App Gallery Pty Ltd (ABN: 26 617 628 592)
1. Introduction
App Gallery Pty Ltd (“App Gallery”, “we”, “us”, or “our”) is committed to protecting the privacy of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy outlines how we handle personal information as an Australian-based software development firm.
2. Scope and Role
App Gallery provides software development, maintenance, and consulting services strictly within infrastructure owned or provisioned by our clients.
- Service Provider Role: We act as a service provider (data processor). Our clients act as the Data Controller and maintain primary responsibility for the personal information within their applications.
- No Internal Data Storage: App Gallery does not host, store, or process client-controlled personal information on its own internal servers or databases.
- Service Provider Role: We act as a service provider (data processor). Our clients act as the Data Controller and maintain primary responsibility for the personal information within their applications.
3. Collection and Access of Personal Information
Our engagement model is designed to minimise the collection of personal information:
- Business Contact Information: We collect names, email addresses, and phone numbers of client representatives strictly for project management, contract administration, and billing. This is the only personal data stored within our corporate systems.
- Zero Technical Data Ingestion: Any technical metadata, system logs, or device information generated during development or support remains within the client’s infrastructure. App Gallery does not ingest or store this metadata on its own servers.
- Incidental Access: Our personnel may have access to data within a client’s environment during development or testing, but such data is never collected, downloaded, or retained by App Gallery.
4. Use of Personal Information
We use the limited business contact information we collect to:
- Manage project delivery and professional communication.
- Process invoices and fulfil contractual obligations.
- Comply with Australian legal and tax regulations. We do not use personal information for marketing purposes without explicit consent.
5. Disclosure of Personal Information
We may disclose personal information to:
- Our employees, contractors, and professional advisors
- Client-authorised third parties
- Service providers who assist in delivering our services
We do not sell personal information.
6. Hosting and Infrastructure
App Gallery does not provide hosting services.
- All environments (Development, Staging, and Production) are provisioned and controlled by the client.
- The client is responsible for the selection of data residency (e.g., AWS Sydney Region) and the management of all infrastructure security layers.
7. Data Security
Because we operate within client-managed environments, our security focus is on Access Integrity:
- Secure Development: We follow industry-standard secure coding practices to ensure the software we build for clients is robust.
- No Local Storage: Our internal policies strictly prohibit personnel from downloading or storing client data or system logs onto local company devices or unauthorised cloud storage.
- Access Protocols: We utilise client-authorised credentials and adhere to the client’s internal security and MFA policies.
However, we cannot guarantee the security of data within client-controlled infrastructure.
8. Data Retention
- Client Systems: Retention and deletion of personal information within the software are managed by the client.
- Business Records: We retain business contact data and contracts only for the duration required by Australian law (typically 7 years for financial records).
9. Access and Correction
Individuals may request access to or correction of their personal information held by us by contacting us using the details below.
Where we act as a service provider, such requests may be redirected to the relevant client (data controller).
10. Cross-Border Disclosure
App Gallery may utilise personnel or contractors located outside of Australia. We take reasonable steps to ensure that all personnel, regardless of location, comply with this Privacy Policy and the APPs through strict contractual confidentiality and data-handling obligations.
11. Complaints and Contact
If you have questions regarding our privacy practices, please contact:
App Gallery Pty Ltd
Email: info@appgallery.com.au
Address: 8/330 Collins St, Melbourne VIC 3000
12. Changes to this Policy
We may update this policy to reflect changes in our services or the regulatory environment. The latest version will be available upon request. (Last Updated: April 2026)
