Privacy Policy

(a) This policy explains how we collect, hold, use and disclose your personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) and, where they apply to visitors from the European Union or United Kingdom, the GDPR and the UK Data Protection Act 2018.

(b) Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

(c) This policy describes our practices. Where we need your consent for a particular use of your personal information — for example, analytics cookies — we ask for it separately; see section 9 and our Cookie Policy.

We collect only what we need to operate Subnet Expert:

• technical and usage data — device and browser type, IP address, approximate location, pages viewed and interactions, collected via the analytics service listed in section 5;
• information you send us — if you email us, the content of your message and your email address;
• information you submit via our contact form — your name, email address and message, and technical details of the submission such as the time it was sent;
• any other information you choose to provide to us.

The subnet calculations you perform on the Website are processed in your browser and are not sent to or stored by us.

(a) We collect personal information directly from you when you contact us or submit a form.

(b) We also collect it automatically, through cookies and similar technologies — see our Cookie Policy.

(c) We hold personal information in the cloud infrastructure of our hosting provider (currently Amazon Web Services), in the systems of the service providers listed in section 5, and in our email and business records. Contact form submissions are stored in our systems and delivered to us by email.

(a) to provide, operate, secure and improve the Service — for visitors to whom the GDPR or UK GDPR applies, our lawful basis is our legitimate interests in running and protecting the Service;

(b) to respond to your enquiries and provide support (legitimate interests);

(c) to monitor errors, performance and usage of the Service (legitimate interests). You can block or delete analytics cookies at any time — see section 9 and our Cookie Policy;

(d) to comply with our legal obligations, resolve disputes and enforce our agreements (legal obligation);

(e) for other purposes you would reasonably expect, or with your consent.

We may disclose personal information to the following categories of recipient:

• our personnel, contractors and related entities, on a need-to-know basis;
• service providers who help us operate the Website and our services — including hosting and content delivery, analytics, spam protection, email delivery and error tracking;
• our professional advisers, such as accountants, auditors, insurers and lawyers;
• a purchaser or prospective purchaser, if there is a change of control of our business or a sale or transfer of business assets — disclosed under an obligation of confidentiality;
• where required or authorised by law, or to a regulator, law-enforcement body or court; and
• any other person with your consent.

The third-party service providers we currently use include those set out below. This table reflects our current providers and is not an exhaustive list or a limit on the categories above — we update it as our providers change.

We are likely to disclose personal information to recipients located outside Australia. Those recipients are likely to be located in the United States, and may be located in other countries in which our service providers operate from time to time. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in accordance with the APPs (APP 8). You can ask us where your personal information is currently held by contacting legal@subnetexpert.com.

For visitors to whom the GDPR or UK GDPR applies: where we transfer personal information to the United States, we rely on the European Commission's Standard Contractual Clauses or the UK equivalent, or on a provider's certification under the EU-U.S. Data Privacy Framework and its UK Extension where that provider holds one. Contact legal@subnetexpert.com for details of the safeguards or a copy of the relevant clauses.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including encryption in transit (HTTPS), access controls and monitoring. No system is completely secure, and we cannot guarantee the security of information transmitted over the internet. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme (Privacy Act, Part IIIC).

We keep personal information only as long as needed for the purposes above, then take reasonable steps to destroy or de-identify it (APP 11.2). Current retention practices:

• analytics and usage data — retained in our Google Analytics property for the retention period configured there, then deleted by Google;
• email correspondence — retained as long as needed to handle the enquiry and for our business records;
• contact form submissions — retained as long as needed to handle the enquiry and for our business records.

You have the following rights in relation to the personal information we hold about you:

(a) Access. You may request access to the personal information we hold about you by contacting legal@subnetexpert.com (APP 12). We will respond within a reasonable period. We do not charge for making a request.

(b) Correction. You may ask us to correct personal information that is inaccurate, out of date, incomplete or misleading (APP 13).

(c) Withdraw consent. Where we rely on your consent, you may withdraw it at any time by contacting us. You can also block or delete the analytics cookies described in our Cookie Policy at any time using your browser cookie controls or the Google Analytics opt-out browser add-on. Withdrawing your consent does not affect anything we did on the basis of that consent before you withdrew it.

(d) Complaints. If you believe we have breached the APPs, contact us at legal@subnetexpert.com with the details. We will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au | 1300 363 992.

(e) EU/UK visitors. Where the GDPR or UK GDPR applies, you also have the rights to erasure, restriction, objection and data portability, and to lodge a complaint with your local supervisory authority. Our lawful basis for each purpose is set out in section 4. We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

The Service is a general-audience tool and is not directed at children. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take reasonable steps to delete it. If you believe a child has provided us with personal information, please contact us at legal@subnetexpert.com.

Our Website may link to other websites. We are not responsible for their privacy practices — review their policies before providing personal information.

We may update this policy from time to time by posting the updated version on the Website.

legal@subnetexpert.com