Privacy Policy
Last updated November 2026
SecureSupply respects your privacy. This policy explains what personal information we collect through this website, how we use it, and how we protect it, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Information we collect
When you submit an enquiry, we collect the details you provide: your name, email address, organisation, the service you are interested in, and your message. We do not ask for sensitive information through this site. You should not send classified or security-classified information through the form.
How we use your information
We use your details to respond to your enquiry, to assess how we can help with DISP, IRAP or security advisory, and to maintain our business records. We do not sell your information. We will only contact you about your enquiry and related services.
Marketing communications
If you tick the opt-in box on one of our forms, you give us your express consent to send you occasional email updates on Defence-industry security matters such as DISP, IRAP and regulatory change. We keep this list ourselves and use it only to send those updates. You can opt out at any time by replying to any update or contacting us, and we action unsubscribe requests promptly. We keep a record of when and how you gave consent. We do not add you to this list unless you opt in, and opting in is never required to make an enquiry.
Analytics and tracking
We may use website analytics, delivered through a tag manager, to understand how visitors use the site. This collects anonymised usage data such as pages viewed, scroll depth and button clicks, and may set cookies in your browser. We use advertising conversion tracking to measure the performance of our marketing.
Form handling
Enquiry submissions are processed on our hosting platform (Cloudflare) and delivered to us by email through Resend. We use Cloudflare Turnstile to protect the form from spam and abuse. Your details may also be recorded in our customer relationship management system so we can manage follow-up. These providers process your data on our behalf and are bound to protect it.
DISP Readiness Snapshot
The DISP Readiness Snapshot asks 25 questions. For each one, you choose an answer and write a short explanation of 15 to 70 words. In the Snapshot itself, we don't ask for or store your name, email or company. The Snapshot asks you to leave names, company names and system details out of your explanations. If you include them anyway, they are kept and deleted on the same terms as your answers. You should not include classified or security-classified information in your explanations.
Our code doesn't record your IP address. Our hosting platform (Cloudflare) processes it to protect the Snapshot from spam and abuse, through a bot check. Website analytics does not run on the questions or on the screen that shows your code.
While you work, your answers stay in your browser tab and are cleared when you close it. Once they are sent, they are cleared from your device, and the Snapshot shows you a code that stays until you close the tab. We keep your answers and explanations against that code only.
To book a findings call, you can email your code to [email protected]. Doing so links your email address, and anything else in your email such as your name or company, to your answers. That choice is yours. We use your email to arrange the call, and your answers to prepare for it.
Your answers reach us through Cloudflare first, and are then stored in Sydney, Australia, by our database provider. These providers, and the contractor who maintains our website, handle your answers on our behalf. We keep your answers and explanations for 24 months after they are sent. After that, we delete them and keep only totals across all Snapshots, which do not identify anyone.
To have your answers and explanations deleted sooner, email your code to [email protected]. We need your code to find them.
Storage and security
We take reasonable steps to protect your information from misuse, loss and unauthorised access. We retain enquiry information only as long as needed for the purpose it was collected, or as required by law.
Access and contact
You may request access to the personal information we hold about you, or ask us to correct it. To make a request, or to raise a privacy concern, contact us at [email protected].