Last updated: 30 October 2026
What we collect, why we collect it, who sees it and how to get it back or corrected. In plain English rather than boilerplate.
This policy explains how 2Gen Pty Ltd (ABN 85 126 837 232) handles personal information. It applies to this website and to the services we provide, including managed IT services, IT support, cyber security, cloud services, phone systems and internet services.
We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth). Where we handle personal information about your staff or customers on your behalf, we also comply with the obligations that apply to that information.
You can reach us through our contact page, call (07) 5676 7240 or write to us at 6/14–16 Kohl Street, Upper Coomera QLD 4209.
We collect only what we need to respond to you, support you and deliver the services you have engaged us for.
We do not collect sensitive information through this website. Please do not send it to us through a web form.
Google Analytics runs only if you agree to it. When you first visit, a banner asks for your choice. If you say no, or ignore the banner, it does not load.
Google Analytics (loaded through Google Tag Manager) shows us which pages are read, how visitors arrive and roughly where they are. It sets cookies and sends usage information to Google, which may process it outside Australia. We use the results only in aggregate to improve the website. We do not use them for advertising or to identify you. You can change your choice at any time through the cookie settings link at the bottom of every page.
Some cookies are needed for the website to work, such as those used by our security plugin and to remember your cookie choice. These do not track you and are always on.
Other third-party services on this website:
We use personal information to:
We do not sell personal information. Our email updates are sent through Klaviyo, which stores your name and email address outside Australia. Every marketing email has an unsubscribe link.
Managing your IT means we can often reach systems that hold your business’s information, such as email, files, accounting and customer records. Two things follow from that.
We access the minimum required. Our staff use their own named accounts with multi-factor authentication. They access your systems only to do the work you have asked for or to keep those systems secure.
Your data stays yours. We treat information we see in your systems as confidential. We do not use it for anything other than supporting you and we do not keep copies beyond what the work requires. Where your agreement with us has its own confidentiality or data handling terms, those terms apply as well.
Our main systems are in Australia. This website, our Microsoft 365 email and files and our 3CX phone and chat system are all hosted in Australia.
A few services we use process information overseas: Google (website analytics if you agree to it, and form spam protection) and Klaviyo (email updates). Where that happens we take reasonable steps under Australian Privacy Principle 8 to ensure the recipient handles it consistently with the Australian Privacy Principles.
We disclose personal information only where it is necessary and only to:
We do not sell or rent personal information to anyone. We do not disclose it for anyone else’s marketing.
We use access controls, multi-factor authentication, encryption in transit and the principle of least privilege across our own systems. Access to client information is limited to the people doing the work. Our wider approach is set out in our Information Security and Privacy Policy Statement.
No system is perfectly secure and we will not claim otherwise. If a data breach occurs that is likely to result in serious harm, we will assess it and notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We keep personal information only as long as it is needed for the purposes above, or as long as the law requires, whichever is longer. Business and financial records are generally kept for seven years. When information is no longer needed we destroy it or de-identify it.
You can ask us what personal information we hold about you and ask us to correct anything that is wrong. Contact us through our contact page or call us. We will respond within a reasonable period, normally 30 days. There is no charge for making a request. If we refuse access or a correction we will tell you why in writing.
If you think we have mishandled your personal information, tell us through our contact page or call us. We will acknowledge your complaint, investigate it and respond in writing, normally within 30 days.
If you are not satisfied with our response you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.
We may update this policy as our services or obligations change. The current version always lives at this address and the date at the top tells you when it last changed.