Privacy Policy

HAMANI PTY LTD · ACN 696 864 981 · ABN 48 696 864 981 · Sydney, Australia · Governing law: New South Wales

HAMANI PTY LTD (ACN 696 864 981, ABN 48 696 864 981) (“HAMANI”, “we”, “us”) is an Australian company based in Sydney, and provides the HAMANI CRM platform (“the Service”). This one policy applies worldwide: the sections below up to “Australia” apply to everyone, and the regional sections that follow set out the additional rights and legal frameworks that apply where you live. Australian privacy law — the Privacy Act 1988 (Cth) — is the base standard we work to everywhere.

What we collect. Account details (name, business name, email, contact details); the business data you enter to run your business; usage and technical information to keep the Service secure and working; and communications with our support.

How we use it. To provide, support and secure the Service, to communicate with you, and to meet our legal obligations. We do not sell personal information.

Your business’s data. Where you use the Service to hold information about your own customers, you control that information and we process it on your behalf to provide the Service to you.

Who we share it with. We share personal information with service providers who help us run the Service, and only so they can do that job: Cloudflare (website and application hosting, content delivery, and storage of the files and photos you upload, on a global network); Amazon Web Services (the database that holds your workspace records, email delivery, and SMS delivery); Google (sign-in authentication and AI services); Twilio (inbound SMS replies and the phone receptionist, where you use it, United States); Stripe (payment processing, United States); and AI providers, which may include Anthropic (United States) and Google, as described in our AI Disclosure. Where you connect them, we also share data with delivery and logistics couriers, and accounting software. Sharing happens under appropriate protections, and we do not sell personal information to anyone.

How long we keep it. We keep personal information while your account is active and for as long as we need it to provide the Service, meet our legal obligations (for example Australian tax and business record-keeping requirements), and resolve disputes. When your subscription ends you may export your data for a reasonable period, you can ask us to delete it, and we delete or de-identify personal information we no longer need.

When we erase your account. When we erase an account at your request, we destroy your workspace content and the personal information in it, and we retain only the records the law requires us to keep — financial records such as invoices and payments for the Australian statutory period, and the immutable security audit trail for seven years — which we then destroy.

Security. We take reasonable technical and organisational steps to protect personal information from misuse, loss and unauthorised access.

Cookies. Our website and app use cookies and similar technologies to operate the Service and understand usage.

Contact. Privacy questions and requests, from anywhere in the world: hello@hamanicrm.com.au.

Australia

HAMANI PTY LTD (ACN 696 864 981) handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Disclosure and third parties. We share personal information with service providers who help us run the Service (for example hosting, payment processing, email and SMS delivery, delivery and logistics couriers, accounting software, and AI providers), under appropriate protections. Some of these providers may process data outside Australia (APP 8); where they do, we take reasonable steps to ensure your information is handled to a standard consistent with the APPs.

Data breaches. We comply with the Notifiable Data Breaches scheme under the Privacy Act. Where a breach is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required.

Access and correction. You can ask to access or correct the personal information we hold about you, and you can ask us to delete your data (APP 12 and APP 13).

Sensitive and health information.Some customers (for example in health, NDIS or aged care) handle sensitive or health information. We treat such information with extra care, seek consent where required, and recognise that additional laws — such as the Health Records and Information Privacy Act 2002 (NSW) and the Health Records Act 2001 (Vic) — may apply to that customer’s own handling of the information.

Contact and complaints. Privacy questions or requests can be sent to hello@hamanicrm.com.au. If you’re not satisfied with our response, you can contact the OAIC.

Europe and the United Kingdom (GDPR and UK GDPR)

This section applies where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to our handling of your personal information. HAMANI has no establishment in the European Union or the United Kingdom; we provide the Service from Australia.

Legal bases. We process personal information on these legal bases: performance of a contract (providing the Service you or your organisation signed up for); our legitimate interests (keeping the Service secure, improving it, and communicating with business customers); consent, where we ask for it — which you may withdraw at any time; and compliance with our legal obligations.

Your rights. You may ask us to: access the personal information we hold about you; correct (rectify) it; erase it; restrict how we process it; or provide it to you or another provider in a portable, machine-readable format. You may object to processing based on our legitimate interests, and where processing is based on consent you may withdraw that consent at any time. To exercise any of these rights, email hello@hamanicrm.com.au and we will respond within one month.

Automated decisions. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

International transfers.We are an Australian company, and the service providers named in this policy include providers in the United States and other countries, so personal information we handle is transferred outside the United Kingdom and the European Economic Area. Where a transfer safeguard is required, our service providers’ data-processing terms incorporate standard contractual clauses (or the UK equivalent), and you can contact us for more information about the safeguard that applies to a specific transfer.

Complaints.If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner’s Office).

California (CCPA and CPRA)

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

Categories we collect. In CCPA terms, we collect: identifiers and contact details (such as name, business name and email); commercial information (your subscription and billing history); internet activity (usage and technical information about how the Service is used); professional information (the business details you give us); and the content you put into the Service. We collect it directly from you and from your use of the Service, for the purposes described in this policy.

No sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising; we have not done either in the preceding 12 months. We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit under the CCPA.

Your rights. California residents may ask us what personal information we collect, use and disclose (the right to know), and may ask us to delete it or to correct it. We will not discriminate against you for exercising any of these rights. Email hello@hamanicrm.com.au; we will verify the request against your account details before acting on it.

Other regions

Other regions. Wherever you live, you can ask us to access, correct, delete or export your personal information by emailing hello@hamanicrm.com.au, and we honour those requests unless a law prevents us. If the privacy law of your home country gives you additional rights, we will work with you to honour them.