Privacy Policy

Effective Date: February 22, 2026
Last Updated: February 22, 2026

1. Who We Are

Oranj ("we", "our", "us") provides IT services, AI services, and cybersecurity services in Australia.

We are committed to handling personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable laws.

Contact:

• Email: contact@oranj.com.au

2. Scope

This Privacy Policy explains how we collect, hold, use, and disclose personal information when you interact with:

• our website and online forms;
• our sales and support communications;
• our Facebook and Messenger-based engagement workflows.

3. Data We Collect

We collect two broad categories of information:

1. Information you provide directly (such as name, email, phone, company, and enquiry details).
2. Information collected automatically or through platforms (such as device/browser data, cookies, PSID, thread identifiers, and interaction metadata).

Depending on your interaction with us, we may collect:

• contact and account details;
• service enquiry and conversation content (including Messenger messages and timestamps);
• lead, pipeline, and engagement information;
• billing or transaction-related information where required;
• compliance, consent, and audit records;
• technical and diagnostic logs.

4. How We Collect Data

We collect personal information when you:

1. submit forms, book calls, send messages, or email us;
2. interact with our Facebook Page, Messenger entry points, or connected campaigns;
3. use our website (through cookies and analytics tools);
4. interact with our team during delivery, support, or onboarding.

We may also receive information from trusted third parties (for example, platform providers, analytics tools, CRM systems, and referral partners) where permitted by law.

5. Why We Use Data

We use data to:

1. provide requested services, resources, and support;
2. manage customer relationships, qualification, and service delivery;
3. operate and improve our website, systems, and communications;
4. maintain security, prevent misuse, and enforce internal policies;
5. meet legal, regulatory, and contractual obligations.

We do not sell personal information to data brokers, and we do not use personal information for purposes that are inconsistent with this policy.

6. Legal Bases (Where Applicable)

Where required, our handling of personal information is based on:

1. your consent;
2. performance of a contract or pre-contract steps;
3. our legitimate interests in running and improving our services;
4. compliance with legal obligations.

Where practical, you may choose to interact with us anonymously or by pseudonym. In some cases, that may limit our ability to provide full services.

7. Cookies, Analytics and Similar Technologies

We use cookies and similar tools to operate our website, understand usage patterns, and improve performance.

You can control cookies via browser settings. Disabling cookies may affect site functionality.

8. Direct Marketing

We may send service updates, event information, and marketing communications where permitted by law, including the Spam Act 2003 (Cth).

You can opt out at any time by using unsubscribe links or contacting us at contact@oranj.com.au.

9. Disclosure of Personal Information

We may disclose personal information to:

1. technology, hosting, communications, and analytics providers;
2. professional advisers (for example legal, accounting, and compliance advisers);
3. platform providers including Meta where needed for Messenger workflows;
4. authorities, courts, or regulators where required or authorised by law;
5. successor entities in a merger, acquisition, or business transfer.

We seek to disclose only what is reasonably necessary and use contractual and operational controls with service providers where appropriate.

10. Overseas Disclosure

Some service providers we use may store or process personal information outside Australia (for example in the United States or other jurisdictions where our vendors operate).

When this occurs, we take reasonable steps to ensure overseas recipients handle personal information in a way that is consistent with Australian privacy requirements.

11. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

Controls may include encryption, access controls, monitoring, secure configuration, and audit logging.

12. Retention

We keep personal information only for as long as needed for business and legal purposes, then securely delete or de-identify it.

Where practical, verified deletion requests are targeted for completion within 30 days.

13. AI Privacy Controls

1. AI inputs are limited to conversation excerpts and required lead metadata.
2. We aim to exclude high-risk personal information that is not needed for the task.
3. AI outputs are assistive; human review is used for sensitive decisions and communications.
4. Compliance, opt-out, and deletion controls apply across AI-enabled workflows.

14. Access and Correction

You may request access to the personal information we hold about you, and ask us to correct inaccurate, out-of-date, incomplete, irrelevant, or misleading information.

To make a request, contact contact@oranj.com.au. We may ask for proof of identity before actioning your request.

15. Your Rights and Choices

Subject to applicable law, you may request:

1. access and correction;
2. deletion (where legally available);
3. restriction or objection to certain processing activities;
4. opt-out from marketing communications.

We target acknowledgment of privacy requests within 72 hours and completion within 30 days where reasonably practicable and legally permitted.

16. Facebook Data Deletion

You can request deletion by following our published instructions: /facebook-data-deletion.html

17. Complaints

If you have a privacy complaint, contact us at contact@oranj.com.au with details of your concern.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

18. Children

Our services are not directed to children under 13, and we do not knowingly collect personal data from children under 13.

19. Third-Party Links

Our website and communications may include links to third-party sites and services. Their privacy practices are governed by their own policies, not this one.

20. Changes to This Policy

We may update this policy from time to time to reflect legal, operational, or technology changes. The latest version will be published on this page with an updated "Last Updated" date.

21. Contact

Privacy questions or requests: contact@oranj.com.au