privacy@ymlinnovation.com.au

CONTACT FOR INFO

+ 21 356 552 8489

YML Audit Services Pty Ltd (ABN 37 619 925 370)

trading as YML Innovation

Private Policy

YML Innovation privacy

Introduction

YML Innovation is part of the YML Group. YML Innovation respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights.

If you have any questions or concerns about our use of your personal information, please contact us using the contact details provided at the bottom of this Privacy Notice.

YML Group. We specialize in automating business processes of businesses and enterprise.


Topics


What data do we collect?

Our Company collects the following data:

  • Personal identification information (Name, email address, phone number, etc.) of users that logon to our systems so that we can contact them in case they need support.
  • provide you with information, products or services that you request from us;
  • manage services we provide to you/your company or products/services you/your company provide to us;
  • carry out our obligations under any contracts entered into between you/your company and us; and
  • manage our relationship with you/your company.

If we ask you to provide any other personal information not described above, the personal information we ask for, and the reasons why we ask for it, will be made clear to you at the point we collect it.

How do we collect your data?

You directly provide YML Innovation with most of the data we collect. We collect and process data when you:

  • Are an authorized user of any of our products or services.
  • Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
  • Engage us to provide you services.

Our Company may also receive your data indirectly from the following sources:

  • We may enter into agreements with companies to process their private information for their requirements.

Information that we collect automatically

When you visit our Websites, we may collect certain information automatically from your device. In some countries, including the United Kingdom and countries in the European Economic Area, this information may be considered “personal data” or “personal information” under applicable data protection laws.

Specifically, the information we collect automatically may include information like your IP address, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform and other technical information. We may also collect information about how your device has interacted with our Websites, including the pages accessed and links clicked. This includes the date and time, products you viewed or searched for, page response times, download errors, length of visits, and page interactions.

We collect this information to:

  • Administer our Websites and for our internal operations, including troubleshooting, data analytics, testing, research, statistical and survey purposes;
  • Improve our Websites to ensure the content is presented in the most effective manner for you and for your device;
  • Allow you to participate in interactive features of our service, if you choose to do so;
  • Assist in our efforts to keep our Websites safe and secure;
  • Measure or understand the effectiveness of advertising we serve and deliver relevant advertising to you;
  • Make suggestions and recommendations to you about goods or services which may be of interest to you.

Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and similar tracking technology” below. .

Information that we obtain from third party sources

From time to time, we may receive personal information about you from third party sources (including our business partners, technical, payment and delivery service contractors, advertising networks, analytics providers, search information providers and credit reference agencies), but only where these third parties have confirmed to us that they either have your consent or are otherwise legally permitted or required to disclose your personal information to us. We use this information to maintain and improve the accuracy of the records we hold about you and to send you personalized content.

We will combine this personal information with personal information we already hold about you and use this combined information for the purposes set out above.

Where we do not need your personal information to identify you, we may aggregate your personal information into an anonymised form. We may do this in order to use information for statistical purposes and to understand website interaction more generally.


How will we use your data?

Our Company collects your data so that we can:

  • Process your order, manage your account.
  • Provide client companies processing services that they may require us to process by our legal obligations and their legal obligations..

We may disclose your personal information to the following categories of recipients:

  1. to our third party services providers who provide data processing services to us (for example, businesses providing information processing, managing and enhancing customer data, to provide customer service, to conduct customer research and satisfaction surveys, to support the delivery of, provide functionality on, or help to enhance the security of our Websites), or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information.
  2. to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, including to enforce our terms of use or any other agreements or (iii) to protect your vital interests or those of any other person;
  3. to any other person with your consent to the disclosure.

How do we store your data?

We use Azure cloud services by Microsoft for digital data storage. We take all reasonable steps to ensure the security of our systems and they allow you to access your information at any time to keep it accurate and up to date. Any information which we hold for you is stored on secure servers that are protected in controlled facilities.

In addition, our employees and the contractors who provide services related to our information systems are obliged to respect the confidentiality of any personal information held by us. However, YML Innovation will not be held responsible for events arising from unauthorised access of your personal information. You can also play an important role in keeping your personal information secure, by maintaining the confidentiality of any password and accounts used on any YML Innovation system you use.

