27001 certified information security management system
• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and multi-factor authentication
• Regular security audits and penetration testing

In the event of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required under the Notifiable Data Breaches scheme.

6. Cookies & Analytics

Our website uses cookies and similar tracking technologies to analyse site traffic and improve user experience. These may include first-party cookies and third-party analytics tools such as Google Analytics. You can disable cookies in your browser settings, though some functionality may be affected.

7. Your Rights Under the Privacy Act

Under the Australian Privacy Act 1988, you have the right to:

• Access — request access to the personal information we hold about you
• Correction — request correction of inaccurate, out-of-date, or incomplete information
• Opt-out — unsubscribe from marketing communications at any time
• Complaint — lodge a complaint with us or with the OAIC (www.oaic.gov.au) if you believe we have breached your privacy

To exercise any of these rights, contact us at the details provided in Section 9.

8. Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal information is no longer required, we take reasonable steps to securely destroy or de-identify it.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

We will respond to all privacy enquiries within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated via our website and, where appropriate, by direct notification. Continued use of our services after changes take effect constitutes acceptance of the updated policy.