Privacy Policy

CYBERXM SERVICES PTY LTD (ABN 18 666 788 736) ('CyberXM', 'we', 'us', 'our') is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and store personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or engaging our services, you consent to the collection and use of your personal information as described in this policy.

We may collect the following types of personal information: • Contact details — name, email address, phone number, and organisation name when you submit an enquiry or book a consultation through our website. • Professional information — your role, industry, and the nature of your security or compliance requirements, to the extent you provide this in correspondence with us. • Website usage data — IP address, browser type, pages visited, time on site, and referral source, collected automatically via analytics tools. • Communications — records of emails, messages, and other correspondence you send to us. We do not collect sensitive information (such as health, financial, or government identifier information) through our website.

We collect personal information in the following ways: • Directly from you — when you complete a contact form, book a consultation, or send us an email. • Automatically — through cookies and analytics tools when you visit our website. • From third parties — occasionally from referral partners or publicly available sources, where relevant to a potential engagement.

We use your personal information to: • Respond to your enquiries and provide the services you have requested. • Communicate with you about our services, proposals, and engagements. • Improve our website and understand how visitors use it. • Comply with our legal and regulatory obligations. • Send you relevant updates or information about our services, where you have consented or where permitted by law. We will not use your personal information for purposes other than those described in this policy without your consent, unless required or permitted by law.

We may disclose your personal information to: • Service providers — third-party providers who assist us in operating our website and delivering our services, including cloud hosting providers, email platforms, and analytics services. These providers are required to handle your information in accordance with applicable privacy laws. • Professional advisers — lawyers, accountants, and insurers where necessary. • Regulatory and law enforcement bodies — where required or authorised by law. We do not sell, rent, or trade your personal information to third parties for marketing purposes. Some of our service providers may be located outside Australia. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles.

Our website uses cookies and similar technologies to improve your experience and understand how the site is used. Cookies are small text files stored on your device. We use: • Essential cookies — required for the website to function correctly. • Analytics cookies — to collect aggregated, anonymised data about how visitors use our site (for example, via Google Analytics). You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website. Our website may use Google Analytics, which collects data about your use of the site and transmits it to Google servers. Google's privacy policy is available at policies.google.com/privacy.

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include access controls, encryption in transit, and secure cloud infrastructure. While we take security seriously, no method of transmission over the internet is completely secure. We cannot guarantee the absolute security of information transmitted to or from our website. We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

You have the right to request access to the personal information we hold about you, and to request that we correct any inaccurate, incomplete, or out-of-date information. To make a request, please contact us using the details below. We will respond within a reasonable timeframe. In some circumstances, we may be unable to provide access — for example, where doing so would unreasonably impact the privacy of another individual, or where an exception under the Privacy Act applies. We will explain any refusal in writing.

If you believe we have handled your personal information in a way that does not comply with the Australian Privacy Act or the Australian Privacy Principles, you may make a complaint by contacting us using the details below. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on this page. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy, or wish to exercise your rights in relation to your personal information, please contact us: CYBERXM SERVICES PTY LTD Email: info@cyberxm.com.au Website: cyberxm.com.au