Privacy policy

Who we are

What this policy covers

CCA Software Pty Ltd (ABN 35 060 664 057) (‘CCA’, ‘we’, ‘us’) is an Australian-owned software company. Our office is at 1/47 Railway Road, Blackburn VIC 3130, and our postal address is PO Box 2016, Forest Hill VIC 3131. This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit ccasoftware.com, request information or a trial, contact us, or otherwise deal with us.

This policy does not cover the data that customers process using our software. When we provide software or services to an organisation, we generally handle that information on its behalf under our agreement with it, and that organisation’s privacy policy applies.

We are bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).

What we collect

The personal information we collect

The personal information we collect depends on how you deal with us. It may include:

• Contact details, such as your name, job title, organisation, email address and phone number.
• Enquiry details, including the content of messages you send us and notes of calls, meetings and support requests.
• Trial, product and account details, such as the products you are interested in, licence or account information, and the people authorised to act for your organisation.
• Website and device information, such as your IP address, browser type, the pages you visit and how you use our site, collected through cookies and similar technologies.
• Recruitment and partnership information, where you apply for a role with us or propose a partnership.

We usually collect personal information directly from you. Where that is unreasonable or impracticable, we may collect it from your organisation, from our delivery and technology partners, or from publicly available sources such as business directories and professional networking sites. We do not collect sensitive information about you unless you consent or the law allows it. Where it is lawful and practicable, you can deal with us without identifying yourself, although some services require your details.

How we use it

Why we collect and use your information

We collect, hold and use personal information to:

• respond to your enquiries and provide the information you request
• arrange trials, demonstrations, training and consultations
• deliver, support and manage our products and services, and our relationships with customers and partners
• send you information about our products, events and services where you have agreed to receive it or would reasonably expect to (you can opt out at any time)
• improve our website, products and services
• manage recruitment, business operations and IT security
• meet our legal, regulatory and contractual obligations

We only use or disclose personal information for the purpose for which it was collected, a related purpose you would reasonably expect, or another purpose the APPs permit, such as with your consent or where required by law.

Sharing

Who we share it with

We may disclose personal information to:

• our employees and contractors, on a need-to-know basis
• trusted service providers who help us run our business, such as hosting, website, email, analytics, customer relationship management and IT support providers
• delivery and technology partners, where needed to deliver a product or service you have requested
• our professional advisers, insurers and auditors
• government agencies, regulators or others where we are required or authorised by law

We do not sell personal information.

Overseas disclosure. Some of our service providers store or process information outside Australia, including in the United States. This includes Google (analytics, tag management, reCAPTCHA and web fonts) and video and social platforms. Before we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs, or we rely on another exception under the Privacy Act.

Cookies

How we use cookies and analytics

Our website uses cookies and similar technologies. Cookies are small files stored on your device that help the site work, remember your preferences and show how visitors use it. Depending on the choices you make in our cookie settings, the following may be used:

• Strictly necessary cookies, which the site needs to work and to keep forms secure.
• Analytics cookies, from Google Analytics and Google Tag Manager, which measure traffic and usage.
• Security cookies, from Google reCAPTCHA, which help stop spam and automated abuse of our forms.
• Embedded content cookies, which may be set by YouTube, Vimeo or social media content when you play or interact with it.

You can change your cookie preferences using the cookie settings on our website, or through your browser settings. Blocking some cookies may affect how parts of the site work. Google’s privacy policy is at policies.google.com/privacy.

Security and retention

How we protect your information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include access controls, staff confidentiality obligations and secure hosting arrangements. No system is completely secure, so we cannot guarantee absolute security.

We keep personal information only for as long as it is needed for the purposes in this policy or as required by law. When it is no longer needed, we securely destroy it or de-identify it.

If an eligible data breach occurs, we will assess it and, where required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act, notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

Your rights

Access, correction and your choices

You can ask to access the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable time, generally within 30 days, and may need to verify your identity first. Access is generally free, but we may charge a reasonable fee for retrieving large volumes of information. Where the Privacy Act allows us to refuse access, we will tell you why.

You can opt out of marketing emails at any time using the unsubscribe link in them or by contacting us.

Complaints

Privacy complaints

If you think we have mishandled your personal information, please contact our privacy team. We will acknowledge your complaint, investigate it and respond in writing. If you are not satisfied with our response, you can make a complaint to the OAIC at www.oaic.gov.au.

Changes

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, our technology or the law. The current version is always published on this page, and the date at the top shows when it was last updated.