Privacy Policy

Effective Date: September 1, 2026 • Compliant with the Australian Privacy Act 1988 (APPs), General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller Identification & Scope

Cloud Focal ("Cloud Focal", "we", "us") provides technical staffing, cloud architecture, cyber defense, and enterprise IT consulting. We operate through Cloud Focal Pty Ltd in Australia (Melbourne HQ) and Cloud Focal Inc. in the United States (San Francisco).

2. Categories of Data Collected

A. Technical Candidates, Contractors & Job Applicants

We collect contact details, professional resumes/CVs, work history, certifications (AWS, Azure, GCP), code assessment submissions, right-to-work / visa verification (e.g., Australian VEVO, US Work Authorization), and background check verification records with your express written consent.

B. Enterprise Clients & Business Contacts

We collect corporate contact details, Statements of Work (SOWs), technical requirement specifications, and billing information.

C. Website Visitors

We collect device telemetry, IP addresses, browser specifications, and cookie preferences.

3. Unsolicited Candidate Information (APP 4 Protocol)

If Cloud Focal receives unsolicited resumes or CVs, we will determine within a reasonable period whether we could have lawfully collected the data under Australian Privacy Principle 3. If not, the information is securely destroyed or de-identified immediately.

4. AI & Automated Decision-Making Disclosures

Human-in-the-Loop Commitment: Cloud Focal does not make hiring or qualification decisions based solely on automated processing or algorithmic filtering. All applications and talent placements are evaluated and approved by experienced recruitment professionals.

5. Cross-Border International Data Transfers (APP 8 & GDPR)

Candidate and project files may be processed between our Australian and US offices using Standard Contractual Clauses (SCCs), TLS 1.3 encryption in transit, and AES-256 encryption at rest.

6. Data Retention Schedules

Candidate Talent Bench: 24 to 36 months (with re-consent notices).
Placed Contractor & Invoicing Records: 7 years (statutory tax requirement).
Website Telemetry: 14 months (Google Analytics 4 standard).

7. Your Privacy Rights

You have statutory rights to access (APP 12, GDPR Art. 15, CCPA), correct (APP 13, GDPR Art. 16), delete (GDPR Art. 17, CCPA), or opt-out of marketing at any time. We honor Global Privacy Control (GPC) signals.

8. Privacy Officer Contact

Data Privacy Officer: Cloud Focal Pty Ltd / Cloud Focal Inc.
Email: privacy@cloudfocal.com
Melbourne Office: Collins Street, Melbourne VIC 3000, Australia
San Francisco Office: 123 Technology Drive, Suite 200, San Francisco CA 94105, USA