Privacy Policy

Effective date: 19 July 2026

1. Who We Are

ID10T Pty Ltd (ABN 96 696 669 155), Melbourne, Victoria, Australia ("ID10T", "we", "our") is an AI strategy and automation consultancy. One of our services, GlobalPath, is an AI-assisted relocation guidance tool that we design, build, and operate ourselves.

Prospective migrants submit their information via a web form, and GlobalPath generates a preliminary points-based assessment for eligible destination countries, delivered as a report.

Although we may be below the $3 million turnover threshold that would otherwise trigger automatic APP obligations, we voluntarily treat ourselves as APP-covered because we handle sensitive information about immigration intent.

This policy is written in plain English and follows the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

2. What We Collect

When you use the GlobalPath section of id10t.com.au, we collect:

  • Identity: first name, last name
  • Contact: email address
  • Demographics: age, marital status, country of residence
  • Education: highest level of education, field of study
  • Work: industry, role, job title, years of experience
  • Language: self-reported English ability
  • Consent: the timestamped record that you ticked the consent checkbox

We do not collect: date of birth, passport or visa numbers, biometric data, financial information, health information, or location data beyond country of residence. We do not use cookies, analytics scripts, or tracking pixels on the GlobalPath form.

For visitors to id10t.com.au, we may collect standard web logs (IP address, browser type, pages visited) for security and diagnostic purposes. These logs are retained for 30 days and then deleted.

3. How We Collect It

We collect personal information directly from you, via the GlobalPath form, with your consent. The consent language on the form is specific and unbundled — it names ID10T as the operator and links to this Privacy Policy. We do not buy, scrape, or acquire personal information from third parties.

4. Why We Collect It

We collect your information for the following purposes, and no other:

  1. To calculate an indicative points-based assessment for your selected destination country, based on that country's published migration criteria.
  2. To generate a report showing your assessment, a points breakdown where applicable, and general information about relevant migration pathways.
  3. To email that report to you at the address you provided.
  4. To maintain a record of the assessment in a secure, access-controlled record store, for up to 24 months.

We do not use your information for marketing, advertising, profiling, or training machine learning models.

5. Who We Share It With

  • Third-party email delivery providers: currently Google Gmail (Google LLC, USA) or SendGrid (Twilio Inc., USA) as email sub-processors. These providers route the email from our server to your inbox and do not use your information for any other purpose.
  • Hosting infrastructure: GlobalPath is hosted on a cloud provider. We select regions in Australia (ap-southeast-2) where practicable.

We do not share your information with data brokers, advertisers, analytics companies, or any party not listed above.

6. Cross-Border Disclosures (APP 8)

Email delivery via Gmail or SendGrid may involve data being processed on servers outside Australia, principally in the United States. By submitting the form and receiving your assessment email, you acknowledge that your information may be processed outside Australia for this limited purpose. We take reasonable steps, including contractual arrangements with these providers and selecting their Australian data-region options where available, to ensure your information is handled consistently with the APPs.

7. How We Protect It (APP 11)

  • Encryption in transit: all form submissions use HTTPS. Email delivery uses TLS.
  • Access control: records are accessible only to ID10T's director and explicitly authorised staff.
  • No plaintext credentials: credentials are held in environment variables, not in source code.
  • Rate limiting and duplicate detection: to prevent abuse of the form.
  • Atomic writes and file locking: to prevent data corruption.
  • Regular backups with encrypted storage.
  • Incident response plan with a 30-day breach assessment window consistent with the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act).

Despite these safeguards, no system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.

8. How Long We Keep It

We retain records for a maximum of 24 months from the date of your last contact with us, after which non-converted records are hard-deleted from our store and backups. You can request earlier deletion at any time — see Section 9 below.

9. Your Rights (APP 12 & APP 13)

You have the right to:

  • Access the personal information we hold about you
  • Correct any information that is inaccurate, incomplete, or out of date
  • Delete your information
  • Withdraw consent for further processing at any time
  • Complain about our handling of your information

We will respond to access, correction, and deletion requests within 30 days of receipt.

10. Contact

For any privacy-related request, question, or complaint:

  • Email: privacy@id10t.com.au
  • Post: The Privacy Officer, ID10T Pty Ltd, 470 St Kilda Rd, Ground Floor, Melbourne VIC 3004
  • Phone: +61 402 884 897

We will acknowledge your request within 5 business days and respond in full within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner:

11. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will always reflect the date of the most recent change. Material changes will be communicated via a notice on id10t.com.au. If you have previously submitted information to us and we make a material change that affects your rights, we will contact you by email where practicable.