Privacy Policy

About this policy

This policy explains how CISOONDEMAND PTY LIMITED (ABN 92 667 586 076) ('CISO on Demand', 'we', 'us') handles personal information when you visit cisoondemand.com.au, contact us, or use our CISO on Demand and SentryLine platforms.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Information we collect

• Enquiries: your name, email address and anything you include in your message when you contact us.
• Client and platform users: name, business contact details, job title, login and account details, and records of your use of our services.
• Client environment data: when we deliver advisory or testing services, we may access information about your organisation's systems, assets, users and security findings. We handle this as confidential client information under our agreement with your organisation.
• Website usage: technical information such as IP address, browser type, pages viewed and cookie identifiers, including a HubSpot tracking cookie that links website visits to enquiries.

We do not intentionally collect sensitive information. Please do not include it in enquiries.

How we use it

• to respond to enquiries and provide quotes;
• to deliver, secure, support and improve our services and platforms;
• to manage our client relationships, billing and records;
• to send you information about our services where you would reasonably expect it or have agreed (you can opt out at any time);
• to meet our legal and contractual obligations.

Who we share it with

We share personal information only as needed with:

• service providers who help us run our business, including HubSpot (customer relationship management and website forms) and our cloud hosting and email providers;
• professional advisers such as lawyers, accountants and auditors;
• anyone else you authorise, or where required or permitted by law.

We do not sell personal information. Our service providers are bound by confidentiality and data protection obligations.

Overseas disclosure

Some of our service providers may store or process personal information outside Australia, including in the United States. Where this happens, we take reasonable steps to ensure the information is handled consistently with the Australian Privacy Principles.

Cookies

Our website uses cookies to make it work, understand how it is used and connect enquiries to website activity. You can block or delete cookies in your browser settings; some features may not work as expected if you do.

Security

We protect personal information with technical and organisational controls appropriate to a security firm, including access controls, encryption in transit and least-privilege access. No system is completely secure, so if you believe your information has been compromised, contact us immediately.

How long we keep it

We keep personal information only as long as needed for the purposes above or as required by law, and then securely delete or de-identify it. Client environment data is retained and deleted in line with the relevant client agreement.

Access and correction

You can ask to access or correct the personal information we hold about you by emailing us. We will respond within a reasonable time, usually 30 days.

Questions and complaints

Contact us at robert.mcadam@cisoondemand.com.au. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page.