Privacy Policy

Privacy PolicyEffective Date: 05/07/20261. IntroductionAl-Kastal we are committed to protecting the privacy and security of our clients' personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website or engage our cybersecurity and IT services.We are committed to handling personal information responsibly and, where applicable, in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).________________________________________

2. Information We CollectDepending on the services you request, we may collect:Personal Information•Full name•Company or business name•Position or job title•Email address•Telephone number•Postal or business addressBusiness Information•Company information•Domain names•Microsoft 365 tenant information•IT infrastructure details•Network information•Device inventory•Licensing informationTechnical Information•IP addresses•Browser type•Device information•Operating system•Security logs•Authentication records•Website usage informationPayment InformationWhere applicable, we may collect billing details necessary to process payments. We do not store full payment card information unless required by law or processed securely through a trusted payment provider.________________________________________

3. How We Collect InformationWe collect information when you:•Contact us by phone or email•Submit a website enquiry•Request a quotation•Purchase our services•Book consultations•Request remote support•Participate in security awareness training•Subscribe to newsletters•Visit our websiteTechnical information may also be collected automatically through cookies, analytics tools, and security monitoring systems.________________________________________

4. Why We Collect Your InformationWe collect personal information to:•Deliver cybersecurity services•Provide IT support•Configure Microsoft 365 services•Configure SPF, DKIM and DMARC•Install and manage endpoint protection•Configure Group Policy•Respond to enquiries•Prepare quotations•Manage customer accounts•Process payments•Improve our services•Detect fraud or cyber threats•Comply with legal obligations________________________________________

5. Security of Your InformationProtecting your information is fundamental to our business.We use reasonable technical and organisational safeguards including:•Multi-factor authentication (MFA)•Encryption where appropriate•Secure remote management tools•Endpoint protection•Firewalls•Access controls•Strong password policies•Regular software updates•Security monitoring•Secure backups•Staff confidentiality obligationsWhile we take reasonable precautions, no system connected to the Internet can be guaranteed to be completely secure.________________________________________

6. Remote AccessWhere authorised, we may remotely access your systems to provide support, maintenance, troubleshooting, monitoring, or cybersecurity services.We access only the systems necessary to perform the requested work and take reasonable measures to protect confidentiality.________________________________________

7. Cybersecurity MonitoringWhere included within your service agreement, we may monitor:•Security events•System logs•Authentication attempts•Malware detections•Endpoint health•Email security events•Firewall eventsThis monitoring is performed solely for providing contracted cybersecurity services.________________________________________

8. Disclosure of InformationWe do not sell personal information.We may disclose information to trusted third parties where necessary, including:•Cloud service providers•Microsoft 365•Secure hosting providers•Payment processors•Accountants•Legal advisers•Government authorities where required by lawWe require third parties to protect information appropriately.________________________________________

9. International Data TransfersSome cloud services we use may store or process information outside Australia.Where this occurs, we take reasonable steps to ensure that service providers maintain appropriate security and privacy protections.________________________________________

10. Data RetentionWe retain personal information only for as long as necessary to:•Provide our services•Meet legal obligations•Resolve disputes•Maintain security records•Enforce agreementsWhen information is no longer required, we securely delete or de-identify it where reasonably practicable.________________________________________

11. CookiesOur website may use cookies to:•Improve website functionality•Analyse website traffic•Maintain website security•Remember user preferencesYou may disable cookies through your browser settings; however, some website features may not function correctly.________________________________________

12. Marketing CommunicationsWe may occasionally send information about our services.You may opt out at any time by using the unsubscribe link or contacting us directly.________________________________________

13. Your RightsSubject to applicable law, you may request:•Access to your personal information•Correction of inaccurate information•Updates to your information•Withdrawal from marketing communicationsRequests should be submitted using the contact details below.________________________________________

14. Data BreachesIf we become aware of a data breach affecting personal information, we will investigate promptly.Where required by applicable law, we will notify affected individuals and relevant authorities.________________________________________

15. Third-Party WebsitesOur website may contain links to external websites.We are not responsible for the privacy practices or content of third-party websites.________________________________________

16. Children's PrivacyOur services are intended for businesses and adults.We do not knowingly collect personal information from children under the age of 18.________________________________________

17. Changes to this Privacy PolicyWe may update this Privacy Policy from time to time.The latest version will always be published on our website with the updated effective date.________________________________________

18. Contact UsIf you have questions about this Privacy Policy or wish to access or correct your personal information, please contact us:Al KastalEmail: support@alkastal.com.auPhone: 0865073515Website: [www.yourdomain.com.au]Address: 62 Subiaco Road Subiaco 6008We will respond to privacy enquiries within a reasonable timeframe.