Kebijakan Privasi (Australia)

1. About us

This Privacy Policy is issued by Whitesec AU, which serves Whitesec One customers in Australia and New Zealand from Level 3, IBM Building, 1060 Hay Street, West Perth WA 6005. It governs personal information collected through whitesec.one in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Whitesec One is a product of PT Topi Putih Siberindo (Whitesec ID), Indonesia. Visitors outside Australia and New Zealand are covered by our Privacy Policy (Indonesia).

2. Personal information we collect

• Identity and contact information: name, phone number or email address, organisation and country.
• Enquiry content: the frameworks and questions you send us.
• Technical and usage data, only if you allow analytics: page views and basic device information.
• Server logs kept by our hosting provider for security, which include IP addresses.

We do not knowingly collect sensitive information as defined in the Privacy Act, and we do not collect personal information from children under 18.

3. How we collect it

We collect personal information directly from you when you message us on WhatsApp, email or call us. Technical data is collected automatically, and analytics only after your consent. Where we receive information about you from someone else, we take reasonable steps to let you know.

4. Purpose of collection and use (APP 6)

• Responding to your enquiry and arranging a demo.
• Understanding, in aggregate, how the website is used, if you allow analytics.
• Keeping the website secure and meeting our legal obligations.

We use personal information only for the purpose it was collected for, or a directly related secondary purpose you would reasonably expect, unless you consent or the law requires otherwise.

5. Disclosure

• Whitesec ID in Indonesia, which owns and operates Whitesec One, where needed to arrange your demo or provide the product.
• Service providers: Vercel (website hosting and optional analytics) and WhatsApp, operated by Meta Platforms (messages you send us on WhatsApp).
• Professional advisers, regulators or law enforcement, where required by law.

We do not sell, rent or trade personal information, and we do not disclose it for third-party marketing.

6. Cross-border disclosure (APP 8)

Some recipients are located outside Australia: Whitesec ID in Indonesia, and our service providers, including in the United States. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs in relation to it.

7. Data security (APP 11)

We protect personal information with encryption in transit, access limited to the people who need it, and the controls described on our Security page. The Whitesec group company that operates Whitesec One is certified to ISO/IEC 27001. No transmission over the internet is completely secure, but we take reasonable steps to protect what you send us.

8. Retention

Enquiries are kept for up to three years after our last contact, unless you become a customer, in which case the customer agreement applies. When personal information is no longer needed, we securely delete or de-identify it.

9. Cookies and website analytics

The website stores one essential value to remember your cookie choice. Vercel Web Analytics and Speed Insights, which are cookieless and do not track you across sites, load only after you choose Allow analytics. You can change your choice at any time through Cookie preferences in the footer.

10. Direct marketing (APP 7)

A demo request does not add you to a marketing list. We send marketing only where you have consented, as the Spam Act 2003 (Cth) requires, and every message includes a functional unsubscribe. You can also opt out by emailing support@whitesec.au.

11. Access to your personal information (APP 12)

You may request access to the personal information we hold about you. We will respond within 30 days and may need to verify your identity first. If we refuse access in the limited circumstances the Privacy Act allows, we will explain why in writing.

12. Correction (APP 13)

If information we hold is inaccurate, out of date, incomplete or misleading, ask us to correct it. We will respond within 30 days, and if we disagree we will tell you why and how to complain.

13. Notifiable data breaches

We are subject to the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If we suspect an eligible data breach, we assess it within 30 days and, where it is likely to result in serious harm, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

14. Complaints

Please contact our Privacy Officer first. We will investigate and respond within 30 days. If you are not satisfied, you may complain to the OAIC: www.oaic.gov.au, 1300 363 992, GPO Box 5218, Sydney NSW 2001.

15. Changes to this policy

We may update this policy and will change the date at the top when we do. Where a change is material, we will take reasonable steps to tell you.

16. Contact our Privacy Officer

Privacy Officer, Whitesec AU, Level 3, IBM Building, 1060 Hay Street, West Perth WA 6005. Email support@whitesec.au, telephone +61 413 211 278. Please mark your message Privacy.