Privacy Policy

Last updated: June 2026.

CyberSafeCheck (“we”, “us”, “our”) provides a free online cyber security and compliance self-assessment for Australian businesses. This policy explains how we handle personal information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The information we collect

Your assessment results. When you complete an assessment, your results — your score and answers — are sent to us and stored so we can understand how the tool is being used and follow up if you request it. Your personal contact details (such as your name, email and phone) are only included if you choose to provide them or request a callback.

When you request a callback. If you ask us to contact you, we collect the details you provide — your name, business email, phone number, company name and any message — together with the results of your assessment (your score, your answers and the recommendations generated for you).

Technical information. Like most websites, our hosting may automatically record standard technical information such as your IP address and browser type, and we use essential cookies needed for the site to function.

How we use your information

We use the information you submit to respond to your request — to review your assessment results and to arrange for a suitable security specialist to contact you to help you understand and remediate the gaps identified. We may use your contact details to follow up about your request.

Disclosure to our security partners

CyberSafeCheck works with a network of trusted, independent security partners. If you request a callback, we may share your contact details and assessment results with an appropriate partner for the sole purpose of contacting you and assisting with remediation. We do not sell your personal information, and we do not share it for unrelated purposes. We take reasonable steps to ensure our partners handle your information consistently with the Australian Privacy Principles.

Storage and security

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, and we retain it only for as long as needed to fulfil your request or as required by law. Some of our service providers (such as hosting and email) may store or process data on servers located outside Australia; where that occurs, we take reasonable steps to ensure your information remains protected.

Accessing or correcting your information

You may request access to, or correction of, the personal information we hold about you, and you may ask us to delete it. To make a request, please get in touch using the request form on our homepage.

Complaints

If you have a concern about how we have handled your personal information, please contact us first and we will work to resolve it. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page.