Privacy Policy

Version 8 — February 2026

1. Purpose, Scope and Users

Scribefire Pty Ltd recognises and understands the critical importance of privacy and confidentiality when conducting business with its clients, stakeholders and the community. In order to carry out its business activities, Scribefire must receive, handle and store personal information, and Scribefire is responsible for ensuring that personal information is protected in accordance with data protection laws.

The purpose of this Privacy Policy is to explain how and why Scribefire Pty Ltd (“Scribefire”) will receive, collect, handle, use and store the personal information of people who conduct business or otherwise engage with us (“you”). You should read this policy carefully so you are aware of how we may use your personal information.

Users of this document are any naturally identifiable person whose personal information may be received, collected, handled, used and/or stored by Scribefire.

2. Types and Sources of Personal Information

Scribefire collects or receives your personal information from a number of sources, as set out in the table below.

Category	Type of Personal Information	Source
Contact information	Name Address Telephone number Email address Organisation details	You Third parties when personal information is transmitted during the course of providing transcription services to Scribefire's clients.
Security clearance information	Contact information (refer to above) Sensitive information (see below)	You Third party systems used for obtaining security clearances.
Supplier information	Contact information (refer to above) Purchase order information Payment details Banking details Delivery details Credit information	You Third party systems used for obtaining credit information
Website information	Contact information (refer to above) IP address and other online identifiers/web beacons Details of the pages of our website that you have browsed Log on information Account settings	You Our website
Sensitive information	Information relating to actual or suspected criminal convictions and offences Other sensitive information about you, for example race, ethnic origin, religious beliefs, organisational memberships, physical or mental health conditions and other sensitive details of your person	You Third parties when personal information is transmitted during the course of providing transcription services to Scribefire's clients.

3. How We Use Your Personal Information

Scribefire is required to use your personal information on a lawful basis only. Scribefire will only use your personal information in a lawful way in order to perform a contract with you, to comply with our legal obligations and for the legitimate use when required in conducting business with our customers and stakeholders.

4. Sensitive Information

Scribefire may need to access sensitive personal information in order to conduct its business with its clients. The law requires that Scribefire process sensitive information with more care and in accordance with the applicable laws, and to only do so on a lawful basis. The lawful purpose Scribefire accesses your personal information is in performing security checks on its staff and contractors, and also providing transcription services to its clients. Scribefire may only access sensitive information for these purposes if you have given your explicit consent and if it is necessary for the establishment, exercise of or defence of legal claims.

5. Sharing Personal Information

Scribefire does not disclose personal information for marketing purposes.

Sometimes we need to disclose your personal information to other people. In conducting its business, Scribefire sends information to third parties and/or subcontractors. Before disclosing your personal information to third parties, we will seek to ensure they have appropriate technical and organisational measures in place to protect your personal data.

6. Data Security

Scribefire has implemented an information security management system which aligns with the ISO 27001:2022 standard. The purpose of the ISMS is to preserve and protect the confidentiality, integrity and availability of information security (including personal information) within the organisation.

Scribefire will comply with applicable data protection laws to ensure we take the appropriate measures to protect your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.

7. Data Retention

Scribefire will only retain your personal information for as long as we need to for the purposes for which we are processing it.

8. Your Rights

You have the right to request access to personal information we hold about you. We are able to deny access to some or all of your personal information in specified circumstances. We will provide reasons for any refusal in writing.

If you would like to request access to the personal information we hold about you please contact us on privacy@scribefire.com.au. These requests may incur a fee and you will be advised of an estimated fee and the payment options at the time of written acknowledgement. This is usually provided to you within 5 business days. Our response to a request for access to personal information will ordinarily be provided within 30 calendar days.

9. Questions or Complaints

If you have a question or complaint regarding data privacy or the way in which your personal information has been handled, please contact us in the first instance so that we can try to resolve it.

Step 1. Let us know. If you would like to make a complaint by contacting us in writing on privacy@scribefire.com.au. A response is usually provided to you within 5 business days.

Step 2. Seek review by an external service. If an issue has not been resolved to your satisfaction, you can lodge a complaint with the Office of the Australian Information Commissioner:

10. Changes

Our Privacy Policy is regularly reviewed and updated. Please visit our website www.scribefire.com.au for the most up-to-date copy.

← Back to home