Privacy policy

What this page covers, and what it does not

This page is about the website. It is not the agreement for a matter. How evidence, devices and recovered data are handled inside a job is agreed in the quote for that job, in writing, before any work starts.

What the contact form collects

Your name, email address and message are required. A phone number is optional, and so is the subject you pick. The form also sends the page you submitted it from, and two values it fills in by itself that are used to tell a person from an automated submission. Nothing else about you is collected by the form.

Do not send evidence through this form

This form is an ordinary email path. It is not a secure transfer service and it is not the route for evidence, case material, confidential files or anything taken off a device. Describe the device or the system and the deadline. If a matter is a fit, the handling of the material itself is agreed in the quote for that job, in writing, before any of it changes hands.

What the server records without you typing it

Your IP address, your browser user agent, the page that referred you, and the site you submitted from. This site sits behind Cloudflare, so the IP address used is the one Cloudflare reports for your connection. The IP address is also used to limit how many submissions one sender can make in a short period.

Analytics and cookies

This site loads Google Analytics 4, which sets its own cookies and records pages viewed, an approximate location from your IP address, device and browser type, and how you arrived. IP anonymisation is switched on. Three events are recorded beyond page views: a click on a phone or email link, the first time you put the cursor in the contact form, and reaching the page shown after a form is sent. None of those events carry your name, email address or message.

Cloudflare, which carries every request to this site, adds its own performance analytics script at the edge, served from static.cloudflareinsights.com. It is not part of this site's code and it sets no cookie: it measures how quickly pages load. Those two are the only third party scripts on the site. This site sets no cookie of its own, and loads no fonts or stylesheets from a third party.

Where an enquiry goes

The form is delivered as an email through Twilio, a transactional email provider, to a single monitored mailbox. Akismet, run by Automattic, checks the message for spam and receives your name, email address, message, IP address, browser details and the referring page for that check alone. A one line alert carrying your name, email address, chosen subject and the page you wrote from is also sent to a push notification service, so a real enquiry is not missed if the email fails. Cloudflare carries every request to this site and can see standard connection details. Google processes analytics data under its own terms. Nothing here is sold, rented, or passed to a marketing list.

How long it is kept

Enquiry emails stay in the mailbox for as long as they are reasonably needed to reply and for ordinary business records. The rate limiting record holds timestamps only and expires by itself after a short period. Server logs record dropped spam and delivery failures, including the sending email address and IP address, and are kept for troubleshooting. An address blocked for abuse stays blocked until it is removed by hand. Analytics data follows the retention setting on the Google Analytics property.

Security

The site and the form run over an encrypted connection. The form is filtered for spam before anything reaches a mailbox. Alien Security is one person, so one person reads enquiries. No account, no login and no payment detail is ever collected by this website.

Your rights, and how to ask

Under the Privacy Act 1988 (Cth) you can ask to see or correct the personal information held about you, or raise a concern about how it was handled. Call +61 2 9161 8000 or send a message through the contact page marked as a privacy request. If the answer does not satisfy you, you can take it to the Office of the Australian Information Commissioner.

Changes to this policy

If what the site collects changes, this page changes with it and the review date above is updated. There is no separate notification list to join.