Privacy Policy

Effective 5 August 2026

This policy explains how Preventionlabs collects, uses, stores, and protects personal information. We comply with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) and our obligations under the Australian Consumer Law (Schedule 2, Competition and Consumer Act 2010).

1. Information We Collect

We collect only the information necessary to deliver our services:

  • Contact information: Your name, email address, and business name, provided when you contact us or engage our services.
  • Payment information: Bank transfer reference details for payment processing. We do not store bank account numbers, card numbers, or financial credentials.
  • Client codebase: A production-equivalent copy of your system that you provide for security assessment. This contains no real user data. This is deleted from our systems upon delivery of the final report.
  • Communications: Emails and messages exchanged during the engagement.

We do not collect sensitive information as defined under the Privacy Act 1988 (such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data).

2. How We Collect Information

We collect personal information directly from you when you:

  • Contact us via email
  • Enter into an engagement agreement
  • Provide your codebase for assessment
  • Communicate with us during an engagement

We do not collect personal information from third parties. We do not purchase data, scrape websites, or acquire information from data brokers.

3. Purpose of Collection

We collect and use your information for the following purposes only (APP 6):

  • Delivering the security assessment you engaged us for
  • Communicating with you about the engagement
  • Processing your payment
  • Complying with legal obligations (tax records, dispute resolution)

We will not use your information for any purpose other than the reason it was collected, unless you give us written consent or we are required to do so by law.

4. Disclosure

We do not disclose your personal information to any third party except:

  • Legal requirements: Where required by Australian law, a court order, or a lawful request by a regulatory authority (such as the Australian Taxation Office or the ACCC).
  • Professional advisors: Accountants or legal counsel, bound by their own professional confidentiality obligations, solely for tax compliance or dispute resolution purposes.

We do not sell, rent, or trade personal information. We do not share information with marketing platforms, analytics providers, or advertising networks. We do not transfer personal information overseas.

5. Website

The Preventionlabs website is a static site hosted on Cloudflare Pages. It does not use cookies, tracking pixels, analytics scripts, or any form of user tracking. The website includes a contact form that submits your name, email address, business name, and inquiry details. This information is transmitted via Resend (a transactional email service) and delivered to us as an email. No form submissions are stored on our servers or in any database. Resend's processing of this data is subject to their own privacy policy.

6. Data Security (APP 11)

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure:

  • Client codebases are stored only on local systems during the engagement and permanently deleted upon delivery of the final report.
  • Communications are conducted via encrypted email where possible.
  • Access to client information is limited to the assessor working on your engagement.
  • We do not store client information on shared or cloud-based systems beyond what is necessary for email communication.

7. Data Retention

  • Client codebase: Deleted from our systems upon delivery of the final report. Not retained.
  • Assessment reports: A copy is retained for our records for 7 years for legal and tax compliance purposes, unless you request earlier deletion.
  • Contact information: Retained for the duration of our business relationship and for 7 years after the last engagement for tax compliance.
  • Payment records: Retained for 5 years as required by the Taxation Administration Act 1953 (Cth).

8. Access and Correction (APP 12 and APP 13)

You have the right to:

  • Access the personal information we hold about you. We will respond to access requests within 30 days.
  • Correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. We will correct information within 30 days of your request.

To make an access or correction request, email contact@preventionlabs.com.au.

We will not charge you for making a request or for correcting information. We may charge a reasonable fee for providing access if the request requires substantial effort, and we will inform you of the fee before proceeding.

9. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint:

  1. Contact us at contact@preventionlabs.com.au with details of your complaint. We will respond within 30 days.
  2. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone at 1300 363 992.

10. Notifiable Data Breaches

In the event of an eligible data breach as defined under Part IIIC of the Privacy Act 1988 (Notifiable Data Breaches scheme), we will:

  • Notify the OAIC as soon as practicable.
  • Notify affected individuals as soon as practicable.
  • Include in the notification: the nature of the breach, the information involved, and recommended steps for affected individuals.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. The effective date at the top of this page indicates when the current version took effect. Material changes will be communicated directly to active clients.

12. Contact

For any questions about this privacy policy or your personal information:

Preventionlabs
Email: contact@preventionlabs.com.au
Location: Western Australia