1. Who we are
Valtatech is a group of companies providing Source to Pay, eInvoicing, integration and payment protection services across Asia Pacific and Europe. The entity responsible for your personal information depends on which entity you deal with:
- Australia — Valta Technology Group Pty Ltd, ABN 36 604 031 496, ACN 604 031 496. Unit 6, 30 Willandra Drive, Epping VIC 3076.
- Singapore — Valta Technology (Valtatech) Pte. Ltd., UEN 202222130W. 21B Bukit Pasoh Road, Singapore 089835.
- Malaysia — Valta Technology Sdn. Bhd., SSM 202301050396 (1544310-U). CoInnov8, Level 1, CoPlace 10, Block 2330, Jalan Usahawan, 63000 Cyberjaya, Selangor.
- Philippines — Valtatech Advanced Spend Management Solutions, Inc. Unit 3006, One Corporate Centre Building, Julia Vargas Avenue, Ortigas Center, San Antonio, Pasig City, Metro Manila 1600.
Unless we tell you otherwise, the Australian entity is responsible for personal information collected through this website, and is an APP entity bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This notice covers personal information we collect through this website and in the course of our business relationships. It does not cover the business documents our customers transmit through our services — invoices, purchase orders, supplier records and the like. Where those documents contain personal information, our customer decides how it is handled and we process it on their instructions under our agreement with them.
2. What we collect
If you contact us or do business with us, we collect what you give us: name, business email address, company, business telephone number, job function, and whatever you write in your message. If you become a customer, supplier or partner, we also hold contract and billing details and a record of our dealings with you.
When you visit this website we collect limited technical information: pages viewed, the link or search that brought you here, approximate location at country level, and browser and device type. We do not use this to identify you.
We do not seek sensitive information as defined in the Privacy Act, and you should not send it to us.
You can deal with us anonymously or under a pseudonym when you are simply asking a general question. We cannot do that where we need to identify you — for example to enter a contract or respond to a request about your own information.
3. Cookies and analytics
We set no cookies of our own, and we do not ask you to accept any. Our analytics provider is cookieless: it stores nothing on your device, keeps no identifier that would let us recognise you on a return visit, and builds no profile of you across other websites.
4. Why we collect it
We collect and use personal information to respond to your enquiry; to provide, support and improve our services; to manage our contracts and billing; to meet legal, tax and regulatory obligations; to protect our systems and prevent fraud; and to send you information about our services where you have asked for it or where it is reasonably expected and you have not opted out.
You can opt out of our marketing communications at any time, using the unsubscribe link in any such message or by writing to the address in section 11.
5. Who we disclose it to
We disclose personal information to:
- other Valtatech group entities, where they are involved in delivering or supporting the service;
- our service providers, who may only use it to provide services to us. These are our website hosting provider, our cookieless website analytics provider, our customer relationship management system, our email and productivity provider, and our professional advisers;
- a purchaser or prospective purchaser if we sell part of our business; and
- anyone else where you consent, or where we are permitted or required to do so by law.
We do not sell personal information, and we do not disclose it to third parties for their own marketing.
6. Overseas disclosure
We operate across Australia, Singapore, Malaysia, the Philippines and Europe, and some of our service providers process data outside Australia. This means your personal information may be disclosed to recipients in those countries.
Before disclosing personal information overseas we take steps that are reasonable in the circumstances to ensure the recipient handles it consistently with the Australian Privacy Principles, as Australian Privacy Principle 8 requires.
The countries in which our service providers process personal information are: website hosting — Singapore; website analytics — the United States; customer relationship management — Australia; and email and productivity — Australia. Where we disclose personal information to a recipient outside Australia, Australian Privacy Principle 8 applies and we take the steps described above.
7. Security and data breaches
We hold personal information in systems protected by access controls, encryption in transit, and multi-factor authentication on systems that hold client data. We are certified to ISO/IEC 27001. We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, and to destroy or de-identify it when it is no longer needed.
No system is completely secure. If we suffer a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth) requires, and we will notify the equivalent regulator in any other market where the breach triggers an obligation.
If you believe you have found a vulnerability in our website or services, please tell us at enquiries@valtatech.com.
8. How long we keep it
We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires us to. Enquiries that do not become a business relationship are kept while there is a reasonable prospect of one and then deleted. Contract, billing and tax records are kept for seven years, which is the Australian tax record-keeping period, or longer where the law of another market in which we operate requires it.
9. Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong, out of date, incomplete or misleading. Write to us at the address in section 11.
We will respond within a reasonable period. We will not charge you for making a request, although we may charge for the reasonable cost of giving you access. If we refuse access or refuse to make a correction, we will tell you why in writing and explain how to complain.
10. How to complain
If you think we have handled your personal information in a way that breaches the Australian Privacy Principles, please tell us first, at enquiries@valtatech.com or the postal address in section 11. We will acknowledge your complaint and respond within a reasonable period.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.
If you dealt with one of our other entities, you may instead complain to the regulator in that country: the Personal Data Protection Commission in Singapore, the Personal Data Protection Department in Malaysia, or the National Privacy Commission in the Philippines. If you are in the European Economic Area or the United Kingdom, you may complain to your local supervisory authority.
11. Contact
For any question or request about this notice or our handling of personal information:
Email enquiries@valtatech.com, or write to:
The Privacy Officer
Valta Technology Group Pty Ltd
Unit 6, 30 Willandra Drive
Epping VIC 3076
Australia
12. Other laws that may apply to you
Where we handle personal data of individuals in the European Economic Area or the United Kingdom, the General Data Protection Regulation may apply. In that case our lawful bases are usually the performance of a contract, compliance with a legal obligation, or our legitimate interests in running and developing our business, balanced against your interests and rights. You may have rights of access, rectification, erasure, restriction, portability and objection, and where we rely on consent you may withdraw it at any time without affecting processing already carried out.
Where we handle personal data in Singapore, Malaysia or the Philippines, the Personal Data Protection Act 2012 (Singapore), the Personal Data Protection Act 2010 (Malaysia) and the Data Privacy Act of 2012 (Philippines) may apply respectively, and we will handle personal data in accordance with them.
13. Changes
We may update this notice to reflect changes in our practices or in the law. The current version is always published here, with its date at the top. Where a change is significant we will take reasonable steps to tell you.
The English version governs in the event of any conflict with a translation.