1. Who we are

Knowledge Foundry Pty Ltd is the operator of the Knowledge Foundry platform and the https://knowledge-foundry.com website. Our contact address for privacy inquiries is hello@knowledge-foundry.com.

For inquiries from customers about processing performed under a master services agreement, we act as processor on the customer’s instruction. For inquiries about our own collection (for example, from a person who submits our demonstration form), we act as controller.

2. What information we collect

We collect only what we need. In practice this falls into three groups.

2.1 Website and contact-form data

Name, work email, organization, role, country, and the details you provide in a demonstration request or an email to us.
Phone number, only if you choose to provide it.
Basic technical data associated with your visit. IP address, browser type, timestamps, and referring URL. collected via server and analytics logs.

2.2 Customer platform data

Authentication identifiers for named users a customer authorizes to use the platform.
Content that customers or their authorized users choose to upload, produce, or store within the platform.
Operational logs required to run and secure the service.

2.3 Business-to-business correspondence

Records of inquiries, meetings, proposals, and contracts with customers and prospective customers.

We do not deliberately collect sensitive information (as defined by the Privacy Act). If a customer requires the platform to hold sensitive information as part of their program content, that is addressed in the customer agreement, not this policy.

3. How we collect information

Directly, when you submit a form, send us an email, or use the platform.
Automatically, through the operation of the website and the platform.
From authorized third parties, for example an authentication provider a customer uses for single sign-on.

4. Why we collect it

We use personal information for the following purposes.

To respond to inquiries and schedule demonstrations.
To provide the platform and support to authorized users.
To secure the platform, detect misuse, and meet our own legal obligations.
To send occasional operational and account communications to a customer’s designated administrators.
To improve the platform, using aggregate operational metrics that do not identify individuals.

We do not sell personal information. We do not pass information collected through the demonstration form to a marketing-automation platform, and we do not use it to add you to a broadcast mailing list.

5. Who we disclose it to

We disclose personal information only where necessary and only to the following categories of recipient.

Named subprocessors that operate infrastructure or narrowly defined services on our behalf, such as our cloud hosting provider. A summary is on our compliance-posture page, and the full register is available on request.
Professional advisers, such as legal or accounting advisers, who are bound by confidentiality.
Regulators, law enforcement, or courts where required by law.
A successor entity in the event of a corporate transaction, subject to continued protection consistent with this policy.

6. Overseas disclosure

Production customer data for Australian tenants is processed and stored in Australia (AWS ap-southeast-2, Sydney). We do not routinely replicate customer content overseas.

A small number of operational subprocessors, such as specific error-tracking or transactional-email providers, may process limited technical or contact data outside Australia. Where that occurs, we rely on the recipient’s own privacy protections and, where required, contractual clauses. The current subprocessor register lists the relevant recipients and jurisdictions.

For customer end users in the European Union or the United Kingdom, we execute a data-processing agreement incorporating the Standard Contractual Clauses where a transfer occurs.

7. How long we keep it

We retain personal information for as long as we have a legitimate purpose for holding it. Website and contact-form data are retained for the period reasonably needed to respond to your inquiry and to maintain a record of that correspondence.

Customer platform data is retained for the term of the customer’s agreement and a defined tail described in the data-processing agreement. On termination, we support export and deletion as agreed with the customer.

8. How we protect it

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include encryption in transit and at rest, per-tenant isolation, principle-of-least-privilege access, staff training, and monitoring. See our security page for a fuller description.

9. Your rights

Under the Australian Privacy Principles, you may:

Ask us what personal information we hold about you.
Ask us to correct information that is inaccurate, out of date, incomplete, or misleading.
Ask us to delete information we no longer need to hold.
Make a complaint about how we have handled your information.

Contact us at hello@knowledge-foundry.com. We aim to acknowledge requests within five business days and to substantively respond within thirty days. If you are an authorized user of a customer’s platform tenancy, please raise the request with your customer administrator in the first instance; where we are acting as processor we support the customer in responding to you.

10. Complaints

If you are dissatisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

11. Cookies and analytics

The website uses a small number of first-party cookies to run essential functionality. Aggregate analytics are used to understand usage patterns; they do not identify individual visitors. Where we run advertising campaigns, we may use conversion measurement that fires only after a valid demonstration-form submission and does not carry identifying content into the ad platform.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “last updated” date at the top of the page. Where a change is material to customers, we will notify designated customer administrators directly.

13. Contact

Privacy inquiries: hello@knowledge-foundry.com
Legal entity: Knowledge Foundry Pty Ltd · ABN —

Privacy policy.