Privacy Policy

Cybil Consults respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and disclose personal information when you:

• visit our website at Cybil Consults;
• contact us by telephone, email or online form;
• request a quotation, consultation or site visit;
• engage us to provide services; or
• otherwise interact with our business.

In this Privacy Policy, "Cybil Consults", "we", "us" and "our" refer to Cybil Consults.

Cybil Consults is a small Australian business with annual turnover of less than $3 million. Most Australian businesses with annual turnover of $3 million or less are not covered by the Privacy Act 1988. However, exceptions can apply depending on the activities undertaken by the business.

Whether or not the Privacy Act applies to a particular activity, we aim to handle personal information consistently with responsible privacy practices and, where applicable, the Australian Privacy Principles. Nothing in this Privacy Policy limits any rights or obligations that apply under Australian law.

Depending on how you interact with us, we may collect:

• your name;
• business or company name;
• email address;
• telephone number;
• business, property, project or site address;
• country and city;
• your job title or professional role;
• details contained in enquiries and messages;
• information required to prepare a quotation;
• project details, plans, drawings, specifications or photographs;
• records of our communications with you;
• service, invoice and payment information; and
• other information you voluntarily provide.

You do not have to provide personal information to browse the general content of our website. However, if you do not provide information requested in our contact or quotation forms, we may not be able to respond to your enquiry or provide the requested service.

Please do not send us sensitive personal information unless it is necessary and we have requested it.

We generally collect personal information directly from you when you:

• complete a website form;
• contact us by telephone or email;
• request information or a quotation;
• arrange a consultation or site visit;
• engage us to provide services;
• provide documents or project information; or
• communicate with us during a project.

We may also receive information from:

• your employer or authorised representative;
• clients, contractors, builders, architects, engineers or other project participants;
• professional advisers and service providers;
• referral partners; and
• publicly available sources.

We may use personal information to:

• respond to enquiries;
• provide quotations and proposals;
• arrange consultations and site visits;
• provide our consulting, design, auditing, certification and related services;
• manage projects and client relationships;
• communicate with project participants;
• prepare reports, designs, drawings and other deliverables;
• process invoices and payments;
• maintain business and taxation records;
• improve our website and services;
• protect our website, systems and business;
• comply with contractual, legal, insurance and regulatory requirements;
• resolve complaints or disputes;
• conduct business administration and planning;
• measure the effectiveness of our advertising; and
• send relevant marketing communications where you have consented or where otherwise permitted by law.

We will not sell or rent your personal information to another organisation.

When you visit our website, certain technical information may be collected automatically, including:

• your IP address;
• browser and device type;
• operating system;
• approximate location;
• referring website or search engine;
• pages visited;
• buttons or links selected;
• date and time of your visit; and
• time spent on the website.

We may use this information to:

• operate and secure the website;
• understand how visitors use the website;
• diagnose technical issues;
• improve website content and performance;
• identify the source of enquiries;
• measure advertising conversions; and
• improve our marketing.

Technical information may be aggregated so that it does not directly identify an individual.

Our website may use cookies, tags, pixels and similar technologies. A cookie is a small data file stored on your device when you visit a website. Cookies may help websites operate properly, remember visitor preferences, understand website usage and measure advertising performance.

We may use:

You can control or delete cookies through your browser settings. Blocking certain cookies may affect the functionality of the website. Where a cookie preference or consent tool is available on our website, you may also use that tool to manage non-essential cookies.

We may use Google services, including Google Analytics, Google Ads, Google Tag Manager, Google Ads conversion tracking and Google advertising audience services. Google and other third-party vendors may display Cybil Consults advertisements on websites and services across the internet.

Google and other third-party vendors may use cookies or device identifiers to:

• measure visits to our website;
• understand interactions with our website;
• measure advertising conversions;
• provide advertising reports;
• limit the number of times an advertisement is shown; and
• serve advertisements based on a person's previous visits to our website.

We may use website visitor information to create Google Ads audience or data segments. This can allow us to show relevant Cybil Consults advertisements to people who have previously visited our website.

