Data Policy

The Bitrates Pty Ltd Effective date: 9 January 2025

1. Purpose

This Data Policy outlines how The Bitrates collects, manages, stores, protects, and uses data across all business operations. The goal is to ensure:

Data security and confidentiality
Compliance with Australian Privacy Principles (APP)
Consistent handling of client, project, and business data

2. Scope

This policy applies to:

All employees, freelancers, and contractors
All client and project data
All digital platforms, storage systems, and devices used by The Bitrates

3. Types of Data Collected

3.1 Client Data

Names, emails, phone numbers, and addresses
Project details (events, campaigns, bookings)
Contracts, invoices, and communication records

3.2 Project & Media Data

Photos, videos, audio files, and creative assets
Website files, marketing content, and campaign data

3.3 Financial Data

Invoices, payment records, and transaction details

3.4 Technical Data

Website analytics, cookies, and usage data
System logs and access records

4. Data Collection Principles

We collect data only when:

It is necessary to deliver our services
It is required for legal or financial compliance
The client has provided consent

All data collection must be transparent and lawful.

5. Data Storage & Management

5.1 Storage Systems

Cloud platforms (for example Google Drive, Dropbox)
Secure local storage (external drives, SSDs)

5.2 File Organisation

Each project must include:

Raw files
Edited versions
Final deliverables
Contracts and documentation

5.3 Naming Convention

Example: [Year]_[ClientName]_[ProjectType]_[Version]

6. Data Security

We implement the following security measures:

Restricted access based on roles
Password-protected systems
Two-factor authentication (2FA) where applicable
Regular backups (minimum two locations)

Sensitive data (contracts, financial records) is stored in restricted folders.

7. Data Access & Permissions

Only authorised team members may access project data
Freelancers are granted limited access based on project scope
Access is revoked after project completion

All team members must follow confidentiality agreements.

8. Data Usage

Data may be used for:

Delivering client services
Internal project management
Marketing and portfolio use (with consent)
Legal and financial record-keeping

Data must never be used for unauthorised purposes.

9. Data Sharing

We may share data only with:

Internal team members and approved contractors
Trusted service providers (for example hosting, payment systems)
Legal authorities if required

Client data is never sold or disclosed without consent.

10. Data Retention Policy

Project files: Minimum 1 year
Financial/legal records: 7 years
Archived files may be deleted after retention period

Clients may request earlier deletion where applicable.

11. Data Breach Policy

In case of a data breach:

Identify and contain the breach immediately
Assess the impact and affected data
Notify affected clients if required
Take corrective action to prevent recurrence

Serious breaches will follow Australian legal reporting requirements.

12. Client Rights

Clients have the right to:

Access their data
Request corrections
Request deletion (where legally permitted)
Withdraw consent for marketing use

Requests must be handled promptly and professionally.

13. Confidentiality

All team members must sign confidentiality agreements (NDA)
Unreleased content and client data must not be shared
Breach of confidentiality may result in termination and legal action

14. Compliance

This policy aligns with:

Australian Privacy Principles (APP)
Industry best practices for data protection

All team members are required to comply with this policy at all times.

15. Policy Updates

This Data Policy may be updated periodically. The latest version will always be available internally and on our website if applicable.

16. Contact

For any data-related concerns: The Bitrates Pty Ltd Email: [email protected] Website: www.thebitrates.com