Privacy Policy

Zynet Pty Ltd (ABN 75 062 168 234) (“Zynet”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, use our services, or interact with us.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we process personal data of individuals in the EU/UK in the context of offering services, we do so in accordance with the GDPR/UK GDPR, as applicable.

1) Who we are and how to contact us

Controller: Zynet Pty Ltd (ABN 75 062 168 234)
Phone: 1300 499 638
Email: info@zynet.com.au
Web: https://www.zynet.com.au and https://zynet.com.au

2) What this policy covers

This policy applies to:

• Visitors to our websites and landing pages.
• Prospective, current and former customers and their representatives.
• Suppliers and partners interacting with Zynet.
• Candidates applying for roles at Zynet.

It does not cover personal information we process on behalf of our customers as part of our managed or professional services (see Section 10 – Our role as processor/service provider).

3) The information we collect

The types of personal information we collect may include:

• Identity & contact: name, job title, company, phone, email, postal address.
• Business context: industry, purchase history, service subscriptions, support tickets.
• Website & device: IP address, device/browser type, pages viewed, referral source, session data, cookies and similar technologies (see Cookies below).
• Communications: emails, call notes, meeting records, survey responses.
• Security telemetry (limited website context): events related to access attempts to our public sites (e.g., rate-limit or bot detection logs).
• Recruitment (if you apply): CV/resume, qualifications, right-to-work details, referee contacts.
• Sensitive information: We do not intentionally collect sensitive information (e.g., health, ethnicity) via our websites. If such data is required for a specific legal or employment purpose, we will obtain your explicit consent or rely on another lawful basis where permitted.

4) How we collect information

• Directly from you: forms, emails, calls, meetings, RFP responses, events/webinars.
• Automatically: cookies, analytics and security tools when you use our websites.
• From third parties: your employer or colleagues, public sources (e.g., LinkedIn), referral partners, or vendors where lawful.

5) Why we use your information (purposes + legal bases)

We use personal information to:

• Provide, operate and support our services (APP 6; GDPR: contract/legitimate interests).
• Respond to enquiries, provide quotes and proposals (consent/contract).
• Manage accounts, billing and service notifications (contract/legal obligation).
• Send security or service announcements (legal obligation/legitimate interests).
• Run marketing (newsletters, events, product updates) with easy opt-out (consent/legitimate interests).
• Improve our websites, user experience and services (legitimate interests).
• Screen fraud/abuse, secure our systems, and comply with law (legal obligation/legitimate interests).
• Recruit and assess candidates (consent/legitimate interests/legal obligation).

6) Marketing preferences

You can opt out of marketing at any time by using the unsubscribe link in our emails or contacting us at info@zynet.com.au. Transactional or service-critical messages may still be sent.

7) Cookies and analytics

We use cookies and similar technologies to operate our websites, remember preferences, measure performance and improve content.

• Essential cookies: required for site function and security.
• Analytics cookies: help us understand usage (e.g., pages visited, time on page).

You can control cookies via your browser settings, and (if provided on our site) via the Cookie Settings link.

8) Disclosing your information

We may disclose personal information to:

• Service providers/sub-processors: hosting, security operations (e.g., SOC/MDR platforms), email and CRM platforms, payment and billing, analytics and professional advisers—only as needed to deliver services.
• Your organisation: if your employer is our customer or partner.
• Regulators or law enforcement: where required by law or to protect rights, safety, or security.
• Business transfers: in the event of a merger, acquisition, or restructure.

We require vendors handling personal information for us to apply appropriate confidentiality, security, and privacy safeguards under contract.

9) Overseas disclosures and data location

Our primary operations are in Australia. Some service providers or their support teams may be located overseas (e.g., in the United States, EU/UK, or APAC). Where we transfer personal information overseas, we take reasonable steps to ensure it is protected in accordance with this policy and the APPs (and, where applicable, supported by appropriate safeguards under GDPR, such as Standard Contractual Clauses).

10) Our role as processor/service provider

When customers engage Zynet for managed or professional services (e.g., monitoring, detection and response, security assessments, managed Microsoft 365/Azure AD), we typically act as a processor/service provider and handle customer data (including log and security telemetry) under the customer’s instructions and our contract or Data Processing Addendum (DPA).

• The customer is responsible for providing a lawful basis and required notices to individuals whose data is processed in their systems.
• We implement appropriate security measures, restrict access to authorised personnel, and only process such data to deliver the contracted services.
  
  

11) Security

We maintain reasonable administrative, technical and physical safeguards to protect personal information against unauthorised access, alteration, disclosure or destruction. These include access controls, MFA, encryption in transit, secure configuration, vulnerability management and monitoring, staff training, incident response procedures, and vendor risk management. See our Data Protection & Security Statement below for more detail.

 

12) Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, to comply with legal/contractual obligations, resolve disputes and enforce agreements.

13) Your rights

Subject to applicable law, you may request:

• Access to the personal information we hold about you;
• Correction of inaccurate, out-of-date or incomplete information;
• Deletion (where no longer required and no overriding legal basis applies);
• Restriction/objection to certain processing;
• Portability (GDPR/UK GDPR context); and
• Withdrawal of consent where processing relies on consent.

To exercise these rights, contact info@zynet.com.au. We will respond within a reasonable period and may require identity verification.

14) Notifiable Data Breaches (Australia)

Where a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

15) Third-party links

Our websites may link to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal information.

16) Children

Our services are intended for business use and are not directed at children. We do not knowingly collect personal information from children.

17) Changes to this policy

We may update this policy from time to time. The latest version will be posted on our websites with the “Last updated” date at the top.

18) How to contact us or make a complaint

If you have questions or concerns about this policy or how we handle your information, please contact:

Zynet Pty Ltd
Phone: 1300 499 638
Email: info@zynet.com.au
Web: https://www.zynet.com.au and https://zynet.com.au