How we handle your data

Scope and definitions

This Privacy Policy applies to MildFire Cyber Defence’s website, communications, and service delivery. “Personal data” means information relating to an identified or identifiable individual.

Data we collect

• Contact details you provide (name, email, phone) in communications
• Business details (company, role, interests) you share with us
• Technical data such as IP address and basic analytics generated by your browser

How we use data

• To respond to inquiries and deliver services
• To improve security, performance, and user experience
• To send service and security communications

Legal basis

• Legitimate interests in operating and improving our services
• Performance of a contract when providing services
• Consent where required for specific communications

Data sharing

We do not sell personal data. We may share limited data with trusted service providers under contracts that require confidentiality and security.

International transfers

When transferring data internationally, we use appropriate safeguards such as contractual clauses and access controls.

Data retention

We retain personal data only as long as necessary for the purposes described, or as required by law and applicable obligations.

Your rights

Subject to law, you may request access, correction, deletion, or restriction of your personal data, and object to certain processing.

Security measures

We apply layered security controls including access management, encryption in transit, monitoring, and secure development practices.

Changes to this policy

We may update this policy and will post the latest version here.

Data requests (DSAR)

To exercise your rights, contact us with proof of identity and a clear description of your request. We will acknowledge promptly and aim to respond within one month.

Contact for privacy requests
[email protected]
+61 2 7205 9364
Level 14, 219 Castlereagh St, Sydney NSW 2000, Australia