Privacy

Privacy Policy

Last updated: 31 August 2026

This policy explains what personal information SteadyPoint Cyber collects, why we collect it, who we share it with, and the choices and rights you have. We handle your information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Who we are

SteadyPoint Cyber (“SteadyPoint”, “we”, “us”, “our”) helps Australian small businesses understand and improve their cyber security. Our website is www.steady-point.com.

For anything to do with your privacy or this policy, contact us at hello@steady-point.com.

[ADD: ABN, e.g. “ABN 00 000 000 000” — or delete this line]   [ADD: business/postal address — optional, delete if you'd rather not list one]

2. The personal information we collect

We only collect what we need to provide what you've asked for. Depending on how you use the site, that can include:

• Your email address — when you unlock our free template library. If you tick the optional box, we also record that you've consented to receive our emails.
• Your Cyber Checkup answers — when you complete our free online cyber assessment, we collect the answers you give. If you choose to have your results sent to you, we also collect your name and email address for that purpose.
• Anything you send us directly — for example, the contents of an email you send to us, and your contact details.
• Basic technical information — like a general (non-precise) location, browser type and the pages you visit, which our hosting and form providers process automatically to serve the site securely and prevent abuse.

We do not ask for sensitive information (such as health, financial account or government identifier details) through this website, and we ask that you don't send it to us.

3. How we use your information

We use the information above to:

• give you access to the free templates you requested, and deliver your Cyber Checkup results;
• respond to your enquiries and provide the services you've asked for;
• send you our subscriber emails — usually one or two a month — with practical cyber security guidance, template updates and news about our products and services (subscribing is also what unlocks our free template library);
• keep the website working, secure and free from abuse; and
• meet our legal obligations.

We don't sell your personal information, and we don't use it to make automated decisions about you.

4. Consent and marketing

Our free template library is subscriber-only. To unlock it, you enter your email and tick the box confirming you'd like to receive our emails — usually one or two a month — with practical cyber security guidance, template updates, and information about our products and services. The box is unticked by default, and it's your choice whether to subscribe: if you'd rather not, you simply don't submit the form, and the free templates stay locked.

When you subscribe, we record your email address, the date and time, where you subscribed from, and the exact wording you agreed to — so we can demonstrate that consent was given. Every email we send identifies SteadyPoint, includes our contact details, and carries a working unsubscribe link. You can unsubscribe at any time — from that link or by emailing hello@steady-point.com — and we'll action it promptly. Unsubscribing stops future emails; it doesn't affect any templates you've already downloaded.

5. Who we share your information with

We don't sell or rent your information. We share it only with the service providers who help us run the site and deliver these services, and only so they can do that work for us:

• Netlify — hosts our website and processes our template-library form submissions.
• Tally — provides the online form behind our Cyber Checkup.
• Our email delivery provider — [ADD: provider name once chosen] — stores subscriber emails and sends our updates, including the unsubscribe link.

We may also disclose information where the law requires or authorises it — for example, to respond to a valid request from a regulator, or to protect our rights or the safety of others.

6. Overseas storage and processing

Some of our service providers are based, or store data, outside Australia. In practice, your information may be handled in the United States (our website and form hosting) and the European Union (our Cyber Checkup form provider), and in other countries where our providers operate. We take reasonable steps to use reputable providers, but we can't guarantee that overseas recipients handle information in exactly the same way as an Australian organisation would.

7. Cookies and local storage

We keep this light. We don't run advertising trackers, and we don't use third-party analytics on this site.

When you unlock the template library, your browser stores a small marker on your own device (in “local storage”) so you don't have to re-enter your email each visit. That marker is not your email address and isn't sent anywhere — it just tells your browser the library is unlocked. You can clear it any time through your browser settings.

Our pages load fonts from Google Fonts; when they do, Google may receive your device's IP address as part of serving those font files. Our hosting and form providers may also set essential cookies needed to keep the site secure.

8. How long we keep your information

We keep personal information only as long as we need it:

• Subscriber details — your email address and consent record — are kept until you unsubscribe or ask us to delete them. If you unsubscribe, we may keep a minimal record of that request so we don't email you again.
• Cyber Checkup answers are kept so we can provide your results and improve the assessment; we remove or de-identify them when they're no longer needed.

You can ask us to delete your information sooner — see Your rights.

9. Keeping your information secure

We take reasonable steps to protect your information from loss, misuse and unauthorised access — including collecting as little as we can, transmitting the site over encrypted connections (HTTPS), and working with providers that maintain their own security controls. No website or internet transmission is ever completely secure, so we can't promise absolute security, but we treat your information carefully and review how we handle it.

10. Your rights and choices

You can ask us to:

• Access the personal information we hold about you;
• Correct anything that's wrong or out of date;
• Delete your information, where we're not required to keep it; and
• Unsubscribe from our emails at any time.

Just email hello@steady-point.com and we'll action it. We may need to confirm your identity first, and we'll respond within a reasonable time. There's no charge to ask.

11. Data breaches

If a data breach happens that is likely to cause serious harm, we'll act to contain it and will notify affected people and the Office of the Australian Information Commissioner (OAIC) where the Notifiable Data Breaches scheme requires us to.

12. Children's privacy

Our services are made for business owners and aren't directed at children. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy from time to time as our services or the law change. When we do, we'll change the “last updated” date at the top of this page. If the change is significant, we'll take reasonable steps to let opted-in subscribers know.

14. How to contact us — and complaints

For any privacy question or request, contact us first:

We'll do our best to sort it out. If you're not satisfied with how we've handled a privacy matter, you can contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au or 1300 363 992.