Privacy Policy
How Overwatch Technologies Limited handles personal information.
Last updated: [DATE — confirm at publication]
⚑ DRAFT — for counsel to finalise before go-live (appsec blocker DP-1). This page remains noindex until approved as final.
Who we are
This Privacy Policy explains how Overwatch Technologies Limited (ACN [ACN — to be confirmed at publication]) handles personal information. It applies to this website. We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
What we collect and why
We collect only the information we need to respond to you and to operate this website securely.
Contact form. When you use our contact form, we collect the name, email address, enquiry type and message you provide. We use this information to respond to your enquiry.
Technical information. When you submit the contact form, your device's IP address is used transiently to operate an anti-spam check (Cloudflare Turnstile) and a short-term rate limit of approximately 60 seconds. The IP address is used for this security purpose at the time of submission and is not stored by us as part of your enquiry.
How your enquiry is sent. Contact form submissions are delivered to us by email through an Australian-hosted email service operated on the company's own infrastructure. That service processes the contents of your submission in order to deliver it to us, and is hosted in Australia.
Website analytics
We use a self-hosted analytics tool (Matomo) to understand how our website is used. Our analytics are configured to be cookieless, so no analytics cookies are set on your device. The tool respects the Do Not Track setting in your browser. Where an IP address is processed for analytics, it is anonymised by masking the last 2 bytes before it is stored. Raw server logs are retained for approximately 90 days and are then deleted.
We do not use any third-party advertising, marketing, or cross-site tracking on this website. We do not sell or rent personal information.
Cross-border disclosure (APP 8)
Our email and analytics are hosted in Australia. The anti-spam check on our contact form is provided by Cloudflare Turnstile, which may process technical information (such as your IP address and a verification token) transiently at globally distributed edge locations for the purpose of that security check. Where any information is processed outside Australia, we take reasonable steps to ensure it is handled consistently with the APPs.
⚑ counsel to finalise. Confirm the final position on Cloudflare Turnstile edge processing (APP 8) and whether any other provider outside Australia is used.
How long we keep information
We keep enquiry information only for as long as we need it to respond to you and to keep a reasonable record, and then we delete or de-identify it. Analytics logs are retained as described above.
Security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.
Your rights
You may ask us for access to the personal information we hold about you, and to correct it if it is inaccurate. You may also ask us a question or make a complaint about how we have handled your personal information. We will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
How to contact us
For any privacy question or request, contact us at [PRIVACY CONTACT EMAIL — confirm]. [POSTAL ADDRESS — confirm]
Changes to this policy
We may update this Privacy Policy from time to time. The current version, and the date it was last updated, appear at the top of this page.