Legal & Trust Center

AI Solution Technologies Pty Ltd (“AI Solution Technologies”, “we”, “us” or “our”) is committed to protecting the privacy and security of the personal information we hold. This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you visit our website at aisolutiontechnologies.com, engage our services, or otherwise interact with us.

We handle personal information in accordance with the Privacy Act 1988 (Cth) (the “Privacy Act”) and the Australian Privacy Principles (“APPs”) set out in Schedule 1 to that Act. Where we handle the personal data of individuals located in the European Union, the United Kingdom, or other jurisdictions, we also take steps to comply with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”), as described in our GDPR Compliance Statement.

By using our website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether recorded in a material form or not. “Sensitive information” is a subset of personal information and includes information about an individual’s health, racial or ethnic origin, religious beliefs, and similar categories, which attracts a higher level of protection under the Privacy Act.

Depending on how you interact with us, the categories of personal information we may collect include:

• Identity and contact details — name, job title, employer, business email address, business address and telephone number.
• Engagement information — details relating to enquiries, proposals, statements of work, projects, correspondence and the services we provide to you or your organisation.
• Technical and usage data — IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed and other analytics data collected via cookies and similar technologies (see our Cookies Policy).
• Recruitment information — where you apply for a role, your résumé, work history, qualifications and references.
• Client project data — in the course of delivering data, analytics and AI services, we may process data on behalf of our clients that could contain personal information. We generally act as a processor (or “APP entity” handling information on behalf of another) in respect of such data, and handle it under the terms of our client contracts and Data Processing Agreement.

We generally do not collect sensitive information unless it is reasonably necessary for our functions or activities and you have consented, or the collection is otherwise permitted by law.

We collect personal information in a number of ways, including:

• directly from you, when you contact us, complete a form, request a consultation, subscribe to communications, or engage our services;
• automatically, through cookies and analytics technologies when you use our website;
• from third parties, such as your employer, our business partners, referrers, publicly available sources and professional networking platforms; and
• through the course of providing services to our clients.

Where it is reasonable and practicable to do so, we will collect personal information directly from the individual concerned.

We collect, hold and use personal information for purposes connected with our business, including to:

• respond to enquiries and provide requested information;
• provide, manage and improve our consulting, data, analytics and AI services;
• manage our relationship with clients, prospects, suppliers and partners;
• process and administer contracts, projects and payments;
• send you administrative, service and (where permitted) marketing communications;
• operate, maintain, secure and improve our website and systems;
• recruit and assess candidates for employment or engagement;
• comply with our legal, regulatory and contractual obligations; and
• protect our rights, property and the safety of our people and others.

We will only use personal information for the primary purpose for which it was collected, for a directly related secondary purpose that you would reasonably expect, or where you have consented or the use is otherwise permitted or required by law.

We may send you marketing communications about our services where you have consented or where it is otherwise permitted under the Privacy Act and the Spam Act 2003 (Cth). Every commercial electronic message will identify us and include a functional unsubscribe facility. You may opt out of marketing communications at any time by using the unsubscribe link or by contacting us at info@aisolutiontechnologies.com.

We may disclose personal information to:

• our personnel, related entities and offices (including in the United Arab Emirates and the Kingdom of Saudi Arabia) on a need-to-know basis;
• service providers and contractors who assist us in operating our business, including hosting, cloud infrastructure, analytics, communications and professional advisers;
• our clients and their authorised representatives, where relevant to a project;
• third parties in connection with a proposed or actual sale, merger or reorganisation of our business; and
• government, regulatory or law enforcement bodies where required or authorised by law.

We require our service providers to protect personal information consistently with this Privacy Policy and applicable law. We do not sell personal information.

We operate internationally and use cloud and technology providers (such as Microsoft Azure and Amazon Web Services) that may store or process data in locations outside Australia, including in the United States, the European Union, the United Arab Emirates and the Kingdom of Saudi Arabia. Before disclosing personal information overseas, we take reasonable steps to ensure the overseas recipient handles the information in accordance with the APPs, or we rely on another basis permitted under APP 8, such as your consent.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Our safeguards include access controls, encryption in transit and at rest where appropriate, network security, staff training and information security governance aligned with recognised standards (including ISO/IEC 27001 and ISO/IEC 42001). No method of transmission or storage is completely secure; while we strive to protect your information, we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to satisfy legal, accounting or reporting requirements, and to resolve disputes. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

We maintain a data breach response plan. Where we experience an eligible data breach that is likely to result in serious harm to affected individuals, we will notify the affected individuals and the Office of the Australian Information Commissioner (“OAIC”) as required under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, please contact us using the details at the end of this Policy. We will respond within a reasonable period. We may need to verify your identity, and in limited circumstances permitted by law we may decline a request, in which case we will explain our reasons in writing.

Our website uses cookies and similar technologies to operate, analyse usage and improve your experience. For details about the cookies we use and how to manage them, please see our Cookies Policy.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

If you believe we have breached the APPs or otherwise mishandled your personal information, please contact our Privacy Officer using the details below. We will acknowledge your complaint and investigate it, and aim to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the OAIC at www.oaic.gov.au, by telephone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our website and takes effect from the date shown. This Privacy Policy is effective from 1 January 2026.