1. Introduction

SentinelOps Pty Ltd (ABN pending) ("SentinelOps", "we", "us", or "our") is committed to protecting the privacy of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, and disclose personal information in connection with the SentinelOps website and platform.

SentinelOps is an Australian-owned and operated company. All personal information collected through our services is stored and processed within Australia.

2. Australian Privacy Principles

This Privacy Policy is governed by the thirteen Australian Privacy Principles (APPs) contained in Schedule 1 of the Privacy Act 1988 (Cth). We are bound by the APPs and are committed to handling personal information in a manner that is open, transparent, and compliant with Australian privacy law.

3. Information We Collect

We may collect the following types of personal information:

3.1 Information You Provide Directly

Name, job title, and organisation name
Email address and telephone number
Information provided through contact forms, demo requests, or enquiries
Account registration details, including username and password credentials
Billing and payment information (processed through PCI DSS-compliant payment providers)
Any other information you choose to provide in correspondence with us

3.2 Information Collected Automatically

IP address, browser type, and operating system
Pages visited, time spent on pages, and navigation paths
Referring website addresses
Device identifiers and screen resolution
Log data including access times and error logs

3.3 Sensitive Information

We do not generally collect sensitive information (as defined in the Privacy Act 1988) through our website. Where our platform is used to manage investigation data, customers are the data controllers for any sensitive information contained within their investigation records. SentinelOps acts as a data processor in relation to customer investigation data and processes such data only in accordance with customer instructions and our data processing agreements.

4. How We Use Your Information

We collect and use personal information for the following purposes:

To provide, maintain, and improve our platform and services
To process and respond to enquiries, demo requests, and support requests
To create and manage your account
To communicate with you about our services, including service updates and security notifications
To comply with our legal and regulatory obligations
To protect the security and integrity of our platform
To analyse website usage and improve user experience (using aggregated, de-identified data)

We will not use your personal information for direct marketing purposes without your prior consent. You may opt out of marketing communications at any time by contacting us or using the unsubscribe mechanism provided in any marketing communication.

5. Disclosure of Personal Information

We may disclose personal information to the following categories of recipients:

Service providers: Australian-based hosting providers, payment processors, and technology service providers who assist us in operating our platform, subject to contractual confidentiality and data protection obligations
Professional advisers: Lawyers, accountants, and auditors in connection with professional advice
Regulatory authorities: Where required by law, regulation, or court order, including to comply with mandatory data breach notification obligations

We do not sell personal information to third parties. We do not disclose personal information to recipients outside Australia unless we have taken reasonable steps to ensure the overseas recipient complies with the APPs, or the disclosure is otherwise permitted under the Privacy Act 1988.

6. Australian Data Storage

All personal information collected by SentinelOps is stored within Australia. Our platform infrastructure is hosted exclusively in Australian data centres. We do not transfer personal information offshore. This approach ensures your information remains subject to the protections of Australian privacy law, including the Privacy Act 1988 and the Notifiable Data Breaches (NDB) scheme.

7. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

AES-256 encryption of data at rest
TLS 1.3 encryption of data in transit
Multi-factor authentication for all platform access
Role-based access controls and regular access reviews
Regular independent security testing and vulnerability assessments
Employee security awareness training and background checks

8. Notifiable Data Breaches

SentinelOps complies with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. In the event of an eligible data breach involving personal information that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

We maintain an incident response plan that includes procedures for identifying, containing, assessing, and responding to data breaches in accordance with the NDB scheme requirements.

9. Access and Correction

Under APP 12 and APP 13, you have the right to:

Access the personal information we hold about you
Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading

To request access to or correction of your personal information, please contact us using the details provided below. We will respond to your request within 30 days. We may require you to verify your identity before processing your request. In certain limited circumstances, we may refuse access or correction in accordance with the exceptions set out in the Privacy Act 1988, and we will provide reasons for any refusal.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve functionality and analyse usage. The types of cookies we use include:

Essential cookies: Required for website functionality, including session management and security features
Analytics cookies: Used to understand how visitors interact with our website, using aggregated and de-identified data
Preference cookies: Used to remember your settings and preferences for future visits

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of our website. We do not use cookies to collect personal information for advertising purposes.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party website you visit.

12. Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When personal information is no longer required, we will take reasonable steps to destroy or de-identify it in accordance with APP 11.

13. Complaints

If you believe we have breached the Australian Privacy Principles or have a complaint about how we have handled your personal information, you may lodge a complaint with us using the contact details below. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically. Continued use of our website and services after any changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to make an access or correction request, or wish to lodge a privacy complaint, please contact us:

Email: privacy@sentinelops.com.au
Website: sentinelops.com.au/contact

Privacy Policy