Privacy Policy

Edge Integrated Systems Pty Ltd ("Edge", "we", "us") is based in Gladstone, Queensland, Australia. Our website is https://edgeintegratedsystems.com.au.

This policy explains what personal information our website collects, why we collect it, where it is held, who can access it, how long we keep it and what you can ask us to do about it.

It covers both parts of our business. EDGE Technology is our proprietary governance and decision-support technology for structured, evidence-based organisational decisions. EDGE Consulting is our Organisational Innovation & Digital Capability Advisory division, which helps organisations understand workforce needs, review procedures and workflows, assess digital capability, identify innovation opportunities and develop practical improvement recommendations. EDGE Consulting is a division of Edge Integrated Systems Pty Ltd. It is not a separate company, and this policy applies to the website and to enquiries for both parts of the business.

This policy describes our actual practices and is written with reference to the Australian Privacy Principles. It is not a certification, an audit opinion, a guarantee of any legal outcome or a promise of absolute security.

We collect personal information through the public parts of this website only when you choose to send it to us:

• Consulting enquiries: your name, organisation name and email address, and, if you provide them, your position or role, phone number, preferred contact method, a description of your requirements, any further comments, and your answers to five short discovery questions. We record the date and time and generate a reference code.
• Demonstration requests and pilot applications: your organisation name, email address and industry, and, if you provide them, your contact name and a short message.
• Client access requests: your organisation name and industry; your name, role, email address and phone number if you provide them; and the information you give us about your use case, operational problem, expected outcomes, current systems, site count, timeline, budget range and decision authority.
• Abuse-prevention information: a small control record described in section 4.

We do not collect payment card details, identity documents or health information through the public parts of this website, and we ask that you do not send them to us.

We use the information you provide for these purposes only:

• to respond to your enquiry and understand your requirements;
• to prepare for and arrange a demonstration or a pilot discussion;
• to review a request for access to the EDGE platform and, where approved, to invite you to create an account;
• to keep a record of the enquiries and requests we receive;
• to prevent automated and repeated abuse of our public forms;
• to meet our own record-keeping and governance obligations.

We do not sell, rent or trade your information, and we do not use it for advertising. We do not add you to a mailing list and we do not send marketing email.

To limit automated and repeated submissions to our public forms, our systems keep a small control record each time one of those forms is submitted. That record contains a one-way scrambled value derived from your email address (the address itself is not stored in it), the organisation name you provided, how many submissions were made in the current hour, and timestamps. It is used only to apply a submission limit of three per hour per address, and for no other purpose. You can ask us to remove it.

When you submit a demonstration request, a pilot application or a client access request, we send a confirmation email to the address you supplied. Where we approve a client access request, we send an invitation so that the contact can create a platform account. These emails are sent using the email service provided by our platform.

Information you submit through the public forms on this website is not sent to any artificial intelligence service. Artificial intelligence capabilities are used within the EDGE platform where clients choose to use them, under separate client agreements, and are subject to human review.

The following describes the technical information our website and its platform handle:

• The website pages themselves do not set cookies. The platform client software stores small technical values in your browser’s local storage so that the site works correctly. One internal operator screen uses short-lived browser session storage; visitors do not reach that screen.
• Usage analytics are collected for this website. They are switched on by default by the platform and record general usage such as page views and visits, so that we can see whether the site is working and being found. Enquiry content is not included in that analytics data. The platform’s documentation does not state whether its analytics sets cookies, and this policy does not claim that it does not.
• The platform also offers an optional session-replay capability, which must be deliberately switched on and is not active by default. We have not confirmed its current status for this website, so this policy does not claim that session replay is switched off. If it is switched on, it must be disclosed here.
• The website loads its fonts from Google’s font service (fonts.googleapis.com and fonts.gstatic.com). As with any such request, Google receives your device’s IP address when the page loads. Fonts are used to display the site as designed; no enquiry information is sent with that request.
• Some areas of the website, such as review and environment-report areas, are reached with an access code and are intended only for the parties concerned.

This website and application are hosted on the Base44 platform. Base44 provides the application hosting, the database in which enquiry and request records are held, the processing of form submissions, the email service used for confirmations and invitations, and the usage analytics described in section 7. We access records through the platform’s administration controls.

Base44 publishes a list of the third-party vendors that handle data, and its Trust Center is the authoritative source for that list. Other than the platform services described in this policy and Google’s font service described in section 7, we do not use third-party services to handle enquiry or request information.

The platform’s documentation states that application data is stored in the United States by default, and that storage in the European Union or the United Kingdom can be selected on its Enterprise plans. Australia is not offered as a storage location. The platform also states that its storage-region setting controls where data is stored, not where it is processed.

We therefore cannot represent that your information stays in Australia, or that it is processed only in Australia. Information submitted through this website is likely to be stored, and may be processed, outside Australia.

Storage location is one of the items we are confirming before this policy is finalised. We will state the location that applies to our workspace here once it is confirmed.

Consulting enquiries, demonstration requests, pilot applications and client access requests are held in restricted records. Direct access is limited to administrators by the platform’s access rules; ordinary users and visitors cannot read, list, change or delete them, and no public page displays enquiry information.

When a form is submitted, our platform also writes an internal audit entry as part of our governance record. That entry records the submission, the organisation, the source page and the email address supplied, so that we can evidence that the enquiry was received. These audit entries are append-only by design: the platform disables change and delete on them, so they cannot be edited or removed through normal administration. They are held as governance records and are not used for marketing or for any purpose beyond evidencing the enquiry.

Information you send is transmitted over an encrypted connection, and the platform applies authentication and access controls to its administration functions. We limit access to your information to the people who need it to respond to you.

We cannot guarantee absolute security of information held on any online system, and we do not claim to. If we become aware of a breach affecting your information, we will act in line with our obligations under applicable law.

Our current retention practice is:

• Consulting enquiries, demonstration requests, pilot applications and client access requests that do not lead to an engagement: reviewed twelve months after the last contact, and ordinarily removed within twenty-four months of the last contact, subject to applicable obligations.
• Records connected to an active engagement: retained for the engagement and afterwards in accordance with applicable contractual, accounting and legal obligations.
• Abuse-prevention records: reviewed quarterly, and removed where they have not been updated for ninety days.
• Append-only audit entries: retained as governance records. As explained in section 10, they cannot be changed or removed through normal administration, so we cannot promise that they will be deleted on request. Where a request relates to an audit entry, we will tell you what we can and cannot do.

Deletion is carried out by our administrators; there is no automatic deletion process. Removal is not immediate and is not always complete: deleted records remain recoverable by the platform for up to thirty days before permanent removal, and backup copies, where the account’s plan provides them, are retained for the plan’s backup period. Backups cover stored records only, not uploaded files or user accounts.

You may ask us to show you the personal information we hold about you, to correct it, or to remove it. Contact us using the details in section 14 and we will respond within a reasonable period. We may need to confirm your identity before responding. Where we cannot remove a record, or cannot remove all copies of it, we will tell you what we can and cannot do and why.

If you are concerned about how we have handled your personal information, please contact us first using the details in section 14, describing the issue. We will acknowledge your complaint and work through it with you. If you are not satisfied with our response, you may take the matter to the Office of the Australian Information Commissioner (oaic.gov.au), which handles privacy complaints about Australian organisations.

Edge Integrated Systems Pty Ltd, Gladstone, Queensland, Australia. Website: https://edgeintegratedsystems.com.au. Privacy and enquiries: info@edgeintegratedsystems.com.au.

We may update this policy as our practices, our platform or our legal obligations change. The version published on this website is the current version, and the date of that version is shown at the top of this page.