Our Company will keep your personal information for statutory required 7 years. Once this time period has expired, we will delete your data if you request us to do so by erasing your digital file from the database.


Secure data storage

Marketing

Our Company would like to send you information about products and services of ours that we think you might like, as well as those of our partner companies.

If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop Our Company from contacting you for marketing purposes or giving your data to other members of the Our Company Group.

If you no longer wish to be contacted for marketing purposes, you can unsubscribe anytime.

What are your data protection rights?

Our Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access

You have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.

The right to rectification

You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete information you believe is incomplete

The right to erasure

You have the right to request that Our Company erase your personal data, under certain conditions.

The right to restrict processing

You have the right to request that Our Company restrict the processing of your personal data, under certain conditions.

The right to object to processing

You have the right to object to Our Company’s processing of your personal data, under certain conditions.

The right to data portability

You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights,
Please contact us at our email: privacy@ymlinnovation.com.au
Call us at: 02 83834400
Or write to us: YML Group, PO Box 800, Bondi Junction, NSW, 1355.

What are cookies?

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.
For further information, visit allaboutcookies.org.

How do we use cookies?

Our Company uses cookies in a range of ways to improve your experience on our website, including:

  • Keeping you signed in;
  • Understanding how you use our website.
What types of cookies do we use?

There are several different types of cookies. Our website uses:

  • Functionality — Our Company uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
  • Advertising — Our Company uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. Our Company sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
How to manage your cookies?

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy Policies of other websites

Our Company website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our Privacy Policy

Our Company keeps its privacy policy under regular review and places any updates on this web page.
This privacy policy was last updated on 10 January 2026.

How to Contact us?

If you have any questions about Our Company’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email: privacy@ymlinnovation.com.au
Phone: 02 8383 4400
Post: YML Group, PO Box 800, Bondi Junction NSW 1355

How to Contact the Appropriate Authority?

If you wish to report a complaint, or you feel that YML Innovation has not addressed your concern in a satisfactory manner, you may contact the Office of the Australian Information Commissioner.

Director of Compliance, Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001, Australia
175 Pitt Street, Sydney NSW 2000 (in-person enquiries by appointment only)
Telephone: 1300 363 992 · Online: www.oaic.gov.au · Email: foi@oaic.gov.au

1. THE YML INNOVATION’S COMMITMENT TO PROTECTING PRIVACY

We consider you an important customer/user. Our first priority is to offer you exceptional systems for automating business processes.

Your complete satisfaction and confidence in YML Innovation is essential to us. That’s why, as part of our commitment to meeting your expectations, we have implemented a privacy policy and EU GDPR – General Data Protection Regulation policy and a customer personal data protection charter.

This charter formalizes our commitments to you and describes how YML Innovation uses your personal data.

2. SCOPE OF APPLICATION

In this charter, “YML Innovation” means:

YML AUDIT SERVICES PTY LTD, with registered offices at 2204/520 Oxford Street, Bondi Junction, NSW, 2022, Australia.

Good to know!

You probably don’t know this, but the only users of YML Innovation systems are employees and contractors of businesses and enterprises that utilise our systems rather than individual customers.

This is why, your personal data will be dealt with by YML Innovation, acting as Data processor for other companies, separate, purposes. In summary:

  • YML Innovation will process your data because it manages a business process of a corporation or a business, which utilises YML Innovation system to collect the data necessary to organise, automate and to communicate this data to the concerned client systems;
  • Each company, with the partial help of a YML Innovation system, will process your data to manage its contractual relationship with you (invoicing, payment, booking management etc.), to perform marketing activities and to comply with its legal obligations..

YML Innovation has communicated the principles set out in this charter to all of the businesses that utilise out systems. We will do our upmost to ensure that we comply with the applicable data protection laws and this charter in relation to the processing of your personal data

3. YML INNOVATION PRINCIPLES FOR PROTECTING YOUR PERSONAL DATA

In accordance with applicable regulations, in particular the Australian and European General Data Protection Regulation, we have instituted the following ten principles:

1. Lawfulness: We use personal data only if:

  • we obtain the consent of the person, OR
  • it is necessary to do so for the performance of a contract to which the person is a party, OR
  • it is necessary for compliance with a legal obligation, OR
  • it is necessary in order to protect the vital interests of the person, OR
  • we have a legitimate interest in using personal data and our usage does not adversely affect the persons’ rights

2. Fairness: We can explain why we need the personal data we collect.

3. Purpose limitation and data minimisation: We only use personal data that we really need. If the result can be achieved with less personal data, then we make sure we use the minimum data required..

