Privacy Policy
Last updated: 13 September 2026
1. Who we are
CyberStance operates the Cyber Safety Check service at cyberstance.com.au. We provide cyber security self-assessment reports for Australian small businesses.
2. What we collect
When you complete an assessment, we collect: your business name, contact name, email address, industry, state, staff count, and answers to our questionnaire. We also collect payment information via Stripe (we do not store card details).
3. Why we collect it
We use your answers to generate your personalised Cyber Safety Check report, to deliver it to you, and to operate and improve the service. We do not sell your personal information. We send marketing email only to customers who have opted in, and every marketing message includes an unsubscribe link.
4. How we store it
Your data is stored in Australia using Supabase (PostgreSQL). Assessment data is retained for 24 months to allow re-assessment comparisons. Generated reports are retained for 12 months. Payment records are retained for 5 years as required by Australian tax law.
5. Your rights
Under the Australian Privacy Act 1988, you have the right to access and correct your personal information, and to request its deletion. Email support@cyberstance.com.au to exercise these rights.
6. Contact
Questions about this policy: support@cyberstance.com.au