What we collect, and what we do with it.
Short version: this site has no cookies and no third-party trackers. The only personal information we hold is what you choose to send us.
Last updated 04/10/2026
Who we are
Summit Cyber Group Pty Ltd, ABN 48 690 768 462, Level 25, Palace Tower, 108 St Georges Terrace, Perth WA 6000. We handle personal information in line with the Australian Privacy Principles.
What we collect
When you use the enquiry or quote form:
- Your name, work email address and company
- Your phone number, if you give it — it is optional
- Approximate company size, and which service you are asking about
- Whatever you write in the message field
- Campaign parameters carried in the link you arrived on (
utm_source,utm_medium,utm_campaignand advertising click identifiers), so we can tell which marketing is working
Automatically, for every visitor:
- Standard server and security logs held by our hosting provider — IP address, user agent, the page requested and the time. These exist to keep the site running and to stop attacks against it
What we do not do:
- No cookies are set by this site
- No advertising or social media trackers, and no third-party scripts beyond the spam check on our forms
- No profile is built about you, and nothing is sold to anyone
Why we collect it
To answer your enquiry, prepare a quote, and keep a record of what we discussed. If you become a customer, that record becomes part of the engagement. If you do not, it is deleted on the schedule below.
We will only send you marketing if you ask for it. We do not add enquiries to a mailing list.
Where it goes, and who can see it
Form submissions are stored in a database hosted by Cloudflare and notified to us by email through Microsoft 365. Both are service providers acting on our instructions, not parties we sell data to.
Overseas disclosure. Cloudflare and Microsoft are United States companies. We configure our storage to sit in the Asia-Pacific region, but that is in-region placement rather than a guarantee your information never leaves Australia, and we would rather say that plainly than imply otherwise. By submitting the form you consent to that handling.
Inside Summit, enquiries are seen by the people who need to act on them — which, given the size of the team, is usually the Managing Director. We do not disclose your information to anyone else unless you ask us to, or the law requires it.
How long we keep it
- Enquiries that do not become work: deleted after 24 months
- Customer records: kept for seven years after the engagement ends, as tax and corporate records law requires
- Server and security logs: retained briefly by our hosting provider and not used for anything else
How we protect it
The site is static, with no content management system, no database behind the pages and no public login to attack. Form submissions travel over TLS and are stored in a database that is not publicly reachable. Access is limited to staff who need it, with multi-factor authentication.
If a data breach happened that was likely to cause you serious harm, we would notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Seeing, correcting or deleting your information
Email connect@summitcybergroup.com.auand ask. We will tell you what we hold, correct anything wrong, or delete it — normally within 30 days, and without charge. We may need to verify who you are first.
If you are not happy with how we handle a privacy question, tell us and we will try to resolve it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes materially we will update the date at the top. This version applies from 04/10/2026.