Privacy Policy
for Meridian Cyber
What is Personal Information and why do we collect it?
Meridian Cyber is committed to protecting your privacy, and this policy explains how we manage the Personal Information you share with us. We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act), which govern the way we collect, use, disclose, store, secure and dispose of Personal Information. A copy of the Australian Privacy Principles is available from the Office of the Australian Information Commissioner at oaic.gov.au.
Personal Information is information or an opinion that identifies you as an individual, whether or not that information is true. Examples of Personal Information we collect include your name, business email address, phone number, job title, organisation, and details of the engagement or services you enquire about.
We collect this information directly from you, most often when you submit an enquiry, request a consultation through our website, subscribe to updates, or apply for a role with us. We use it to respond to your enquiry, deliver our services, administer our recruitment process, and operate and improve our business. You may unsubscribe from our marketing communications at any time by contacting us in writing. If you choose not to provide the Personal Information we ask for, we may not be able to assist you or process your request.
Cookies and Other Tracking Technologies
Our website uses cookies and other tracking technologies. Cookies are small text files placed on your device when you visit our website, and we use them to keep the website functioning properly and to understand how it is used.
The cookies used on our website fall into three categories: strictly necessary cookies, which support core functions such as security and remembering your cookie preferences; analytics cookies, including those served through Jetpack Stats, which give us aggregate information about how visitors navigate the website so we can improve it; and functional cookies that support our enquiry and consultation forms, so we know when someone has asked to be contacted. We do not use cookies to build a profile of you for third-party advertising.
We use a cookie consent tool that lets you choose which categories of non-essential cookies you accept when you first visit the website, and you can change your preferences at any time. You may also control or delete cookies through your browser settings. If you disable cookies, some parts of the website may not function as intended.
Sensitive Information
Sensitive Information is a subset of Personal Information under the Privacy Act, and includes information or an opinion about matters such as racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record, or health information. Sensitive Information will be used by us only for the primary purpose for which it was collected, for a directly related secondary purpose, or with your consent.
We do not generally seek to collect Sensitive Information through our website. In the course of delivering advisory services such as governance, risk and compliance or third-party risk assessments, we may encounter Sensitive Information contained within a client’s own systems or records. Where this occurs, we handle it subject to the heightened protections required under the Privacy Act, solely for the purpose of delivering that engagement.
Third Parties
Where reasonable and practicable, we collect your Personal Information directly from you. Sometimes we are provided with Personal Information about you from a third party, such as a business referral, recruitment platform or publicly available source. In this circumstance we will take reasonable steps to ensure you are made aware of that disclosure.
Disclosure of Personal Information
We may disclose your Personal Information to trusted service providers who support our operations, such as our website host, email platform, analytics providers and client management systems, for the purposes for which we engage them, or as required by law. Some of these service providers may store or process information on servers located outside Australia; where this occurs, we take reasonable steps to ensure the provider protects your information consistently with the Privacy Act.
We otherwise disclose your Personal Information only with your consent, or where required or authorised by law.
Security of Personal Information
We take reasonable steps to protect the Personal Information we hold from misuse, interference, loss, and from unauthorised access, modification or disclosure. As a cyber security provider, we apply administrative, technical and physical safeguards proportionate to the sensitivity of the information involved. When Personal Information is no longer needed for the purpose for which it was collected, we take reasonable steps to destroy or permanently de-identify it. However, most Personal Information we hold is contained within client and engagement records, which we retain for a minimum of 7 years to meet our tax, professional and legal record-keeping obligations.
Access to your Personal Information
You may access the Personal Information we hold about you at any time, by contacting us. We will require you to verify your identity before releasing any information. In some circumstances we may be entitled to refuse a request for access, for example where it would have an unreasonable impact on the privacy of others, in which case we will explain our reasons. We do not charge a fee for a standard access request, but may charge a reasonable administrative fee for providing a copy of your Personal Information.
Maintaining the Quality of your Personal Information
It is important to us that the Personal Information we hold about you is accurate, complete and up to date. If you believe any information we hold about you is inaccurate, incomplete or out of date, please contact us and we will take reasonable steps to correct it.
Policy Updates
This Privacy Policy may change from time to time and is available on our website.
Privacy Policy Complaints and Enquiries
If you have any queries or complaints about our Privacy Policy, please contact us at info@meridiancyber.io. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.