Privacy Policy

This Privacy Policy explains how Holistic Management Priority Limited (ABN 81 065 813 434) ("we", "us", or "our") collects, uses, stores, and shares your personal information when you use the CyberScore cyber-risk assessment (the "Assessment") at https://cyber-security.technology.

1. What we collect and why

We collect the following information when you complete the Assessment:

• Name — to address you in your report and communications.
• Email address — to deliver your report, send assessment results, and contact you about your account.
• Phone number (optional) — for follow-up communications if you request them.
• Company name — to personalise your report and for our internal analytics.
• Industry — to calibrate your risk score, as different industries face different baseline risk levels.
• Assessment answers — your responses to the 22 questions, which are used to calculate your CyberScore and generate your report.

2. How we store your data

Your information is stored securely in cloud infrastructure provided by our platform provider (Base44, which uses Supabase/PostgreSQL infrastructure). Access to personal information is restricted to authorised personnel and protected by authentication and access controls. We do not store your payment card details — all payment processing is handled by Stripe, a PCI-DSS compliant payment processor, and we never see or store your card number, CVV, or other payment credentials.

3. Payment data

Payments are processed entirely by Stripe. We receive only a confirmation that payment was successful and a transaction reference. Stripe handles all card data in accordance with PCI-DSS standards. We do not store, transmit, or have access to your card details at any point.

4. Use of assessment data in aggregate

We may use your assessment answers in aggregated, anonymised form for research, reporting, and improving our scoring methodology. This aggregated data cannot identify you or your business individually. We will never publish or share your individual assessment answers with any third party.

5. Who we share your data with

We do not sell or rent your personal information. We share data only in the following circumstances:

• Referral partners: If you were referred by a partner, that partner can see that their referral converted (e.g., that a payment was made) and the commission they earned. They cannot see your assessment answers, your risk score, or any details beyond the fact that a referral resulted in a paid assessment.
• Service providers: We use third-party services (Stripe for payments, our cloud platform for data storage) that may process your data on our behalf under appropriate data-processing agreements.
• Legal compliance: We may disclose information if required by law or in response to a lawful request from law enforcement or regulatory authorities.

6. Data retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Assessment data is retained to allow you to revisit your results and to support aggregated research. You may request deletion of your data at any time (see Your Rights below).

7. Your rights under the Australian Privacy Principles

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you.
• Correct personal information that is inaccurate, incomplete, or out of date.
• Request deletion of your personal information, subject to legal retention obligations.
• Complain about our handling of your personal information.

To exercise any of these rights, contact us at support@cyber-security.technology. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

9. Contact

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at support@cyber-security.technology or via our contact page.