Compliance365 Pty Ltd 68677952359 ("Compliance365", "we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) (as amended by the Privacy and Other Legislation Amendment Act 2024) and the Australian Privacy Principles (APPs). This policy applies to all personal information collected through our website, services, and business operations.
This policy explains how we collect, use, disclose, and manage personal information. It is freely available on our website at www.compliance365.com.au/privacy or by request via info@compliance365.com.au. We review and update this policy periodically to reflect changes in our practices or applicable law.
Wherever lawful and practical, you may choose to interact with us anonymously or under a pseudonym — for example, when submitting general website enquiries or using our readiness checklist tools. However, providing your name and contact details is required if you wish to receive a personalised response or engage our services.
We may collect the following categories of personal information:
We do not collect sensitive information (as defined under the Privacy Act) such as health, financial, racial, religious, or biometric information, unless you choose to provide it voluntarily and we have obtained your express consent.
We collect personal information:
If we receive personal information we did not request (for example, information included in an unsolicited email), we will assess whether it could have been lawfully collected under the APPs. If not, we will destroy or de-identify it as soon as practicable, unless doing so would be unlawful.
We collect and use personal information to:
We will not use or disclose personal information for a purpose other than the primary purpose of collection without your consent, unless an exception under the Privacy Act applies.
By submitting personal information to us — whether via a contact form, email, our AI chat tool, or a service engagement — you consent to its collection, use, and disclosure in accordance with this Privacy Policy.
Where we rely on consent for a specific purpose (such as direct marketing), we will seek that consent separately and clearly. You may withdraw consent at any time by contacting us at info@compliance365.com.au. Withdrawing consent may limit our ability to provide certain services or respond to enquiries.
We deliver consulting and managed compliance services within our clients' own secure environments (e.g., Microsoft 365, SharePoint, Intune, Defender, and similar platforms). We do not host, process, or store any sensitive, confidential, or health-related data belonging to client organisations on our own systems. Access to client environments is strictly limited to authorised personnel and is used solely for the purpose of performing contracted services under written engagement terms. Any access arrangements are governed by our client contracts, which include appropriate confidentiality and data handling obligations.
Our website includes an AI-powered chat assistant. When you use this feature, the content of your messages is transmitted to a cloud-hosted API endpoint (hosted on Amazon Web Services in Australia and/or the United States) and processed to generate a response.
We recommend you do not enter sensitive personal information, confidential business data, or regulated information into the chat tool. Messages may be retained for a limited period for the purpose of improving service quality, subject to applicable data retention limits.
Our website provides interactive readiness checklist tools (covering frameworks such as ISO 27001, SOC 2, Essential Eight, and others). These tools collect organisation name, contact name, and email address for the purpose of generating and optionally emailing a personalised PDF assessment report. This information is processed client-side (in your browser) and, where you elect to receive a PDF copy, transmitted via our secure API to your nominated email address. We do not retain checklist responses beyond what is necessary to deliver your report.
We may disclose limited personal information to trusted third-party providers who assist us in operating our website, delivering services, and managing communications, including:
We do not sell personal information to third parties. We take reasonable steps to ensure third-party providers handle personal information in a manner consistent with the APPs and applicable privacy law.
We may send marketing communications about our services, resources, or events where you have consented to receive them, or where permitted under applicable law. Each marketing communication will include a clear mechanism to opt out. You can unsubscribe at any time by selecting "unsubscribe" in any email or by contacting us at info@compliance365.com.au. We will action opt-out requests promptly and within 5 business days.
Some of our third-party service providers store or process data outside Australia, including in the United States and European Economic Area. These providers include AWS, Google, Microsoft, Apollo.io, and Calendly. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that recipient does not breach the APPs in relation to that information. By using our website or services, you acknowledge that your information may be transferred to and processed in countries outside Australia, consistent with APP 8.
We do not adopt, use, or disclose government-issued identifiers (such as Tax File Numbers, Medicare numbers, or driver licence numbers) as our own identifiers for individuals, except as required or authorised by law.
We take reasonable steps to ensure that personal information we hold is accurate, complete, and up to date. Personal information is stored with appropriate technical and organisational safeguards including encryption in transit and at rest, access controls, and audit logging.
We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. When no longer required, information is securely deleted or de-identified. You may request correction of your personal information at any time.
Our website uses the following tools, which may set cookies or collect usage data:
You may disable cookies or limit tracking via your browser settings or a browser extension such as uBlock Origin. Note that disabling cookies may affect the functionality of some features. Our analytics tools are loaded only after page load (lazy-loaded) to minimise unnecessary data collection.
We do not use cookies for automated decision-making that produces legal or similarly significant effects on individuals.
Under the Privacy Act, you have the right to request access to personal information we hold about you, and to request correction of information that is inaccurate, incomplete, or out of date. To make a request, email info@compliance365.com.au with sufficient detail to identify the information concerned. We will respond within 30 days and may require verification of identity before providing access. We will not charge a fee for making an access request, though reasonable costs may apply for complex requests.
If we decline an access or correction request, we will provide written reasons and advise you of available complaint mechanisms.
We maintain an internal data breach response plan. In the event of an eligible data breach under the Notifiable Data Breaches (NDB) scheme (Part IIIC of the Privacy Act), we will:
If you believe we have breached this policy or your rights under the Privacy Act, please contact us in the first instance at info@compliance365.com.au. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. Material changes will be notified via our website. We encourage you to review this policy periodically. Continued use of our website or services after a change is posted constitutes acceptance of the updated policy.
For all privacy enquiries, access requests, or complaints, please contact:
Compliance365 Pty Ltd
Email: info@compliance365.com.au
Website: www.compliance365.com.au
Last updated: May 2026
Hi! I’m the Compliance365 AI. I can help you work out which security or privacy framework you need, explain what’s involved, and answer questions about ISO 27001, SOC 2, Essential Eight, and more.
What can I help you with today?
