Privacy Policy - KTCGroups

1. Who we are

KTCGroups Pty Ltd ("we", "us", "our") is an Australian-registered company providing cross-border human resources, procurement and tender management services. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Contact: help@ktcgroups.com.au.

2. What we collect

Identifiers: name, business email, phone (if you supply it)
Business information: company name, ABN, role, country of operation
Tender / RFP submissions: documents, pricing, and contact details of nominated representatives
Recruitment data: candidate CVs and assessment results, where you engage us for hiring services
Site usage: anonymised analytics (page views, referrer, device type)
Email correspondence with us

3. How we use it

To respond to your inquiry, scope your requirements, and deliver our services
To administer tenders we manage on behalf of project owners
To meet legal and regulatory obligations (tax, employment, anti-corruption)
To improve our website (analytics)

4. Who we share it with

Project owners commissioning a tender, when you submit a bid through our portal
Our hosting and infrastructure providers (e.g. Cloudflare)
Government and regulators where required by law
Australian-qualified legal counsel engaged for our services

We do not sell your personal information.

5. How long we keep it

Tender documents: 7 years from project close (to satisfy audit and dispute timelines)
Recruitment / candidate data: up to 2 years from last interaction unless you ask us to delete it sooner
Website analytics: 26 months
General correspondence: as long as reasonably necessary, then deleted

6. Your rights

Under the Australian Privacy Principles, you may:

Request access to the personal information we hold about you
Request correction or deletion of that information
Lodge a privacy complaint with us at help@ktcgroups.com.au
If unresolved, escalate to the Office of the Australian Information Commissioner (oaic.gov.au)

7. International transfers

Some data may be processed on global infrastructure (e.g. Cloudflare's worldwide network) including servers located outside Australia. We engage providers with contractual data-protection commitments equivalent to the Australian Privacy Principles.

8. Cookies

Our website uses essential cookies for navigation and anonymised analytics cookies. You can disable cookies in your browser settings; some features may not work as a result.

9. Security

We use industry-standard technical and organisational measures (encryption in transit, access controls, audit logging) to protect personal information. No system is perfectly secure; if we become aware of a notifiable data breach we will follow the Australian Notifiable Data Breaches scheme.

10. Updates

We may update this policy from time to time. The "last updated" date above reflects the latest version.