Privacy policy

Last updated: 26 June 2026

Spend Sphere is a product of the Acquire family, operated by Elpmis Group (ABN 79 162 452 084) ("we", "us", "our"). We respect your privacy. This policy explains what personal information we collect through this website and in delivering our services, how we use it, how we handle client data extracts, and your rights. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

• Information you give us — when you book a call, complete our contact form or email us, we collect details such as your name, organisation, role, email address, and the information you provide about what you'd like answered.
• Client data extracts — when you engage us, we work with extracts of your procurement data (typically purchase orders, invoices, contracts and supplier master data) that you provide or that we help you export from your systems.
• Technical information — like most websites, our host may record standard server log data (such as IP address, browser type and pages visited) for security and to keep the site running.

How we use personal information

We use the information you provide to respond to your enquiry, scope the work, deliver our services, invoice and keep records of our dealings with you. We don't use it for unrelated marketing without your consent.

How we handle client spend data

Client data extracts are used solely to produce your reports and answers. Key commitments:

• Australian-hosted (onshore) — client data is stored and processed in Australia.
• Encrypted in transit and at rest — we take reasonable steps to protect data from misuse, loss and unauthorised access.
• Scope-limited — we use your data only for the engagement you agree with us, from the extracts you provide.
• Retention and deletion — we retain client data only for as long as needed to deliver the service and meet our legal and contractual obligations. On request or at the end of an engagement, we delete or return data in line with our agreement with you.
• NDA and security reviews — we're happy to sign your NDA and complete your security questionnaire. See our about page for our current security posture (working towards ISO 27001; SOC-aligned controls; independently penetration tested).

We don't sell your data or use it to train public models. We don't share client spend data with other clients.

Who we share information with

We don't sell personal information. We may share it with trusted service providers who help us operate, only as needed:

• Calendly — if you book a call through our scheduling link, Calendly processes the booking details you provide.
• Web3Forms — processes contact-form submissions and delivers them to us by email.
• Our website host, cloud infrastructure and email provider — to host the site, store client data onshore, and receive your messages.
• Google Fonts — fonts are served by Google, which may receive your IP address when the page loads.

We may also disclose information where required by law.

Overseas disclosure

We aim to keep client spend data in Australia. Some service providers (such as Google Fonts or email delivery) may process limited technical or contact information outside Australia. Where that occurs, we take reasonable steps to ensure those providers handle information in line with applicable privacy standards.

Cookies and analytics

This site does not set marketing or tracking cookies by default. If we add website analytics in future to understand how the site is used, we will update this policy.

Your rights

You can ask to access or correct the personal information we hold about you, or ask a question or make a complaint about how we handle it. Contact us using the details below and we'll respond within a reasonable time. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact us

Spend Sphere (Elpmis Group) · ABN 79 162 452 084
Email: hello@spendsphere.ai
Brisbane, QLD, Australia

This policy may be updated from time to time. The current version is always available on this page.