Google specifically requires businesses using these data segments to explain their use of online advertising, third-party vendors, cookies or device identifiers, and visitor opt-out choices.

Visitors can manage how Google uses information for advertising through Google Ads Settings. You can learn more about Google's handling of information by reading the Google Privacy Policy and Google's privacy and personalised advertising information. You can also use your browser or device settings to control cookies and advertising identifiers.

We will use Google advertising services in accordance with applicable Google policies and Australian law. We will not knowingly provide Google with personally identifiable contact-form information for advertising purposes unless:

• it is permitted by law;
• the relevant Google service permits it;
• appropriate privacy and security protections are used; and
• any required consent has been obtained.

We do not intend to use sensitive personal information to create advertising audiences or target personalised advertising. Google states that advertisers are responsible for ensuring their advertising complies with applicable laws in the locations where advertisements are shown.

We may send you emails or messages about Cybil Consults services if:

• you have asked to receive them;
• you have expressly consented;
• they are relevant to an existing business relationship; or
• the communication is otherwise permitted by law.

You can withdraw your consent or unsubscribe at any time by:

• using the unsubscribe option included in a marketing communication; or
• emailing us at info@cybilconsults.com.au.

We will process unsubscribe requests within the period required by applicable law.

Service communications, such as responses to enquiries, project updates, quotations, invoices and appointment information, are not marketing communications.

We may disclose personal information to service providers that help us operate our business, such as:

• website hosting providers;
• email and cloud storage providers;
• information technology and cybersecurity providers;
• accountants, insurers, auditors and legal advisers;
• payment and invoicing providers;
• analytics and advertising providers, including Google;
• consultants, contractors and project participants; and
• government or regulatory authorities where required or authorised by law.

We only disclose information that is reasonably necessary for the relevant service or purpose. Service providers may have their own privacy policies and information-handling practices.

Some technology, hosting, email, cloud, analytics or advertising providers may store or process information outside Australia. The location may depend on the provider's infrastructure and services. Where applicable, we will take reasonable steps to ensure that overseas handling is consistent with applicable Australian privacy requirements. You may contact us for further information about relevant service providers.

We take reasonable steps to protect personal information against:

• loss;
• misuse;
• interference;
• unauthorised access;
• unauthorised disclosure; and
• unauthorised alteration.

Our security practices may include password protection, access restrictions, multi-factor authentication, reputable cloud services, software updates, backups and secure disposal.

However, no internet transmission or electronic storage system is completely secure. You should avoid sending highly confidential or sensitive information through an unsecured website form or ordinary email.

We retain personal information for as long as reasonably necessary to:

• respond to enquiries;
• provide services;
• manage projects and business relationships;
• maintain taxation, insurance and business records;
• comply with contractual or legal requirements;
• resolve disputes; and
• protect our legal interests.

When information is no longer reasonably required, we may securely delete, destroy or de-identify it, subject to applicable record-keeping requirements.

You may contact us to request:

• access to personal information we hold about you; or
• correction of information that is inaccurate, incomplete or out of date.

We may ask you to verify your identity before providing access or making a correction. In some circumstances, we may be unable to provide access. If that happens, we will explain the reason where reasonably possible and permitted by law.

If you have a question, concern or complaint about how we handle personal information, contact us using the details below. Please include sufficient information for us to understand and investigate your concern. We will review the matter and respond within a reasonable period.

Where the Privacy Act applies and you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

If we become aware of suspected unauthorised access to or disclosure of personal information, we will assess the incident and take reasonable steps to contain it. Where the Notifiable Data Breaches scheme or another legal requirement applies, we will make the notifications required by law.

Our website may contain links to websites operated by third parties. Cybil Consults is not responsible for the privacy, security or content of third-party websites. You should review the privacy policy of a third-party website before providing personal information through it.

We may update this Privacy Policy when:

• our business practices change;
• website functions or technologies change;
• new analytics or advertising services are introduced; or
• relevant legal or regulatory requirements change.

The current version will be published on our website with the updated effective date.