Privacy Policy

Version privacy-policy-2026-10-01 · Last updated: 1 October 2026 · previous version (30 September 2026)

Our status. Bcom Services Pty Ltd is a small business and is not currently required to comply with the Privacy Act 1988 (Cth); no exception that would bring it within the Act currently applies. We apply the Australian Privacy Principles (APPs) as our standard regardless, and this policy is written to them. If that changes, we will say so here.

This Privacy Policy explains how Bcom Services Pty Ltd (ABN 92 636 893 108), trading as Bcom ("we", "us", "our"), collects, uses, discloses and protects your personal information. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

We collect personal information that you provide to us directly, and information generated through your interactions with us. This may include:

• Contact details — name, business name, email address, phone number;
• Information you provide when you enquire about, scope or engage our services;
• Business and operational information shared with us during an AI governance assessment or AIMS implementation engagement;
• Correspondence and records of communications with us;
• Technical data automatically collected when you visit our website (such as IP address, browser type and pages visited).

Enquiries sent through the website form

When you use the enquiry form on this website we collect your name, organisation, work email address, an optional phone number, the subject you select, your message and the page you sent it from. We use it to answer your enquiry and for nothing else — we do not add you to a mailing list.

Submissions are stored in a Cloudflare D1 database operated by us and separate from any client governance data. To limit automated abuse we record a salted, truncated hash of the sending IP address rather than the address itself, which lets us spot a flood of submissions without keeping information that identifies a visitor.

Calls to 07 3041 8993

Calls to our main number may be answered by an AI voice assistant. It tells you so at the start of the call. It answers questions using the information published on this website, and it can take your name, organisation, contact details and the reason for your call so that a person can follow up. It does not make decisions about you, does not give compliance or legal determinations, and will connect you with a person or take a message if you ask.

Calls handled by the assistant are transcribed, and may be recorded, so that your enquiry is captured accurately. The details it captures are stored in the same enquiry database as the website form, described above, and used only to respond to you. The assistant is operated for us by an AI voice service provider that processes call audio and transcripts on our behalf; we take reasonable steps to ensure it handles that information consistently with the APPs. If you would rather not speak with the assistant, email support@bcomservices.com and a person will call you back.

The BcomOne platform

When an organisation engages us, we operate the BcomOne platform for it. We hold: the organisation's identity (legal name, ABN, email domain); its authorised representative's name, executive role and work email; and the evidence the organisation provides or connects — for example application, licence and domain lists, lists supplied by its staff, interview notes, and governance records such as who stated that a source was unavailable. Personal information about the organisation's staff reaches us from the organisation itself, as part of what it provides. Microsoft 365 usage reports are reduced to counts; we never ask an organisation to reveal user names its reports conceal.

We use this information only to deliver the services that organisation has engaged us for, to keep it secure, to give support it asks for, and to meet our legal obligations. We do not enter client data from the platform into any external AI service, and it is never used to train an AI model. The exact terms are in the BcomOne Client Data Terms, which form part of our agreement with each client organisation.

2. How we use your information

We use personal information to:

• Respond to enquiries and provide the services you request;
• Deliver, manage and improve our AI governance and AIMS implementation services;
• Communicate with you about your engagement and relevant updates;
• Meet our legal, regulatory and contractual obligations.

3. Disclosure of your information

We do not sell your personal information. We may disclose it to trusted service providers who assist us in operating our business (for example, IT and communications providers, and the AI voice service provider that answers calls to our main number), and where required or authorised by law. Where we engage third parties, we take reasonable steps to ensure they handle your information consistently with the APPs.

For the BcomOne platform specifically, the service providers are: Cloudflare, Inc. (hosting, storage, backups, sign-in); Microsoft (only when a client organisation connects its own Microsoft 365, which we read on its behalf); the Australian Business Register (an organisation's ABN, to verify it); and Google (only the sign-in identity, for anyone who chooses to sign in with Google).

Overseas disclosure

We are likely to disclose personal information to overseas recipients. Platform data is stored in Cloudflare's Oceania region, but Cloudflare, Inc. is a United States company and its network is global; Microsoft and Google operate globally; our AI voice service provider may process call audio and transcripts overseas. The country in which such recipients are most likely to be located is the United States; information may also be processed in other countries in which those providers operate.

4. Confidentiality of engagement information

Information you share with us during a governance assessment or implementation engagement is treated as confidential and is used only for the purpose of delivering that engagement, unless you provide consent otherwise or disclosure is required by law.

5. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. To make a request, contact us using the details below. We will respond within a reasonable period.

7. Cookies and website analytics

Our website may use cookies and similar technologies to understand how visitors use the site and to improve your experience. You can control cookies through your browser settings; disabling them may affect some website functionality.

8. Complaints

If you believe we have mishandled your personal information or breached the Australian Privacy Principles, email support@bcomservices.com with the details. We will acknowledge your complaint within 5 business days, investigate it, and give you a written response within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au); because we are currently a small business not covered by the Privacy Act, the OAIC may not be able to investigate a complaint about us.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with its version identifier and "last updated" date shown above. Where a client organisation has acknowledged a version in the BcomOne platform, that acknowledgement records the version and a fingerprint of its text.

10. Contact us

For privacy enquiries, access requests or complaints, contact:
Bcom Services Pty Ltd (Bcom)
Email: support@bcomservices.com
Phone: 07 3041 8993