Our privacy approach.

When you fill in our contact form

• Your name and email address
• Your phone number (if you provide it)
• Whatever you write in the message field

We use this to reply to your enquiry. Nothing more. We don't add you to any marketing list unless you separately ask.

When you buy a mobile plan

• Your full name and date of birth (required by Telstra for ID verification under telecommunications regulations)
• Your email address (for receipts and to deliver your eSIM QR code)
• Company name (only if you tell us — it's optional)
• Payment details, which are entered directly into Stripe — we never see your full card number

Your name and DOB are passed to Telstra to provision the service. That's a regulatory requirement — we can't activate a mobile service without it.

When you're a managed-IT client

• Business contact details (name, role, email, phone)
• Information needed to deliver the service — usually access credentials, device inventories, configuration notes, ticket history
• Anything you send us in support tickets or emails

Held in our PSA system (ConnectWise) and Microsoft 365 tenant. Both are protected by MFA, role-based access and encryption at rest and in transit.

When you visit this website

We use Cloudflare to serve the site. Cloudflare logs basic request metadata (IP address, user agent, request path) for fraud and abuse protection. We don't use Google Analytics, ad pixels, or third-party trackers. No cookies are set unless you submit a form.

Only with the suppliers we need to deliver what you've asked for:

• Telstra — to provision mobile services. Telstra's privacy statement.
• Stripe — to process payments. Stripe's privacy policy.
• Microsoft — our email and document infrastructure runs on Microsoft 365. Microsoft privacy statement.
• AWS (Sydney region) — for our application hosting and email sending. Data stays in Australia.

We don't sell, rent or share your personal information with anyone else. Ever.

• Contact form enquiries — kept for 2 years, then deleted unless you've become a client.
• Client records — kept for the duration of our relationship plus 7 years (Australian tax record-keeping requirement).
• Mobile plan customers — kept for the life of the service plus 2 years, per telecommunications regulations.

Under the Australian Privacy Principles, you can:

• Ask what personal information we hold about you
• Ask us to correct anything that's wrong
• Ask us to delete it (subject to the retention requirements above)
• Make a complaint if you think we've mishandled your data

Send us a message via our contact form with "Privacy request" in the subject of your message. We'll respond within 30 days (usually much faster).

If you're not happy with how we handle a complaint, you can escalate to the Office of the Australian Information Commissioner.

We're an IT and cybersecurity firm — so we practise what we preach:

• MFA on every internal account, no exceptions
• Role-based access and least privilege across all systems
• Encryption in transit (TLS 1.2+) and at rest
• EDR/anti-malware on every endpoint and server
• Patching and configuration audited monthly

If you ever spot a security issue with our site or systems, please let us know via the contact form — we appreciate the heads-up.

If we change this page in a material way, we'll update the "Last updated" date at the top. For active clients we'll also drop you an email.

Questions?

Drop us a line — we're happy to explain anything in this document or anywhere else.