4. Transparency: We inform people about the way we use their personal data

5. We facilitate the exercise of the people’s rights: access to their personal data, rectification and erasure of their personal data and the right to object to the use of their personal data

6. Storage limitation: We retain personal data for a limited period

7. We ensure the security of personal data, i.e. its integrity and confidentiality.

8. If a third party uses personal data, we make sure it has the capacity to protect that personal data.

9. If personal data is transferred outside Europe (with respect to EU.GDPR), we ensure this transfer is covered by specific legal tools.

10.If personal data is compromised (lost, stolen, damaged, unavailable…), we notify such breaches to the respective country’s responsible authority and to the person concerned, if the breach is likely to cause a high-risk in respect of the rights and freedoms of this person.


For any questions concerning the ten principles of our data protection policies, please contact the Data Privacy department.

4. WHAT PERSONAL DATA IS COLLECTED?

At various times we may collect information about customers, information that other companies require us to collect on their behalf, and information about the people accompanying them, including the following.

Contact details

For example, last name, first name, telephone number and email address.

Personal information

For example, date of birth and nationality.

Loyalty programme details

Membership number for a loyalty or partner programme, such as an airline loyalty programme, and information related to activities within that programme.

Masked credit card number

Last four digits only, for transaction reconciliation purposes. Full credit card numbers are not processed or stored. Data masking technology is applied at the point of collection.

Identification documents

Information contained on a form of identification, such as an ID card, passport or driver licence.

Information relating to your children

For example, first name, date of birth and age.

Preferences and interests

For example, newspaper and magazine preferences, sports and cultural interests, and food and beverage preferences, etc.

Questions and comments

Any questions, comments or feedback you provide to us.

Technical and location data

Data you generate as a result of using our corporate client websites and applications.



The information collected in relation to persons under 16 years of age is limited to their name, nationality and date of birth, which can only be supplied to our customers by an adult. If such data is sent, you can contact the Data Privacy department to arrange for this information to be deleted

In order to meet your requirements or provide you with a specific service, our corporate clients may have to collect sensitive information, such as information concerning race, ethnicity, political opinions, religious and philosophical beliefs, union membership, or details of health or sexual orientation. In this case, they will only process this data if you provide your express prior consent.

5. WHEN IS YOUR PERSONAL DATA COLLECTED?

Personal data may be collected on a variety of occasions, primarily in the case of a customer of YML Innovation requires us to process personal information for them.

6. WHAT PURPOSES IS YOUR DATA COLLECTED FOR AND HOW LONG

Legal basis for processing personal information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only (i) where we need the personal information to perform a contract with you, (ii) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or (iii) where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our Websites and communicate with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to our queries or improving our Websites. We may have other legitimate interests and if appropriate we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading below.

We use various technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

Specific measures we use include (amongst others):

  • physical security and access to all YML Innovation premises
  • all access to computer hardware is password protected, with encryption, Multi-factor Authentication and hardened network security;
  • transfers of data between your device and our servers are encrypted using SSL and TLS encryption protocols;
  • security standards consistent with Payment Card Industry Standard (PCI DSS) for which we are globally certified and undertake annual audits;
  • staff data protection training.

As with any content that published on the Internet, any content, including personal information, that you contribute to be shared, published or transmitted to other users of our Websites, is visible to other users and can be read, collected, or used by them. We urge you to be careful about giving out information in public areas of our Websites. Please note that, even after removal, copies of your content, including personal information, that you contribute to be shared, published or displayed on our Websites, or transmitted to other users of our Websites, may still remain viewable in cached and archived pages, and may have been saved by other users.

7. Conditions of Third-Party Acceess to our Personal Data

We endeavour to provide you with the same services throughout the world. Thus, we have to share your personal data with internal and external recipients subject to the following conditions:

In particular, this data is used to improve the quality of service and your experience. In order to pursue this legitimate interest, whilst safeguarding your rights and liberties, a specific joint controllership agreement describes the obligations and responsibilities of YML Innovation and our data controller clients. You may, at any time, object to the sharing of this data between the Controller and us by contacting the Data Privacy department whose details appear below. You can also request a summary of the key points of the joint controllership agreement.

