Privacy Policy

Last updated: 1 January 2025 | Effective date: 1 January 2025

Contents

  1. Who We Are
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis for Processing
  5. Data Sharing
  6. Data Retention
  7. Your Rights
  8. Cookies
  9. Security Measures
  10. Changes to This Policy
  11. Contact & DPO

1. Who We Are

TasArmour Security Ltd ("TasArmour", "we", "us", "our") is a cybersecurity services company registered in Tasmani, Australia.

We are the data controller for personal data collected through this website and in connection with our services.

2. Data We Collect

2.1 Information You Provide Directly

  • Contact details (name, email address, phone number, organisation)
  • Communications sent through our contact forms or by email
  • Information provided during service engagements
  • Newsletter subscription information

2.2 Information Collected Automatically

  • IP address and approximate location (country/city level)
  • Browser type, operating system, and device information
  • Pages visited, time spent, and navigation paths
  • Referring website and search terms

3. How We Use Your Data

We use personal data to:

  • Respond to enquiries and provide requested services
  • Send our newsletter and threat intelligence updates (with your consent)
  • Improve our website and service delivery
  • Comply with legal and regulatory obligations
  • Prevent fraud and ensure website security
  • Send service-related administrative communications

Under UK GDPR, we process your personal data on the following lawful bases:

  • Contract: To fulfil service agreements and respond to enquiries
  • Legitimate Interests: Website analytics and improving our services
  • Consent: Newsletter subscriptions and marketing communications
  • Legal Obligation: Compliance with legal and regulatory requirements

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data with:

  • IT service providers who host and maintain our systems (under strict data processing agreements)
  • Professional advisers (legal, accountancy) under confidentiality obligations
  • Law enforcement or regulatory authorities where legally required

All third-party processors are bound by data processing agreements and are GDPR-compliant. We do not transfer personal data outside the UK/EEA without appropriate safeguards.

6. Data Retention

We retain personal data only as long as necessary:

  • Contact enquiries: 2 years from last contact
  • Client engagement data: 7 years (legal/audit requirements)
  • Newsletter subscriptions: Until you unsubscribe
  • Website analytics: 26 months (anonymised)

7. Your Rights

Under AU GDPR, you have the right to:

  • Access: Request a copy of personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit processing of your data in certain circumstances
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: At any time, where processing is based on consent

To exercise any of these rights, contact our Data Protection Officer at info@tasarmour.com. You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Cookies

Our website uses cookies to ensure functionality and improve your experience. We use:

  • Strictly necessary cookies: Session management (no consent required)
  • Analytics cookies: Website usage statistics (with consent)
  • Preference cookies: Remembering your choices (with consent)

You can control cookies through our cookie consent banner or your browser settings. For more information, see our Cookie Policy.

9. Security Measures

As a cybersecurity company, we apply the highest security standards to protecting your data:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • ISO 27001 certified Information Security Management System
  • Multi-factor authentication for all staff systems
  • Regular penetration testing of our own infrastructure
  • Staff training on data protection and security

10. Changes to This Policy

We may update this policy periodically. Material changes will be notified by email to newsletter subscribers or via a prominent notice on our website. The "last updated" date at the top of this page indicates when the policy was last revised.

11. Contact & Data Protection Officer

For any privacy-related queries or to exercise your rights, contact us:

  • DPO Email: info@tasarmour.com
  • Post: Data Protection Officer, TasArmour Security Ltd, Tasmania Australia