Go Back Up

Privacy Policy

Background

Alchemy Security Consulting Pty Ltd (“Alchemy Security Consulting”, “we”, “our”, or “us”) is committed to protecting the privacy of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when providing our cyber security consulting and related services.

What Personal Information We Collect

The personal information we collect may include:

Information you provide directly

  • Name, organisation, job title, and contact details

  • Email address, phone number, and business address

  • Information provided during consultations, assessments, or project engagements

  • Billing, payment, and invoicing details

Information collected automatically

  • Website usage analytics (e.g., IP address, browser type, pages visited)

  • Log data from interactions with our digital services

Sensitive information

We generally do not collect sensitive information unless required for a specific engagement and only with your consent.

How We Collect Personal Information

We may collect information when:

  • You contact us or engage our services

  • You attend our workshops, briefings, or events

  • You subscribe to our updates or complete online forms

  • We conduct assessments, audits, incident response, or consulting activities

  • You visit our website or interact with our digital platforms

We may also receive information from third-party partners where you have consented or where it is permitted by law.

Why We Collect Personal Information

We collect personal information to:

  • Provide cyber security consulting, incident response, and advisory services

  • Manage client accounts, communication, and project delivery

  • Improve our services, website, and training material

  • Send relevant updates, newsletters, or event information (you may opt out at any time)

  • Meet legal, regulatory, or contractual obligations

We only collect personal information where reasonably necessary for our business functions.

How We Use and Disclose Personal Information

We may use or disclose personal information to:

  • Members of our team involved in your engagement

  • Trusted partners or service providers supporting service delivery

  • Industry partners when collaborating on joint projects (with notice where applicable)

  • Legal authorities where required by law or to prevent serious harm

We do not sell personal information to third parties.

Any third-party service providers we use must comply with privacy and confidentiality obligations.

Overseas Disclosure

Some of our technology or security partners may be located outside Australia.

Where overseas disclosure occurs, we take reasonable steps to ensure personal information is handled in accordance with the Australian Privacy Principles.

Data Security

We take cyber security very seriously.

Alchemy Security Consulting implements technical, procedural, and physical safeguards to protect personal information, including:

  • Access controls and identity management

  • Encryption and secure storage

  • Network and endpoint protections

  • Confidentiality obligations for personnel

Despite our efforts, no method of transmission or storage is completely secure, but we strive to maintain the highest industry standards.

Access and Correction

You may request access to the personal information we hold about you or request corrections if the information is inaccurate, incomplete, or outdated.

Requests can be made using the contact details below.

Cookies and Website Tracking

Our website may use cookies and analytics tools to improve functionality and user experience.

You can manage or block cookies via your browser settings.

Contact Us

If you have questions about this Privacy Policy or wish to make a request or complaint, please contact:

Alchemy Security Consulting Pty Ltd

Email: sales@alchemysec.com.au

Phone: 1300 792 870

Website: https://alchemysec.com.au

We will respond to privacy-related enquiries promptly and in accordance with the Privacy Act.