Privacy Policy
Privacy Policy
Last updated: September 2026
VGA Co Pty Ltd is committed to protecting the privacy of visitors to this website. This policy sets out the personal information we collect, the purposes for which we collect it, the parties to whom it may be disclosed, and the rights available to you in relation to it. This policy applies to this website only. Personal information and operational data handled in the course of a client engagement are governed by the terms of the applicable services agreement and our internal data handling policy.
VGA Co Pty Ltd is committed to protecting the privacy of visitors to this website. This policy sets out the personal information we collect, the purposes for which we collect it, the parties to whom it may be disclosed, and the rights available to you in relation to it. This policy applies to this website only. Personal information and operational data handled in the course of a client engagement are governed by the terms of the applicable services agreement and our internal data handling policy.
1. Contact
1. Contact
1. Contact
Enquiries, access requests, and complaints relating to privacy should be directed to hello@vga.company. VGA Co Pty Ltd is based in Brisbane, Australia.
Enquiries, access requests, and complaints relating to privacy should be directed to hello@vga.company. VGA Co Pty Ltd is based in Brisbane, Australia.
2. Information we collect
2. Information we collect
2. Information we collect
Information you provide directly. The contact form on this website collects your name, your email address, and the content of your message. Where a message contains additional personal information — such as your employer, your role, or details of a business matter — that information is collected and retained as part of the enquiry.
Information collected automatically. Our hosting and infrastructure providers record standard technical information when the site is accessed. This includes pages visited, the referring website, browser and device type, and an approximate geographic location derived from IP address.
We do not currently operate analytics software on this website. Should analytics be introduced, the categories of information collected would be those described above, and this policy would be revised to identify the provider.
Information you provide directly. The contact form on this website collects your name, your email address, and the content of your message. Where a message contains additional personal information — such as your employer, your role, or details of a business matter — that information is collected and retained as part of the enquiry.
Information collected automatically. Our hosting and infrastructure providers record standard technical information when the site is accessed. This includes pages visited, the referring website, browser and device type, and an approximate geographic location derived from IP address.
We do not currently operate analytics software on this website. Should analytics be introduced, the categories of information collected would be those described above, and this policy would be revised to identify the provider.
3. Cookies
3. Cookies
3. Cookies
This website sets only those cookies necessary for its operation. We do not use tracking, profiling, or advertising cookies.
This website sets only those cookies necessary for its operation. We do not use tracking, profiling, or advertising cookies.
4. Purposes of collection
4. Purposes of collection
4. Purposes of collection
Personal information submitted through the contact form is used to respond to your enquiry. Contact details are also recorded in a private register of business contacts, which enables us to maintain a record of approaches made to the practice and the subject matter of each. You may request removal from this register at any time by contacting us at the address above. VGA Co does not operate a mailing list and does not send unsolicited marketing communications. Contact initiated by us is in direct response to an enquiry received. Technical information collected automatically is used to understand aggregate site traffic. It is not used to identify individual visitors.
Personal information submitted through the contact form is used to respond to your enquiry. Contact details are also recorded in a private register of business contacts, which enables us to maintain a record of approaches made to the practice and the subject matter of each. You may request removal from this register at any time by contacting us at the address above. VGA Co does not operate a mailing list and does not send unsolicited marketing communications. Contact initiated by us is in direct response to an enquiry received. Technical information collected automatically is used to understand aggregate site traffic. It is not used to identify individual visitors.
5. Disclosure
5. Disclosure
5. Disclosure
We do not sell personal information, and we do not disclose it to third parties for their own purposes. Personal information is handled by the following service providers in the course of operating this website and our business:
Framer — website hosting and processing of contact form submissions
Cloudflare — hosting of downloadable resources, together with security and performance services
Microsoft — email and document storage We may also disclose personal information where disclosure is required or authorised by law.
We do not sell personal information, and we do not disclose it to third parties for their own purposes. Personal information is handled by the following service providers in the course of operating this website and our business:
Framer — website hosting and processing of contact form submissions
Cloudflare — hosting of downloadable resources, together with security and performance services
Microsoft — email and document storage We may also disclose personal information where disclosure is required or authorised by law.
6. Overseas disclosure
6. Overseas disclosure
6. Overseas disclosure
Each of the providers identified in section 5 stores data on servers located outside Australia, including in the United States and the European Union. By submitting information through this website, you consent to that information being stored and processed overseas.
Each of the providers identified in section 5 stores data on servers located outside Australia, including in the United States and the European Union. By submitting information through this website, you consent to that information being stored and processed overseas.
7. Retention
7. Retention
7. Retention
Enquiries that do not result in an engagement are retained for two years from the date of last contact, after which they are deleted.
Information connected to a client engagement is retained for seven years, consistent with our record-keeping and taxation obligations.
Technical information collected automatically is retained by our infrastructure providers in accordance with their own retention periods, generally a period of months.
Enquiries that do not result in an engagement are retained for two years from the date of last contact, after which they are deleted.
Information connected to a client engagement is retained for seven years, consistent with our record-keeping and taxation obligations.
Technical information collected automatically is retained by our infrastructure providers in accordance with their own retention periods, generally a period of months.
8. Security
8. Security
8. Security
Personal information is held in systems protected by access controls and multi-factor authentication.
We take reasonable steps to protect the information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. No method of transmission over the internet is entirely secure, and we cannot guarantee the security of information transmitted to us.
Personal information is held in systems protected by access controls and multi-factor authentication.
We take reasonable steps to protect the information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. No method of transmission over the internet is entirely secure, and we cannot guarantee the security of information transmitted to us.
9. Access and correction
9. Access and correction
9. Access and correction
You may request access to the personal information we hold about you, and may request that it be corrected, by contacting hello@vga.company.
Requests are acknowledged within a small number of business days and responded to within 30 days. No fee is charged.
You may also request deletion of the personal information we hold about you. We will action such requests except where retention is required for legal or taxation purposes, in which case we will advise you of the information retained and the basis for its retention.
You may request access to the personal information we hold about you, and may request that it be corrected, by contacting hello@vga.company.
Requests are acknowledged within a small number of business days and responded to within 30 days. No fee is charged.
You may also request deletion of the personal information we hold about you. We will action such requests except where retention is required for legal or taxation purposes, in which case we will advise you of the information retained and the basis for its retention.
You may request access to the personal information we hold about you, and may request that it be corrected, by contacting hello@vga.company.
Requests are acknowledged within a small number of business days and responded to within 30 days. No fee is charged.
You may also request deletion of the personal information we hold about you. We will action such requests except where retention is required for legal or taxation purposes, in which case we will advise you of the information retained and the basis for its retention.
10. Complaints
10. Complaints
10. Complaints
Complaints regarding our handling of personal information should be directed to hello@vga.company. Complaints are acknowledged within a small number of business days and responded to within 30 days.
If you are not satisfied with our response, you may refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.
Complaints regarding our handling of personal information should be directed to hello@vga.company. Complaints are acknowledged within a small number of business days and responded to within 30 days.
If you are not satisfied with our response, you may refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.
11. Amendments
11. Amendments
11. Amendments
This policy will be revised as our practices change. The date of the most recent revision appears at the head of this document.
Where an amendment materially affects the handling of personal information already collected from you, we will notify you directly.
This policy will be revised as our practices change. The date of the most recent revision appears at the head of this document.
Where an amendment materially affects the handling of personal information already collected from you, we will notify you directly.
