Privacy Policy.

This policy explains how Cyber Australia Pty Ltd (ABN 95 673 406 285), trading as CyberAi ("CyberAi", "we", "us"), handles personal information. It covers information we collect through cyberai.com.au and cyberai.nz and in the course of running our business. We handle it in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the Information Privacy Principles in the Privacy Act 2020 (NZ).

We collect only the business contact and enquiry information we need, such as:

• Your name, company, role, work email and phone number.
• What you tell us when you contact us, request a Security Model Review, or work with us.
• Information needed to provide and support the services you engage us for.

We may also collect information about your organisation's environment, such as security controls, technology and compliance requirements, so we can recommend and deliver the right solutions. We treat this as confidential and protect it accordingly.

We do not ask for sensitive personal information, such as health information. Please don't send it to us unless we specifically need it.

Mostly directly from you, for example through our website forms, email, phone and meetings. We may also receive business contact details from our technology partners when they introduce us, or from public sources such as professional networking sites and company websites. Where we do, we will let you know when we first contact you.

Our website does not use cookies, analytics or advertising trackers. Like most websites, our hosting may keep standard technical logs for security and reliability. To stop spam, we keep a scrambled, one-way code made from your IP address and email address when you send a form. It lets us limit how often a form can be sent. It cannot be used to contact you, and it is deleted within 7 days.

• To respond to enquiries and arrange a Security Model Review if you asked for one.
• To provide, manage and support our services.
• To keep you informed about our services. You can opt out at any time.
• To meet our legal and contractual obligations.

We do not sell your information or use it for anything unrelated. We do not use automated tools to make decisions about you that significantly affect your rights or interests.

We share information only where needed to provide our services or run our business. This may include trusted service providers that support our operations, and technology partners involved in delivering the products and services you engage us for. We do not otherwise disclose your information unless you agree or the law requires it.

Some of these organisations may store or access information outside Australia and New Zealand, including in the United States. We choose organisations with established security and privacy protections.

We use security controls appropriate to a cybersecurity business to protect personal information from misuse, loss and unauthorised access. Access is limited to the people at CyberAi who need it. We keep information only as long as we need it for the purposes above, or as the law requires, and then securely delete it.

You can ask to see or correct the personal information we hold about you, or ask us to stop contacting you, at any time. Email hello@cyberai.com.au.

If you have a concern about how we have handled your information, email us first. We will look into it and respond in writing within 30 days. If you are not satisfied with our response, you can contact:

• In Australia, the Office of the Australian Information Commissioner at oaic.gov.au.
• In New Zealand, the Office of the Privacy Commissioner at privacy.org.nz.

We may update this policy. The date at the top shows the current version.

Cyber Australia Pty Ltd trading as CyberAi, Level 22, 180 George Street, Sydney NSW 2000. hello@cyberai.com.au