Privacy Policy

---

Roctensor Pty Ltd is an innovative provider of software and hardware technology specifically designed to meet the technical assurance requirements of high-risk, complex and remote mine sites in Australia. Roctensor is based in WA, and therefore abide by state and federal laws regarding privacy. Roctensor does not collect private information such as date of birth, credit card numbers, bank account details, or document IDs about our clients, neither does it collect Sensitive Information. Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

To remain committed to providing quality services to clients however, Roctensor collects Personal Information such as name, email, phone number, and place of work. This is mainly to customise and configure the software solutions to clients and their organisation’s needs. The Privacy Act defines Personal Information as any information or an opinion that identifies an individual. To demonstrate our ongoing obligations to you in respect of how we manage your Personal Information, we have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The NPPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information. A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/.

We take cybersecurity seriously. Our active, robust, and continually improving cybersecurity program ensures the security of our customer’s data and the services we provide. We maintain comprehensive security policies and procedures that are regularly reviewed and updated to ensure current and effective cybersecurity practices. Accountability is enforced through utilizing only tier 1 reputable service providers such as Amazon Web Service. Our centralized logging and monitoring systems help identify malicious activity and vulnerabilities, while regular security training ensures all personnel are equipped to handle security challenges. Patching and vulnerability management are prioritized, with critical patches deployed promptly to maintain security. We ensure customer data is protected from unauthorized access by storing it in a secure production environment and limiting access to essential personnel. Access control, multi-factor authentication, and strict data use policies are enforced, requiring customer consent for support purposes. Customer data is protected at rest and in transit by encryption. We use secure, encrypted and private Amazon Web Service servers to store the information input to our software. This information is only available to you, and those authorised by you. We do not share, distribute, or publish your personal information or the information you input into our software products. Your, or your organisation’s, credit card details is not collected or stored by us. For the purpose of subscription payments, we use third party financial processing platforms such as Stripe which is used by Google, Shopify, Amazon and AirBnB, etc. Stripe does not share private or personal information of you or your organisation with us. 

We may collect Personal Information about you from correspondence with yourself, with your employer, by telephone and facsimile, by email, via our website www.GeoRis.com.au, from other publicly available sources, cookies, or from third parties. We collect your Personal Information for the primary purpose of providing our services, training, or marketing. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing. When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it. Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure. When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information. However, most of the Personal Information is or will be stored in client files which will be kept by us for a minimum of 7 years. You may access the Personal Information we hold about you, and to update and/or correct it, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing. We will not charge any fee for your access request but may charge an administrative fee for providing a copy of your Personal Information. In order to protect your Personal Information we may require identification from you before releasing the requested information. It is an important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you. This Policy may change from time to time and is available on our website. If you have any queries or complaints about our Privacy Policy please contact us using the Contact page on this website.