We collect and use analytics and cookie data from a person’s use of the website (www.cyberturity.com.au), to understand how people interact with our site.

We generally collect this information through the use of cookies. More information about this is contained in our Cookie Notice.

Information we collect and process when you use our website and platforms includes:

• Your device’s IP address
• The date and time that you visited our website
• Whether you have been to our website before
• What site referred you to our website
• Approximate location of the device you used to interact with our website

If you are a contact person for an organisation, we collect and process minimal personal information when you ask about our platforms and services. Enquiries can be made via email, post, or when you submit an online ‘contact us’ form.

Information we collect and process may include the name of an organisation’s contact person, the organisation’s preferred phone, email and address details, and details of the enquiry or correspondence with us.

We may use the details of a customer’s nominated contact person to communicate with our customer, including in regards to the platform, our services, sales, and accounts. Information we collect and process may include the name of the customer’s contact person, the organisation’s preferred phone, email and address details.

We may send promotional emails to a customer’s nominated contact person, where they have opted to receive marketing material. Whilst these emails may be sent to a customer’s contact person, they are intended for our customers, i.e. organisations. If at any time the customer wishes not to receive promotional communication from us, they may unsubscribe using the unsubscribe method described in the email.

We collect and process limited personal information to register or activate our customer’s Cyberturity account. We collect details of the customer’s nominated person via our platform when you register your organisation’s account, including:

• First name
• Last name
• Country location
• Business mobile number
• Business email
• Password
• Role within the customer organisation
• Profile picture (where it includes an image of a person)

When a customer uses our platform, they may provide us with contact information or other personal information that relates to an individual in their professional capacity, working for our customer’s suppliers or customers. We collect and use this information for the purpose of providing our cyber security services to our customers.

A customer may submit a question or request support by submitting a form located within the customer’s administrator or user account. When the customer requests support, we collect the name of the customer’s contact person, business email address and details of the question, issue or support request, and our correspondence with you in regard to the request.

We collect and process payment information to provide our products and services. When customers provide payment information to us, they will usually provide the payment information of the customer organisation; not payment information of an individual.

There may be limited circumstances where personal payment information is provided to and processed by us (such as name on card, card type, amount purchased). We do not knowingly receive payment information of a person; rather, we ask our customers to use their approved corporate payment facilities.

We collect and process feedback information to improve the types and quality of services offered, and the manner in which those services are provided to customers. We may collect your opinions and feedback by conducting surveys or market research, or by seeking other information from you on a periodic basis.

When you submit a request to access or correct your personal information, or submit a privacy complaint, we use this information to process your request or investigate your concern, and to communicate with you. We collect and use your name, contact information and details regarding your request or concern.

When you apply for a job with us, we collect and process your personal information as part of the application, and potentially, the hiring process. Recruitment information we collect and process may include name, email, phone, address, resume, cover letter details and references.

We store personal information that we collect using public cloud services that are secured using best practice authentication techniques to protect your data from unauthorised access, modification or disclosure. Cyberturity stores data, including personal information, with Google and Amazon Web Services. The information is stored in the jurisdiction in which we collected it from (for example, where personal information is collected from within the US, the data is stored on servers located int the US) when it is possible to do so.

We also use vendors to store specific types of personal information (such as analytics and accounting information) on our behalf. The personal information stored by vendors relates directly to their functions and services, and is stored in accordance with our contract with these providers.

Cyberturity have implemented a range of data security practices and controls, including (but not limited to):

• Use of access controls, including multi-factor authentication,
• Security awareness training,
• Encryption of personal information during transit and at rest where possible,
• Personal information is stored and backed up in secure offsite locations,
• Back-ups of data is regularly tested for full operational recovery,
• Use of anti-virus on all company workstations and laptops, and
• Installation of firewalls where our network connects to the public internet.

Protection of personal information from unauthorised access, disclosure, alteration or loss is a priority for us. Any concerns about the security of personal information collected or processed by Cyberturity should be reported to us at using our contact details below.

We keep your personal information for different periods, depending on the purpose that it was collected for. Where we no longer require personal information for the purpose it was collected, we will securely destroy that data.