Privacy Policy

Last updated: 4 August 2026

1. Our commitment to privacy

OSKY is committed to protecting personal information and handling it openly and responsibly.

This Privacy Policy explains how OSKY collects, holds, uses and discloses personal information. It also explains how you can access or correct your information, make a privacy enquiry or submit a complaint.

Where applicable, OSKY handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

In this policy, “OSKY”, “we”, “our” and “us” refer to OSKY Interactive Pty Ltd and its related operations.

2. What this policy covers

This policy applies to personal information OSKY handles in connection with:

• Our websites and online forms
• Sales enquiries, proposals and consultations
• Website security and digital assessments
• Client projects and support services
• OSKY Care, OSKY Defence and other managed services
• Events, partnerships and marketing activities
• Supplier and business relationships
• Employment and contractor applications
• General communication with OSKY

When OSKY processes personal information on behalf of a client through a website, application or system operated for that client, the client’s privacy policy may also apply. In those circumstances, OSKY generally acts as a service provider and handles the information according to the client’s instructions and our contractual obligations.

3. Personal information we collect

The personal information we collect depends on how you interact with us. It may include:

• Your name
• Work email address
• Telephone number
• Job title and organisation
• Postal or business address
• Information included in an enquiry, application or consultation
• Website URLs, platforms and technical information you provide
• Information about your organisation’s requirements, projects and current providers
• Information relating to proposals, contracts, invoices and payments
• Communications between you and OSKY
• Employment history and other information supplied in a job application
• Website usage information, including IP address, browser type, device information, pages visited, referring website and advertising identifiers

We do not generally seek sensitive information. If sensitive information is reasonably necessary for a particular activity, we will collect it with consent or where otherwise permitted by law.

4. How we collect personal information

We usually collect personal information directly from you when you:

• Complete a form on our website
• Apply for an assessment
• Contact us by telephone, email or online chat
• Request a proposal or consultation
• Engage OSKY to provide services
• Attend an event or participate in a partner promotion
• Apply for employment or contract work
• Subscribe to communications
• Communicate with our team

We may also receive personal information from:

• Your organisation
• A colleague or authorised representative
• Referral and partnership organisations
• Publicly available sources
• Service providers that support our business
• Analytics and advertising platforms

If you provide personal information about another person, you should ensure that you have authority to do so and that the person understands how their information may be handled.

5. Why we collect and use personal information

We may collect, hold and use personal information to:

• Respond to enquiries and communicate with you
• Assess eligibility for complimentary assessments or other offers
• Arrange consultations and meetings
• Conduct requested website or security assessments
• Prepare proposals, recommendations and reports
• Deliver projects, support and managed services
• Manage client, supplier and partner relationships
• Administer contracts, billing and payments
• Maintain and improve our websites, systems and services
• Measure the effectiveness of advertising and marketing
• Protect our systems, clients and users from security threats
• Meet legal, regulatory, insurance and contractual obligations
• Recruit employees and contractors
• Send relevant business communications where permitted

We will not sell your personal information.

6. Website security assessment applications

When you apply for a complimentary website security assessment, OSKY collects the information in the application to:

• Confirm that you are authorised to submit the request
• Assess your organisation’s eligibility
• Understand your website and security concerns
• Conduct an external review of nominated public-facing website assets
• Contact you about the application, assessment and findings
• Discuss remediation, support or other services that may be relevant

Submitting an application does not guarantee acceptance. The initial assessment is limited to publicly observable website assets unless a broader scope and additional access are separately agreed.

7. Cookies, analytics and advertising

Our websites may use cookies and similar technologies to operate correctly, remember preferences, understand website usage and measure advertising performance.

We may use services such as Google Analytics, Google Ads and other analytics or advertising tools. These services may collect information including:

• IP address
• Device and browser information
• Pages viewed
• Time spent on the website
• Referring pages or campaigns
• Advertising and conversion identifiers
• Interactions with forms and website features

You can manage cookies through your browser settings. Blocking some cookies may affect website functionality.

Where required, we will seek consent before using information for particular advertising or analytics purposes.

8. Direct marketing

OSKY may use your contact details to send information about services, events, insights or offers where:

• You have consented
• You would reasonably expect us to do so
• It is otherwise permitted by law

You can unsubscribe at any time by using the unsubscribe link in an email or contacting us. We may retain a limited record of your request so that we can respect your preference.

Operational messages concerning an active enquiry, assessment, contract or service are not marketing communications.

9. When we disclose personal information

We may disclose personal information to:

• OSKY employees and authorised contractors
• Related OSKY operations
• Cloud hosting and data-storage providers
• Customer relationship management and project-management providers
• Email, communications and collaboration platforms
• Analytics and advertising providers
• Payment, accounting and billing providers
• Cybersecurity and technical service providers
• Professional advisers, insurers and auditors
• Government, regulatory or law-enforcement bodies where required or authorised by law
• A purchaser or successor if OSKY undergoes a business sale, restructure or transfer

We require service providers to handle personal information only for authorised purposes and to apply appropriate confidentiality and security controls.

10. Overseas disclosure and processing

OSKY operates in Australia and Malaysia and may use service providers that store or process information in other countries.

Personal information may be accessible to authorised personnel or service providers located outside Australia, including in Malaysia and the United States. The actual locations may vary according to the service being used.

Where the Australian Privacy Principles apply, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements, unless an exception applies.

11. How we protect personal information

OSKY uses administrative, technical and physical safeguards appropriate to the nature of the information and the risks involved. These may include:

• Access controls and authentication
• Encryption in transit and, where appropriate, at rest
• Secure hosting and backup arrangements
• Security monitoring and vulnerability management
• Staff security and privacy awareness
• Confidentiality obligations
• Incident-response procedures
• Supplier assessment and contractual controls

No internet transmission or storage system can be guaranteed to be completely secure. If a data breach occurs, we will investigate and respond in accordance with applicable legal obligations.

12. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

• Deliver services
• Maintain business and financial records
• Manage warranties, disputes and claims
• Meet legal, regulatory, insurance and contractual obligations
• Maintain security and audit records

When information is no longer required, we take reasonable steps to delete it, destroy it securely or de-identify it, unless the law requires us to retain it.

13. Accessing or correcting your information

You may ask us to:

• Confirm whether we hold personal information about you
• Provide access to that information
• Correct information that is inaccurate, incomplete, out of date, irrelevant or misleading

We may need to verify your identity before completing a request.

In some circumstances, the law allows us to refuse or limit access. If this occurs, we will explain the reason where permitted and tell you what options are available.

To request access or correction, contact us using the details below.

14. Privacy enquiries and complaints

If you have a privacy question or believe OSKY has mishandled your personal information, please contact us.

Your complaint should include enough information for us to understand the issue and investigate it. We will acknowledge the complaint and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner through www.oaic.gov.au.

15. Third-party websites

Our websites may contain links to third-party websites. OSKY is not responsible for the privacy practices or content of those websites. We recommend reviewing the privacy policy of each third party before providing personal information.

16. Changes to this policy

We may update this Privacy Policy when our practices, services, systems or legal obligations change.

The current version will be published on our website with its most recent update date. We recommend checking this page periodically.

17. Contact OSKY

For privacy enquiries, access or correction requests, or complaints, contact:

OSKY Interactive Pty Ltd
7 Geelong Street
Fyshwick ACT 2609
Australia

Email: info@osky.com.au
Telephone: 1300 13 OSKY (1300 136 759)