Mac and PC Consulting Pty Ltd t/as Mac and PC Computer Repairs

1. About this Privacy Policy

Mac and PC Consulting Pty Ltd (ABN 62 145 095 781) trading as Mac and PC Computer Repairs (“we”, “us”, “our”) is committed to protecting your privacy and handling personal information in an open and transparent manner, in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information in connection with our business operations, including but not limited to:

• in-store, onsite, and remote computer repairs, diagnostics, and technical support

• device servicing, warranty processing, and repair quotations

• data transfer, data recovery, and backup-related services (where requested)

• customer enquiries and bookings made by phone, email, web forms, or in person

• the sale of accessories such as chargers, cables, and related computer peripherals

• use of our website and online contact channels

This policy applies to personal information we handle about customers, prospective customers, suppliers, and other individuals we interact with in the course of operating our business.

Website: https://macandpcrepairs.com.au

Email: [email protected]

Phone: 07 5616 8952

Address: Suite 5 / 7-11 Ereton Drive, Arundel QLD 4214

2. Anonymity and Pseudonymity

Where lawful and practicable, individuals may interact with us anonymously or using a pseudonym.

You may browse our website or make general enquiries without identifying yourself.

However, identification is required where necessary to provide our services, including for repairs, diagnostics, warranty support, invoicing, payments, or where required by law.

Where identification is required, we collect only the minimum personal information necessary to provide the relevant service.

3. Personal Information We Collect

We only collect personal information that is reasonably necessary to operate our business and provide our services.

The personal information we may collect includes:

• name, phone number, email address, and postal address (where shipping or onsite service is required)

• device information such as model and serial number (where required for diagnostics, warranty support, or external repairs)

• service records, quotations, invoices, and job notes

• payment transaction references and confirmations (we do not store card numbers)

• communications with us by phone, email, or website enquiry

In the course of repair or diagnostic work, we may incidentally access personal information stored on customer devices. We do not intentionally collect this information and access is limited to what is necessary to perform the requested service.

4. Unsolicited Personal Information

In some circumstances, we may receive personal information that we did not request, for example through unsolicited emails, messages, or attachments.

Where unsolicited personal information is received and is not reasonably necessary for our business operations, we will take reasonable steps to destroy or de-identify the information, unless we are required by law to retain it.

5. How We Collect Personal Information

We generally collect personal information directly from you when you:

• contact us by phone, email, or in person

• submit an enquiry through our website

• engage us to provide repair or support services

• purchase accessories or related products

• provide information for warranty or specialist repair purposes

In limited circumstances, personal information may be collected indirectly from suppliers or repair partners where required for warranty support. In such cases, only the minimum necessary information is collected.

We take reasonable steps to ensure individuals are aware of why their personal information is collected and how it will be used.

6. Use and Disclosure of Personal Information

We use personal information only for legitimate business purposes, including:

• providing repair, diagnostic, and technical support services

• communicating job updates, quotations, approvals, and collection notices

• issuing invoices, statements, and processing payments

• providing warranty support or arranging external repairs

• maintaining business and legal records

We do not use personal information for marketing or promotional purposes.

In limited circumstances, we may send SMS messages for time-sensitive service updates, such as notification that a device is ready for collection.

Personal information may be disclosed to third parties only where necessary, including repair partners, warranty providers, payment processors, and professional advisers. Disclosures are limited to the minimum information required.

Where customers transition to another provider, we take reasonable steps to provide authorised handover information and remove or de-identify sensitive information once account finalisation has occurred, subject to legal retention requirements.

7. Government Identifiers

We do not collect, use, or store government-issued identifiers such as driver’s licence numbers, Medicare numbers, passport details, or similar identifiers, unless required or authorised by law.

8. Devices Left in Our Care, Abandoned or Discarded Equipment

Devices left in our care may contain personal information that is not intentionally collected but may be incidentally accessible during servicing.

