Privacy Policy

CyberByte Pty Ltd (ABN 57 637 580 646), trading as CyberByte Security(“we”, “us”), respects your privacy. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

We aim to collect only what we need to respond to you and deliver what you asked for. Depending on the form you use or how you contact us, that can include:

• Your name, work email address and organisation
• What is prompting your enquiry, and the contents of your message
• For partner (MSP) enquiries, an approximate number of clients
• For resource requests, your email address and, if you opt in to updates, a record of that consent (the wording you agreed to, when, and on which page)

We also collect technical information automatically when you use the site, such as your IP address, browser and device type, the pages you visit and how you interact with them. This comes through Google Analytics 4, described below. Our servers also use your IP address briefly to limit repeated form submissions. We do not seek to collect sensitive information, so please don't enter passwords or other sensitive details in our forms.

How we use it

• To respond to your enquiry and scope potential work.
• To deliver resources you request (such as a checklist or guide).
• To send occasional security updates, only if you opt in.
• To understand how the site is used, and to provide and improve our services and this website.

We do not send spam. We will not add you to a marketing list without your consent, and any updates you do opt into will include a simple way to unsubscribe.

How we handle your information

We collect your personal information directly from you — when you choose to contact us or request a resource — and use it only for the purposes described above, in line with the Australian Privacy Principles (APPs). You can ask us to stop contacting you at any time.

Service providers we rely on

We use the following service providers to operate the site and communicate with you:

• Netlify — website hosting, including the servers that process form submissions.
• Cloudflare — domain name (DNS) services, and bot protection on our enquiry, partner and resource-request forms (Cloudflare Turnstile).
• Resend — transactional email (enquiry notifications, confirmations and resource delivery). If you opt in to updates, Resend also holds your email address on our marketing contact list. We add people to that list only when they opt in.
• Google Analytics 4 — aggregate website usage analytics. It uses cookies.
• Microsoft 365 — our business email, file storage and online meetings.
• HubSpot — our customer relationship management (CRM) system, where we keep a record of enquiries and our correspondence with you.

Some of these providers may store or process information outside Australia, including in the United States. They process data on our behalf under their own security and privacy commitments, and we take reasonable steps to ensure it is handled consistently with the APPs. We do not sell your personal information.

How we secure your information

We take reasonable steps to protect your information from misuse, loss and unauthorised access — including access controls and encryption of data in transit. No method of transmission or storage is perfectly secure, but we handle personal information consistently with the Australian Privacy Principles.

How long we keep it

We retain personal information only for as long as reasonably necessary, including to meet legal, insurance, security and record-keeping requirements. We securely delete or de-identify it when it is no longer required.

Your rights

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate. To make a request, or if you have a privacy concern, email us at hello@cyberbyte.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If you opted in to updates, you can unsubscribe at any time using the link in any update, or by emailing us.

Free ASD Essentials Quick Check

The Quick Check runs in your browser. Your answers aren't stored or sent to us, and we don't ask for your name or email. We use Google Analytics to count visits and how many people finish the check; it never receives your answers or your result. If you choose “Talk through my result”, a summary of your result is added to the enquiry form for you to review, edit or delete before you send it.

Automated decisions

We don't use computer programs to make decisions that significantly affect individuals' rights or interests. The Quick Check produces an indicative result for your organisation; it is not a decision about you.

Cookies and analytics

We use Google Analytics 4 to understand how the site is used. It uses cookies and similar technologies. We don't use session-replay or advertising cookies. You can opt out:

• Use your browser's settings to block or delete cookies. Disabling cookies will not stop you using the site.
• Install the Google Analytics opt-out browser add-on to stop Google Analytics collecting data about your visits.

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the most recent revision.

Contact us

Questions about this policy or your information? Email hello@cyberbyte.au.