Privacy policy

Real Bytes Pty Ltd, ABN 94 620 082 706, is an Australian IT and cyber security business based in Brisbane. In this policy, Real Bytes, we, us and our refer to that company.

This policy covers personal information handled through our website, enquiries and services. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Customer service agreements also describe how we handle information on a client's behalf.

We collect information you provide through forms, email, telephone calls, support requests, quotes, onboarding and job applications. During service delivery we may also receive information from a client, an authorised contact or a service provider.

You can browse this website without telling us your name. An enquiry or service may require contact or account details so we can respond, identify the customer and do the work.

We use personal information to respond to enquiries, provide support and agreed services, prepare quotes, manage accounts, communicate about services, assess employment applications and meet legal obligations.

Website information helps us understand how the site is used and maintain its functionality. We do not sell personal information. You can ask us to stop direct marketing communications; service and account communications may still be needed.

We may disclose information to providers that help deliver hosting, email, analytics, support, billing and other services; to authorised client contacts; and where Australian law or a court order requires or permits disclosure. A business transfer may also require disclosure, with appropriate confidentiality and privacy arrangements.

Some providers may store or process information outside Australia, including in the United States and European Union countries. The location depends on the service and configuration. We take reasonable steps concerning overseas recipients as required by APP 8. Storage and processing are not restricted to Australia.

We use technical and organisational safeguards appropriate to the information and services involved. These include access restrictions, authentication, secure communications and security reviews. No internet transmission or storage system can be guaranteed completely secure.

Where the Notifiable Data Breaches scheme applies, we assess suspected eligible breaches and notify the OAIC and affected individuals when required. Other incident reporting duties depend on the circumstances. Our involvement in a client's reporting is governed by law and the agreed services.

We keep personal information for the purposes for which it may lawfully be used, including service delivery, account records and legal obligations. When it is no longer needed, we take reasonable steps to destroy or de-identify it unless retention is required by law or a court or tribunal order.

Where the relevant managed service terms apply, our current standard terms provide a 60 day offboarding period after termination or expiry. We make Customer Data we hold available to the best of our ability during that period. Afterward, data may be deleted, subject to law, and related hosted and backup services cease unless otherwise agreed in writing.

The offboarding period is not a retention rule for every enquiry or employment application. Your quote, agreement and applicable law govern your service. Arrange exports before the period ends.

The website uses cookies and local storage for functionality and preferences. Google Analytics is used to understand website traffic and usage. The cookie banner records your selected preference in your browser.

You can manage cookies through browser settings; restricting them may affect website functions. Technical information processed by analytics providers is not necessarily anonymous. External websites have their own privacy policies.

You can request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need enough information to verify your identity and locate the relevant record.

We respond within a reasonable period. Access or correction may be limited by the Privacy Act; if we refuse a request, we explain the reason where required and the available complaint route. You can also ask about deletion or de-identification, but this is not an unconditional right to erase records we must retain.

For information held within a client's systems, contact that organisation first. We may need its instructions or authority before acting on the record.

This website is intended for business enquiries. Information about children may be involved when we provide agreed services to a client that holds it. If you are concerned about information concerning a child, contact us and identify the relevant service or organisation.

Contact us through the contact page or telephone 07 3114 2808 and ask for the Privacy Officer. Explain what happened, the information involved and the outcome you are seeking. Keep a copy of your written complaint.

We investigate and respond within a reasonable period, generally within 30 days. If you are not satisfied, or we do not respond within 30 days, you can consider an OAIC complaint. The OAIC explains any external dispute resolution steps that may apply.

We update this policy when our practices or relevant requirements change. The date on this page identifies this update. You can request a copy in an alternative accessible form through our contact page.