Privacy Policy

1. Scope of Information Collection & Non-Intrusive Principles

BUSINESS ARCHITECT GURU PTY LTD (referred to as "we", "us", "our", or "BUSINESS ARCHITECT GURU") is committed to protecting your privacy and business secrets when you visit our official portal (businessarchitectguru.net) or collaborate with us on enterprise architecture audits and application dependency scans. We strictly adhere to the highest compliance standards in accordance with the Commonwealth Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

When you browse, inquire, or utilize our website services, we may collect limited information under the following scenarios:

• Voluntary Form Submission: When you voluntarily submit an inquiry through our "Contact us" or registration forms, we collect basic contact information to provide precise architectural references. This includes your name, phone number, email address, targeted improvement areas (e.g., process mapping or ALEX agents), and your custom description of digital requirements.
• Interactive Tool Telemetry: When using the "AI Architecture Simulator" or other online audit checkers, our system acts non-intrusively, processing parameter inputs within your local browser Local Storage or isolated Session Cache. Unless you click "Submit Proposal," these values are never stored on our physical servers.
• Standard Server Logs: The website automatically records anonymous technical logs (such as IP addresses, browser versions, timestamps, and referral sources) to safeguard against DDoS incidents and evaluate performance.

2. Use of Collected Information & MECE Guidelines

Our collection and use of personal and commercial data are strictly limited to the following mutually exclusive, collectively exhaustive (MECE) business boundaries:

• Bespoke Proposal Engineering: Using submitted contact details, our senior consultants analyze your operational directions to draft customized blueprints for Enterprise Architecture (services-ea.html) or Digital Transformation (services-digital.html).
• Inquiry Follow-up: Contacting you via phone callbacks or email responses regarding your specific requests to schedule initial consultations.
• Service Diagnostic Optimization: Anonymously analyzing how users interact with our AI auditing tools (e.g., Risk Audit & Compliance Verification, review-risk.html) to continuously refine underlying semantic extraction algorithms.
• Statutory Compliance Requirements: Fulfilling mandatory obligations (such as financial or information security audits) under Victorian and Australian federal laws.

We strictly prohibit selling, renting, exchanging, or disclosing your personal or confidential commercial data to third-party marketing companies for promotional purposes.

3. Data Residency, Transit Encryption & Security Defenses

To prevent leaks and maintain institutional-grade confidentiality, we enforce robust data security safeguards:

First, Data Residency: All physical hosting and server storage run on isolated, high-security data centers in Melbourne, Australia, ensuring all activities remain strictly under local legal jurisdictions.

Second, Transport Encryption: The website utilizes SSL/TLS 256-bit data transit encryption. Every field submitted in our forms is converted into ciphertext before transmission to block eavesdropping or MITM vulnerabilities.

Third, Access Control: Only authorized consultants who have passed background verifications and executed non-disclosure agreements (NDA) have access to submitted inquiries under the "need-to-know" principle. All access histories are logged in unalterable security registries.

4. Statutory Rights & Data Sovereignty

Under the Privacy Act 1988 (Cth), you maintain complete data sovereignty over your records:

• Right to Access: You have the right to request in writing whether our systems contain your records, and to demand complete copies of such data.
• Right to Rectification: If submitted information contains typing errors or contact detail changes, you can request immediate corrections to our registries.
• Right to Erasure (Opt-out): If you decide not to proceed with deep collaboration after initial simulations, you can demand complete deletion of your files. Our administrators will wipe all database and CRM records within 3 business days without leaving backups.

5. Inquiries & Complaints Handling

If you have questions regarding our privacy rules, need help correcting records, or wish to file a formal complaint, please contact our designated Privacy Officer. We will supply detailed written responses within 3 business days:

Company: BUSINESS ARCHITECT GURU PTY LTD
Phone: +61 3 8376 2808
Email: connect@businessarchitectguru.net
Address: Suite 3.05, Level 3, 1100 Pascoe Vale Rd, Broadmeadows, VIC 3047, Australia

Statutory Retention, Australian Privacy Principles (APPs) & Victorian Security Audits

Rooted in Broadmeadows, Melbourne, Victoria (VIC 3047), BUSINESS ARCHITECT GURU PTY LTD strictly complies with the Privacy Act 1988 (Cth), ASIC requirements, and local security baselines. We recognize that enterprise architecture diagrams, API schemas, and customer lead records are highly sensitive commercial assets.

We guarantee all submitted forms, active sessions, and caches are hosted in secure, local cloud nodes in Melbourne, with zero cross-border residency risk. You hold absolute right to request permanent deletion of your files. We commit to the highest professional standards to safeguard your organizational data.

Victorian Information Security Regulations & Traceable Audits

In accordance with Victorian and Australian Commonwealth telecommunications regulations, BUSINESS ARCHITECT GURU PTY LTD provides traceable security audits. Telemetry logs captured during simulations inside our sandboxes or during ALEX conversational agent runs are handled securely in our local Melbourne clusters.

We implement AES-256 data encryption and strict RBAC controls. Every document view produces unalterable audit trails. Unless otherwise structured in formal service agreements, all temporary simulation records are securely deleted 7 business days after completion, protecting your data sovereignty with technical integrity.