Privacy Policy

Last updated and effective from: 25 September 2025.

ABOUT US AND THIS POLICY

The Privacy Act 1988 requires entities bound by the Australian Privacy Principles (APPs) to have a privacy policy.

This privacy policy outlines how Conseek Pty Ltd (ABN 66 676 742 135), collects, handles and protects your personal information. This policy will be interpreted under and governed by the laws of Australia. Conseek’s purpose is to help organisations improve how they respond, investigate and recover after an incident. This may also include identifying when individuals and organisations have been involved in any type of third-party data breach. Conseek delivers a range of free and paid products and services to individuals and organisations within Australia.

INFORMATION THAT WE MAY COLLECT

Conseek may collect “Personal information”, meaning any information or opinion that could identify an individual. This may include:

- Your name;

- Address;

- Phone number(s);

- Email address(es);

- Job title;

- Employer or Occupation;

- History of products, resources or services that you purchase or obtain from us.

We may also collect other information, via our third-party services providers, such as:

- Internet Protocol (IP) address(es);

- Your geolocation based on your IP address(es);

- Details about the device, web browser or client software you use to access our services;

- Search terms, pages visited, and any downloads made on Conseek’s website;

- Mouse or cursor movements;

- Whether you opened an email sent to you by Conseek;

- Whether you clicked on any links within an email sent to you by Conseek.

We do not intentionally collect “sensitive information”, unless you choose to provide it and it is directly relevant to our services.

HOW WE COLLECT YOUR INFORMATION

We collect personal information directly supplied by you, when you fill in a form, send us an email, phone us, subscribe to a mailing list, or register for or attend an event. We may also collect from, and store information with our third-party service providers and their subsidiaries. These service providers include:

- Microsoft

- Alphabet Inc.

- HighLevel

- ClickUp

- Cloudflare

- Meta

- DeHashed

- Superlative Enterprises Pty Ltd

- Stripe Inc.

- Xero Limited

WHY WE COLLECT AND HOW WE USE YOUR INFORMATION

We only collect and use your personal information for the purposes of:

- Providing products or services to you;

- Responding to your enquiries or corresponding with you;

- Sending updates, promotional, or other material you have requested to receive;

- Improving our services;

- Managing complaints;

- Complying with legal, legislative or regulatory obligations;

- Notifying you of any changes to this privacy policy.

WHO WE SHARE YOUR INFORMATION WITH

We do not sell your information.

We may share or store your information with our trusted third-parties, including service providers who assist us in operating our business.

We may also share your information with organisations where we are required to do so by law, or where necessary to protect our rights, property, or safety.

Where possible, we ensure your information is stored with Australia, however some of our third-party service providers may store data overseas in other countries such as North America. Where your information is stored internationally, we take reasonable steps to ensure it receives a similar level of protection as required under Australian privacy laws. We will never store your information in any form within China, Russia, North Korea, Iran, or any other location deemed as “high risk” by Conseek, or the Australian Government. Furthermore, we will never store your information in countries where cryptography restrictions or laws apply.

WHO WE SHARE YOUR INFORMATION WITH

Conseek takes cybersecurity and handling of your personal information seriously. All your personal information is both transmitted and stored securely at-rest using strong encryption, either on equipment we directly own, or through reputable and vetted third-party service providers where Conseek retains effective control. All personal information is restricted to authorised personnel only. When your information is no longer required, we take reasonable steps to permanently delete or de-identify it.

YOUR RIGHT TO ACCESS AND CORRECT YOUR INFORMATION

You have the right to request access to the personal information we hold about you, and to ask for corrections if any information is inaccurate or out of date. To do so, contact us at [email protected] and we will respond within 30 days.

COMPLAINTS

If you believe we have breached your privacy rights, please contact us at [email protected]. Include details of what happened and how you would like the issue resolved. We will investigate the matter and respond in writing. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

CHANGES TO THIS POLICY

We may update this Privacy Policy as required, from time to time. The most recent version will always be available on our website and will apply from the date located at the top of the policy. We may also notify you in writing when this Privacy Policy is updated.