Privacy Policy

Summary: CNETS PTY LTD (ABN 78 670 429 464) handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy covers this website, enquiries and our consulting, security testing and training services. Personal information inside the Checkmate platform is covered by the separate Checkmate Privacy Policy.

1. Information we collect

We collect only what we reasonably need, which may include:

• Contact details such as name, job title, organisation, email address and phone number when you enquire, book a review or engage us
• Information you share during an engagement, such as staff names and roles, interview notes, and records needed to assess processes and controls
• System and technical information encountered while performing authorised security testing
• Training participation and completion records for security awareness training
• Website usage information such as pages visited, device and browser type, collected through standard server logs and analytics

We do not ask for sensitive information (such as health information) unless it is necessary and you consent, or the law permits it.

2. How we collect it

We collect personal information directly from you when you contact us by email, phone or through this website, during meetings and engagements, and from your organisation when it engages us. We may also collect it from public sources such as LinkedIn or company websites when preparing for a business meeting.

3. How we use it

We use personal information to respond to enquiries, prepare proposals, deliver and manage services, issue invoices, maintain records, improve our website and services, meet legal obligations and, where you have agreed or would reasonably expect it, send relevant updates. You can opt out of marketing at any time.

4. Disclosure

We do not sell personal information. We may disclose it to:

• Service providers that help us operate, such as email, hosting, accounting, analytics and training delivery providers, under confidentiality obligations
• Certification bodies or auditors, where you ask us to coordinate with them
• Professional advisers, insurers, or authorities where required by law

Some providers may store information outside Australia, including in the United States or other countries. We take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.

5. Security testing data

When performing authorised penetration testing or firewall review, we may come across personal information held on your systems. We access it only as needed to demonstrate a finding, do not retain more than necessary, store evidence securely and delete or return it in line with the engagement terms.

6. Security and retention

We protect personal information using administrative, technical and physical controls appropriate to its sensitivity, including access controls and encryption where suitable. We keep information only as long as needed for the purposes above or as required by law, then securely delete or de-identify it.

7. Cookies and analytics

The website uses essential storage to remember preferences such as your chosen theme, and may use analytics to understand how pages are used. You can control cookies through your browser settings.

8. Access and correction

You may ask to access or correct the personal information we hold about you. We will respond within a reasonable period, usually 30 days. If we refuse, we will explain why.

9. Data breaches

If a data breach is likely to result in serious harm, we will assess and notify affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

10. Complaints and contact

Contact our privacy officer at legal@cnets.com.au, on (03) 7057 3666, or at Ground floor, 470 St Kilda Rd, Melbourne VIC 3004. We aim to respond to complaints within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes

We may update this policy by publishing a new version on this page.