Data Policy

The Bitrates Pty Ltd. Effective date: 9 January 2025

1. Purpose

This Data Policy outlines how The Bitrates collects, manages, stores, protects, and uses data across all business operations.

The goal is to ensure:

  • Data security and confidentiality
  • Compliance with Australian Privacy Principles (APP)
  • Consistent handling of client, project, and business data

2. Scope

This policy applies to:

  • All employees, freelancers, and contractors
  • All client and project data
  • All digital platforms, storage systems, and devices used by The Bitrates

3. Types of Data Collected

3.1 Client Data

  • Names, emails, phone numbers, and addresses
  • Project details (events, campaigns, bookings)
  • Contracts, invoices, and communication records

3.2 Project & Media Data

  • Photos, videos, audio files, and creative assets
  • Website files, marketing content, and campaign data

3.3 Financial Data

  • Invoices, payment records, and transaction details

3.4 Technical Data

  • Website analytics, cookies, and usage data
  • System logs and access records

4. Data Collection Principles

We collect data only when:

  • It is necessary to deliver our services
  • It is required for legal or financial compliance
  • The client has provided consent

All data collection must be transparent and lawful.

5. Data Storage & Management

5.1 Storage Systems

  • Cloud platforms (for example Microsoft 365 and SharePoint)
  • Secure local storage (external drives, SSDs)

5.2 File Organisation

Each project must include:

  • Raw files
  • Edited versions
  • Final deliverables
  • Contracts and documentation

5.3 Naming Convention

Example: Year_ClientName_ProjectType_Version

6. Data Security

We implement the following security measures:

  • Restricted access based on roles
  • Password-protected systems
  • Two-factor authentication (2FA) where applicable
  • Regular backups (minimum two locations)

Sensitive data (contracts, financial records) is stored in restricted folders.

7. Data Access & Permissions

  • Only authorised team members may access project data
  • Freelancers are granted limited access based on project scope
  • Access is revoked after project completion

All team members must follow confidentiality agreements.

8. Data Usage

Data may be used for:

  • Delivering client services
  • Internal project management
  • Marketing and portfolio use (with consent)
  • Legal and financial record-keeping

Data must never be used for unauthorised purposes.

9. Data Sharing

We may share data only with:

  • Internal team members and approved contractors
  • Trusted service providers (for example hosting, payment systems)
  • Legal authorities if required

Client data is never sold or disclosed without consent.

10. Data Retention Policy

  • Project files: Minimum 1 year
  • Financial/legal records: 7 years
  • Archived files may be deleted after retention period

Clients may request earlier deletion where applicable.

11. Data Breach Policy

In case of a data breach:

  • Identify and contain the breach immediately
  • Assess the impact and affected data
  • Notify affected clients if required
  • Take corrective action to prevent recurrence

Serious breaches will follow Australian legal reporting requirements.

12. Client Rights

Clients have the right to:

  • Access their data
  • Request corrections
  • Request deletion (where legally permitted)
  • Withdraw consent for marketing use

Requests must be handled promptly and professionally.

13. Confidentiality

  • All team members must sign confidentiality agreements (NDA)
  • Unreleased content and client data must not be shared
  • Breach of confidentiality may result in termination and legal action

14. Compliance

This policy aligns with:

  • Australian Privacy Principles (APP)
  • Industry best practices for data protection

All team members are required to comply with this policy at all times.

15. Policy Updates

This Data Policy may be updated periodically.

The latest version will always be available internally and on our website if applicable.

16. Contact

For any data-related concerns:

The Bitrates Pty Ltd
Email: [email protected]
Website: www.thebitrates.com
Related pages: Privacy policy and Security and compliance