Data, Privacy & Compliance FAQs (Australia)

Below are answers to common questions about data handling, backups, recovery, privacy, and related requirements for customers operating in Australia. This information is provided for general guidance and is not legal advice. Customers are responsible for determining which laws and requirements apply to their business.

For more information about Australian privacy, marketing, and communication requirements, these official resources are a good place to start:

Do Australian phone numbers require a Regulatory Bundle?

Yes. Australian telecommunications providers are subject to identity and phone-number management requirements, including customer identity verification rules published by the Australian Communications and Media Authority (ACMA). In Chat To Clients CRM, these requirements are handled through an approved Regulatory Bundle for Australian local numbers.

To learn more, see: How to Create and Link a Regulatory Bundle for Australian Local Numbers.

How is customer data protected?

Personal data at rest is encrypted using AES-256-CBC encryption, and data in transit is protected using TLS 1.2 or higher, as outlined in the Chat To Clients CRM Data Processing Agreement.

Where are backups stored?

Data is backed up daily to the local region. Chat To Clients CRM also maintains seven days of database backups and monitors backups for successful execution.

For more details, see: Chat To Clients CRM Security and Compliance Overview.

How quickly are customers notified of a data breach?

The notification timeframe for applicable personal data breaches is 72 hours, as outlined in Chat To Clients CRM's Data Processing Agreement. Customers may have additional notification or reporting obligations depending on the laws that apply to their business.

What is the Recovery Point Objective (RPO) and Recovery Time Objective (RTO)?

The RPO is 30 Minutes and the RTO is 1 Hour.

Last updated Fri, 2 Oct, 2026 at 9:04 AM