Privacy Policy

About this policy

VAYSEC PTY LTD (VaySec, we, us) provides cybersecurity consulting services to Australian organisations. This policy explains personal information handling in connection with our website, enquiries and business relationships. Engagement-specific confidentiality and data-handling arrangements may also apply under a written agreement.

We handle personal information in accordance with Australian privacy laws that apply to us, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where applicable.

Information we handle

When you contact us, we may receive your name, business contact details, organisation, role and the information you include in your enquiry. Business correspondence and engagement records may contain personal information provided by you or an authorised representative of your organisation.

Website delivery and security services may process technical information such as your IP address, browser, requested pages, timestamps and error or security logs. The public website has no account registration, sign-in or online payment facility.

Please share only information needed for your enquiry. Contact us to agree a suitable transfer method before sending sensitive project material, credentials or personal records.

How information is used

We use information to respond to enquiries, discuss and deliver agreed services, manage business relationships and records, protect our systems, and meet applicable legal obligations. If information necessary for an enquiry or engagement is not provided, we may be unable to assist.

You can make a general enquiry without identifying yourself where practicable. We may need to verify your identity or authority before discussing an engagement or releasing information.

Website services & your choices

This website is delivered through Cloudflare and loads fonts from Fontshare. Your browser connects to those providers to retrieve the site and its fonts, which can disclose technical request information to them. See Cloudflare’s privacy policy and Fontshare’s privacy policy for their practices.

The site stores your light or dark theme preference in your browser’s local storage. Article searches run in your browser. The site code does not add advertising trackers or a third-party analytics script; hosting and security services may maintain operational logs or use necessary security technologies.

You can clear local storage through your browser settings. LinkedIn links and sharing buttons take you to LinkedIn, where its own terms and privacy practices apply.

Service providers & overseas processing

Information may be handled by providers supporting website delivery, communications, document storage and professional services, or disclosed when required or authorised by law. For consulting engagements, authorised recipients and handling requirements are addressed through the engagement arrangements.

Our service providers operate internationally, so information may be processed outside Australia. Locations depend on the service and configuration; serving Australian organisations does not mean all website traffic or business information is stored exclusively in Australia. Contact us to discuss data-location requirements before sharing project information.

Security & retention

We take reasonable steps to protect personal information from misuse, loss and unauthorised access or disclosure. No internet transmission or storage system is completely secure.

Information is retained for the purpose for which it is needed, including agreed service delivery, business records and applicable legal requirements. Retention varies by record type and engagement. Information no longer needed is deleted or de-identified where required by applicable law, subject to lawful retention requirements.

Access, correction & complaints

Contact hello@vaysec.com to request access to or correction of personal information, or to raise a privacy concern. Please describe your request without including unnecessary sensitive information. We may need to verify your identity and will explain any applicable legal reason for refusing a request.

We will review privacy complaints and respond within a reasonable period. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner (OAIC). The OAIC generally asks you to complain to the organisation first and allow 30 days for a response.

Policy updates

We may update this policy as our services or practices change. The date at the top identifies the latest revision. Contact us if you need this policy in another accessible format.