How we handle your information

SecureLoop.io is committed to protecting your data. This policy explains what we collect, how we use it, where it's stored, and your rights under Australian privacy law.

Last updated: October 2026

1. Who we are

SecureLoop.io is a cloud security and AI automation consultancy based in Brisbane, Queensland, Australia. We provide security consulting, AI automation, and related technology services to Australian small and medium businesses.

Contact: hello@secureloop.io · 0488 886 009

2. What information we collect

We collect information that you provide to us directly, including:

Contact details: name, email address, phone number, company name, ABN

Technical environment information: cloud platform, number of users, security tools in use

Service delivery data: audit findings, configuration data, automation settings

Billing information: invoicing details and payment records held in our own billing system

Contracts: agreements you sign with us electronically, including the signer names and email addresses

Website enquiries: the name, email, business, team size, service interest and message you submit through our contact form, and your IP address

Communications: emails, support requests, and meeting notes

Website usage: anonymous, aggregated page-view and page-performance statistics (pages visited, referrer, country, browser and device type). This is not linked to you, and we do not use advertising or cross-site tracking cookies

3. How we use your information

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Service delivery: to deliver the services you have engaged us to provide

Communication: to communicate with you about your services, invoices, and support

Improvement: to improve our services and processes

Compliance: to comply with legal and regulatory obligations

4. Where your data is stored

Client data and our business records, including billing records, invoices and signed contracts, are stored in Microsoft 365 and SharePoint Online, hosted in Microsoft’s Australian data centres (Sydney and Melbourne).

Invoices are produced by our own billing service, which runs in Microsoft Azure’s Australia East region and saves each invoice to our SharePoint before emailing it. Contracts are signed using Microsoft 365 eSignature, and the signed copy is saved back to our SharePoint.

Our website is hosted by Vercel, which also provides our website statistics: Vercel Web Analytics (cookieless, aggregated page views) and Vercel Speed Insights (anonymous page-performance measurements that are not linked to any visitor or IP address). Our website fonts are served from our own domain, so visiting the site does not contact Google. Enquiries sent through our contact form are checked for spam by Cloudflare Turnstile and delivered to our mailbox by Resend. These providers may process that enquiry information outside Australia, including in the United States.

Apart from website enquiries, we do not store client data outside of Australia unless you explicitly request it or a third-party tool you use requires it.

5. How we protect your data

MFA: multi-factor authentication enforced on all accounts

Conditional Access: policies restricting access by device, location, and session duration

Data Loss Prevention: sensitivity labels and DLP policies via Microsoft Purview

Encryption: all data encrypted at rest and in transit

Access reviews: regular access reviews and guest account lifecycle management

Incident response: documented incident response plan for data breach notification

6. How long we keep your data

We retain your data for the duration of our engagement plus 7 years for financial records (as required by Australian tax law). All other data is securely deleted within 60 days of engagement termination unless otherwise agreed.

7. Your rights

Under the Australian Privacy Act 1988, you have the right to:

Access: the personal information we hold about you

Correction: request correction of inaccurate information

Complaint: complain about a breach of the Australian Privacy Principles

To exercise any of these rights, contact us at hello@secureloop.io.

8. Third-party services

We use the following third-party services in delivering our work:

Microsoft 365: SharePoint, Teams, Exchange, Power Automate, and Microsoft 365 eSignature for contract signing

Microsoft Azure: our billing service and automation infrastructure (Australia East region)

Vercel: website hosting, plus cookieless website analytics (Web Analytics) and performance monitoring (Speed Insights)

Resend: delivery of website contact form enquiries to our mailbox

Cloudflare Turnstile: spam and bot protection on our contact form

GitHub: internal operational documentation (no client data stored)

Each provider maintains their own privacy policies and security certifications. We assess all third-party providers against a vendor security checklist before use.

9. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at secureloop.io/privacy with the updated date. Material changes will be communicated to active clients via email.

10. Complaints

If you believe we have breached the Australian Privacy Principles, please contact us at hello@secureloop.io. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Questions about how we handle your data?

We're happy to discuss our security controls and data handling practices in detail.