HB Information Technology handles personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

HB Information Technology is the IT division and a trading name of HB International Group Pty Ltd ("we", "us", "our"). We provide managed IT services, IT infrastructure, cyber security, cloud and web services, and telephone and VoIP services to businesses.

This policy explains what personal information we collect, why, how we use and protect it, and how you can access it, correct it or make a complaint. It applies to our clients and their staff, prospective clients, suppliers, visitors to hbit.com.au, and anyone who contacts us.

We collect only the personal information we need to provide and manage our services. Depending on how you deal with us, this may include:

• Contact details: name, job title, employer, business address, email address and phone numbers.
• Account and service details: user names, email accounts, device and licence assignments, service numbers, and records of the services we provide to you or your organisation.
• Support records: support tickets, emails, call notes, remote support session logs, and information you give us to resolve an issue.
• Technical information: device names, IP addresses, hardware and software details, system logs and monitoring alerts from systems we manage.
• Telephone and VoIP service information: service numbers, call records and usage data needed for billing and fault resolution.
• Billing information: billing contacts, invoices and payment records. Clients pay us by direct deposit, so we do not collect payment card details.
• Supplier and contractor details: contact details and the bank account details needed to pay you.

We do not intentionally collect sensitive information (such as health information or racial or ethnic origin). If we need it for a specific reason, we will ask for your consent first.

We usually collect personal information directly from you, for example when you call or email us, log a support request, start a remote support session, sign a service agreement, or meet with us. We also collect it from:

• your employer or organisation, when it engages us and gives us details of its staff and systems;
• the systems we manage for our clients, through monitoring, management and security tools;
• suppliers and distributors, when we order products or services on your behalf;
• publicly available sources, such as business websites and directories.

If you give us personal information about another person, please make sure they know you have done so and how they can contact us.

We collect, hold, use and disclose personal information to:

• provide, monitor, maintain and secure the IT, cloud, telephone and VoIP services our clients engage us for;
• respond to support requests and enquiries;
• verify the identity of people who ask us to make changes to accounts, systems or services;
• order and manage products, licences and services from our suppliers on our clients' behalf;
• invoice, collect payments and pay our suppliers;
• manage our relationships with clients, suppliers and contractors;
• detect and respond to security incidents and fraud;
• meet our legal, regulatory, insurance and accounting obligations; and
• tell you about our services, where you have not opted out (see Direct marketing).

We will not use or disclose personal information for another purpose unless you consent, you would reasonably expect it, or the law requires or permits it.

We do not use computer programs to make decisions that significantly affect individuals' rights or interests.

When we manage IT systems for a client, we may be able to access personal information held in those systems, such as emails, files, user accounts and business records. That information belongs to our client, and our client is responsible for it under its own privacy obligations.

We access client data only when needed to deliver the services our client has engaged us for, or as our client instructs. We do not use it for our own purposes, and we do not sell it. Access is limited to authorised HB IT staff.

If your question is about personal information held by one of our clients, please contact that organisation directly. We will assist them to respond.

We disclose personal information only as needed for the purposes above, to:

• distributors, vendors and carriers we order products, licences and telephone services from on our clients' behalf;
• cloud, software and service providers we use to run our business, such as email, remote monitoring and management, ticketing, backup and accounting platforms;
• contractors who help us deliver services, under confidentiality obligations;
• our professional advisers, auditors and insurers;
• government agencies, regulators and law enforcement, where the law requires or permits it; and
• anyone else you or our client authorises.

We require the third parties we engage to protect personal information and use it only for the purpose we provided it. We do not sell personal information.

Overseas disclosure

Our website, hbit.com.au, is hosted by a provider in the United States, so information collected through the website, such as server logs and IP addresses, is stored there.

All other personal information we hold is stored and processed in Australia and is not disclosed overseas.

If this changes, we will update this policy to name the countries involved before any disclosure takes place.

Storage and security

We hold personal information in secure cloud services and business systems. HB Information Technology holds CyberCert SMB1001 Gold (Level 3) certification, and we protect personal information with technical and organisational controls aligned to it, including multi-factor authentication, access limited to staff who need it, and secure storage and transmission.

We keep personal information only as long as we need it for the purposes in this policy or as the law requires, for example tax and business records. When we no longer need it, we securely destroy or de-identify it.

Our website

You can browse hbit.com.au without telling us who you are. Our website embeds a Google Maps view, and Google may set cookies and collect usage data when that map loads, under Google's own privacy policy.

We use Google Analytics to understand how visitors use our site. It collects information such as pages visited and approximate location, not your name.

Our website links to other sites, including our remote support portal. Those sites have their own privacy practices.

You can block or delete cookies in your browser settings.

Direct marketing

We may send our clients and business contacts information about our services. Every marketing email includes a way to unsubscribe, and you can opt out at any time by emailing

support |AT| hbit.com.au. We do not sell or share your details with others for their marketing.

Opting out of marketing does not stop service messages, such as support updates, security alerts and invoices.

Access and correction

You can ask for access to the personal information we hold about you, or ask us to correct it, by contacting us (details below). We will need to verify your identity first.

We will respond within 30 days. We do not charge for a request, but may charge a reasonable fee to provide access where the request is large. If we refuse access or correction, we will tell you why in writing and how to complain.

Data breaches

If a data breach involving personal information we hold is likely to result in serious harm, we will contain and assess it promptly and notify affected individuals and the Office of the Australian Information Commissioner (OAIC), in line with the Notifiable Data Breaches scheme. Where a breach affects data we manage for a client, we will notify that client without delay so it can meet its own obligations.

Complaints

If you think we have mishandled your personal information, please contact us in writing (details below) and tell us what happened. We will acknowledge your complaint within 5 business days, investigate it, and give you a written response within 30 days.

If you are not satisfied with our response, you can complain to:

• the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992; or
• for complaints about our telephone or VoIP services, the Telecommunications Industry Ombudsman: tio.com.au, 1800 062 058.

Changes and contact

We review this policy at least once a year and publish the current version on hbit.com.au. Last updated: 9 October 2026.

Contact our Privacy Officer:

• HB Information Technology (HB International Group Pty Ltd)
• Suite 173, Level 17, 123 Pitt Street, Sydney NSW 2000
• Phone: 02 8064 7466
• Email: support |AT| hbit.com.au (subject: "Privacy")