1. Who we are

"INFORM" refers to the INFORM Programme operating the website at informpulse.com. The data controller is the INFORM Programme administrator.

2. Lawful basis

We handle personal information under the Privacy Act 1988 (Cth), the Privacy and Personal Information Protection Act 1998 (NSW) and the Australian Privacy Principles (APPs).

3. What we collect

Contact and access-request information (name, email, organisation, role, jurisdiction, intended use).
Authentication information for authorised users of the data room and workflow portal.
Server logs (IP address, user agent, timestamp, page accessed) for security and audit purposes.
Audit-log entries for data-room actions (login, document access, download).

4. Why we collect it

To assess and provision restricted access, to communicate with enquirers, to maintain a security audit log and to support governance obligations. We do not sell personal information.

5. How we hold it

Personal information is held in databases accessible only to authorised personnel. Passwords are stored as cryptographic hashes; we do not retain plaintext passwords. Session cookies are configured Secure, HttpOnly and SameSite=Strict.

6. Retention

We retain access requests and audit logs for the period required to support governance, security and grant / investor diligence obligations, typically not less than 12 months.

7. Overseas disclosure

We may use cloud hosting and email services that involve data transfer outside Australia. Where this occurs we take reasonable steps to ensure the recipient handles personal information consistent with the APPs.

8. Access and correction

You may request access to or correction of personal information we hold about you by writing to admin@informpulse.com.

9. Complaints

If you believe we have not complied with the APPs, please contact us first. You may also contact the Office of the Australian Information Commissioner (OAIC) or, in respect of NSW public-sector matters, the Information and Privacy Commission NSW.

10. Notifiable Data Breaches

We have processes to assess and respond to eligible data breaches under Part IIIC of the Privacy Act 1988 (Cth).

11. Changes

We may update this policy from time to time. The current version is the version published on this page.

Privacy Policy