1.We share your data with a number of authorised people and departments in the YML Group in order to offer you the best experience. The following teams may have access to your data:

  • Staff
  • IT departments
  • Commercial partners and marketing services
  • Medical services, if applicable
  • generally, any appropriate person within YML Group entities, for certain specific categories of personal data.

2.With service providers and partners: your personal data may be sent to a third party for the purposes of supplying you with services and improving your experience, for example:

  • External service providers: IT sub-contractors, international call centres, banks, credit card issuers, external lawyers, dispatchers, printers.
  • Commercial partners: YML Innovation may, unless you specify otherwise to the Data Privacy department, enhance your profile by sharing certain personal information with its preferred commercial partners. In this case, a trusted third party may cross-check, analyse and combine your data. This data processing will allow YML Innovation and its privileged contractual partners to determine your interests and customer profile to allow us to send you personalized offers.

3.With local authorities: We may be obliged to send your information to local authorities if this is required by law or as part of an inquiry. We will ensure that any such transfer is carried out in accordance with local regulations.

8. International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.

We and third-party service providers and partners operate in Australia and around the world. Our current list of service providers and partners identifies the countries to which your personal information is transferred.

However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These include implementing Standard Contractual Clauses for transfers of personal information between us and others to protect personal information they process which is received from the UK or EEA in accordance with UK and/or European Union data protection law, as applicable.

Our Standard Contractual Clauses can be provided on request. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

Data transfers to countries having different levels of personal data protection, are regulated by standard contractual clauses defined by the European Commission.

9. Data Security

YML Innovation takes appropriate technical and organizational measures, in accordance with applicable legal provisions (in particular: Art. 32 GDPR), to protect your personal data against illicit or accidental destruction, alteration or loss misuse and unauthorized access, modification or disclosure. To this end, we have taken technical measures (such as firewalls) and organizational measures (such as a user ID/password system, means of physical protection etc.) to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services. In relation to the submission of credit card data when making a reservation, SSL (Secure Socket Layer) encryption and data masking technology is used to guarantee a secure transaction. Organizational measures ensure the security of the processing.

10. Cookies

YML Innovation uses cookies and other tracking technologies on its websites. To find out more about how YML Innovation uses these trackers and how to configure them, please consult our policy on trackers using the “Cookies” link at the bottom of our web pages.

11. Your Rights

You have the right to obtain information about and access your personal data collected by YML innovation, subject to applicable legal provisions. Also, you have the right to have your personal data rectified, erased or have the processing of it restricted. Furthermore, you have the right to data portability and to issue instructions on how your data is to be treated after your death. You can also object to the processing of your personal data, in particular to the sharing of the data related to your preferences.

In the event that you wish to exercise any of your above rights, please contact the Data Privacy Department for the YML Innovation directly by sending an email to privacy@ymlinnovation.com.au or by writing to the address below:

YML Innovation (Data Privacy Department)

2204/520 Oxford street

Bondi Junction NSW 2022

Australia

For the purposes of confidentiality and personal data protection, we will need to check your identity in order to respond to your request. In case of reasonable doubts concerning your identity you may be asked to include a copy of an official piece of identification, such as an ID card or passport, along with your request. A black and white copy of the relevant page of your identity document is sufficient. All requests will receive a response as swiftly as possible.

You also have the right to lodge a complaint with a data protection authority. For your information, You can contact YML Innovation data protection officer by writing to the above postal address..

If you have a complaint about how we collect, hold, use or disclose your personal data, you can also contact privacy@ymlinnovation.com.au.

12. Update

We may modify this charter from time to time. Consequently, we recommend that you consult it regularly.

13. Questions and Contacts

For any questions concerning The YML Innovation’s personal data protection policy, please contact the Data Privacy department.

14. Notices Realted to Local Laws and Regulation

YML Innovation is established in Australia and as such its data processing activities first have to be compliant with the Australian Privacy Regulations 2013. In addition, we comply with the European General Data Protection Regulation (“GDPR”). But in addition to the GDPR, there are other laws and regulations which, depending on your specific situation, may also govern the use of your personal data.



Last Updated: 10 January 2026