Privacy Policy

Last updated: 10 October 2026

CyberCaddy ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.cybercaddy.com.au or engage our services.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are

CyberCaddy is an Australian cybersecurity firm providing services including managed security, cyber consulting, penetration testing, security compliance, OT security, and Essential Eight assessments.

Contact for privacy matters:

CyberCaddy

Email: enquiries@cybercaddy.com.au

Address: 1/20 Douglas Street, Milton QLD 4064

2. What information we collect

We may collect the following types of personal information:

Information you give us directly. When you complete our contact form or otherwise get in touch, we may collect your name, email address, phone number, company name, and the details of your enquiry.

Information collected automatically. When you visit our website, we and our analytics providers may collect technical information such as your device type, browser, approximate location (derived from IP address), pages viewed, and how you interact with the site.

Session analytics. We use Microsoft Clarity to understand how visitors use our website. Clarity may capture information such as mouse movements, clicks, scrolling, and page interactions to produce aggregated heatmaps and session recordings. This helps us improve the site's usability. Microsoft may process this data in accordance with its own privacy practices.

Service delivery information. Where you engage us for cybersecurity services, we may collect additional information necessary to deliver those services, as set out in the relevant engagement agreement.

3. How we use your information

We use personal information to:

• respond to your enquiries and provide the information or services you request;
• deliver, manage, and improve our services;
• understand and improve how our website is used;
• communicate with you about your enquiry or engagement;
• meet our legal, regulatory, and contractual obligations; and
• protect the security and integrity of our systems and our clients' systems.

We will only use your information for the purposes for which it was collected, or for a related purpose you would reasonably expect, unless you consent otherwise or we are required or permitted by law.

4. Marketing communications

Where you have consented, or where otherwise permitted by law, we may send you information about our services. You can opt out at any time by using the unsubscribe link in our emails or by contacting us at enquiries@cybercaddy.com.au.

5. Disclosure of your information

We do not sell your personal information.

We may disclose your information to:

• our service providers and contractors who help us operate our business and website (for example, hosting, analytics, and email providers), who are required to protect your information;
• professional advisers, where reasonably necessary;
• regulators, law enforcement, or other parties where required or authorised by law; and
• a successor entity in the event of a business sale or restructure.

Overseas disclosure. Some of our service providers (including Microsoft Clarity) may store or process information outside Australia. Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

6. Cookies and tracking

Our website uses cookies and similar technologies, including those used by our analytics tools, to operate the site and understand usage. You can control cookies through your browser settings, though disabling them may affect how the site functions.

7. How we protect your information

As a cybersecurity firm, we take the protection of personal information seriously. We maintain technical and organisational measures designed to protect personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. When it is no longer needed, we take reasonable steps to destroy or de-identify it.

9. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, or misleading. To make a request, contact us at enquiries@cybercaddy.com.au. We may need to verify your identity before responding, and we will respond within a reasonable period.

10. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us at enquiries@cybercaddy.com.au and we will investigate and respond.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on our website, with the "Last updated" date shown at the top.