Where a device remains uncollected after we have made reasonable attempts to contact the owner, we may retain the device for a period of up to six (6) months from the date it was ready for collection.

After this period, we may take reasonable steps to securely destroy or de-identify personal information stored on the device, including secure data erasure or physical destruction of storage media, and dispose of the device in accordance with applicable Queensland laws relating to uncollected goods.

This is done to protect the privacy and confidentiality of our customers. Once data has been securely destroyed and the device disposed of, recovery is not possible.

All devices are stored securely on our premises while in our care.

9. Disclosure to Third Parties and Overseas Disclosure

We may disclose personal information to third parties where necessary, including:

• specialist repair providers

• Microsoft 365 (email and communications)

• Apple iCloud (secure storage of job notes, including password-protected notes)

• Xero (accounting and invoicing)

• Suncorp EFTPOS, B2BPay, Stripe, and PayPal (payment processing)

• remote support tools used with customer consent (such as Chrome Remote Desktop, Zoom, or AnyDesk)

Some service providers may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure appropriate privacy safeguards are in place.

We do not store payment card numbers and comply with PCI DSS requirements.

10. Quality of Personal Information

We take reasonable steps to ensure that personal information is accurate, up to date, complete, and relevant.

Information is typically provided directly by customers in person, by email, or via website enquiries. Where inaccuracies are identified, we correct the information as soon as reasonably practicable.

11. Security of Personal Information and Retention

We protect personal information through a combination of technical, physical, and administrative safeguards, including:

• encrypted business devices (Windows BitLocker and Apple FileVault)

• password protection and access controls

• multi-factor authentication on all business accounts

• encrypted, password-protected notes for sensitive data

• locked premises with alarm and video monitoring

Personal information is retained only for as long as necessary for service delivery, legal, or accounting purposes, and is securely destroyed or de-identified when no longer required.

12. Access and Correction of Personal Information

You may request access to personal information we hold about you, or request correction of that information.

Requests should be made by email where possible. Identity is generally verified using existing contact details such as a registered email address or phone number.

We will respond within a reasonable timeframe unless access is lawfully refused.

13. Privacy Complaints

If you believe that we have breached your privacy or the Australian Privacy Principles, you may lodge a complaint using the contact details set out in this policy.

Complaints are handled internally and responded to as soon as reasonably practicable.

If you are not satisfied with our response, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC).

14. Website, Cookies and Analytics

Our website uses essential WordPress cookies required for basic functionality and security.

We use basic website analytics to understand general usage patterns and improve site performance. We do not use targeted advertising, behavioural tracking, or remarketing technologies.

Embedded content from third-party websites may collect data in accordance with their own privacy policies.

We use Google Maps for maps and opening-hours information. See Google’s Privacy Policy for information about Google’s services.

15. Terry, our AI repair assistant

Terry helps answer questions about our repairs and services and can help you prepare an enquiry for Justin. He is an AI assistant, not a member of our workshop staff.

Terry uses OpenAI to generate and review replies. Relevant parts of your conversation and our business information are sent to OpenAI for this purpose. OpenAI may process this information outside Australia.

When Terry asks for a photo, you can preview it before sending it to OpenAI for him to read and review. We remove camera and location metadata, but information visible in the photo is not automatically masked. Please crop out or cover personal details before sending. Chat photos expire after 24 hours and are removed when you start a new conversation.

We use automated masking to reduce the contact information included in messages sent for AI processing. It cannot guarantee that all personal information will be removed. Please do not put passwords, payment card details or sensitive information unrelated to your repair into the chat.

Contact details entered in the enquiry form are held separately from the conversation sent for AI processing. You can review the enquiry and its contact details before saving it.

We retain conversation and enquiry information as needed to operate the assistant, follow up enquiries and maintain service records, subject to the retention principles in section 11. You can contact us using the details above to ask about access, correction or privacy.

When you submit an enquiry, it is saved privately and a notification is emailed to the workshop. No automatic customer acknowledgement email is sent.