Privacy Policy
Last updated: 5 October 2026
Invado Tech respects your privacy and takes the handling of personal information seriously.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices available to you.
Invado Tech operates the website at invadotech.com and provides cybersecurity services in Australia.
We handle personal information in accordance with applicable Australian privacy laws. Where the Privacy Act 1988 (Cth) applies to us, this includes the Australian Privacy Principles.
1. What personal information we collect
The information we collect depends on how you interact with us.
It may include:
your name
work email address
telephone number
company or organisation
job title or role
information you include in an enquiry
information provided when requesting a quote or discussing an engagement
correspondence between you and Invado Tech
information required to administer an engagement or business relationship
IP address, browser type, device information and similar technical information
information about how visitors use our website, such as pages visited, referring pages and approximate visit times
We do not generally need sensitive personal information through our public website.
Please do not submit passwords, API keys, authentication tokens, private keys, confidential vulnerability information or other security credentials through our website forms.
If sensitive technical information is required for an engagement, we can arrange an appropriate way to exchange it.
2. How we collect information
We may collect personal information directly from you when you:
submit a contact form
email or call us
request information or a quote
discuss or enter into an engagement with us
communicate with us during an engagement
subscribe to communications where that option is available
We may also receive business contact information from your employer, colleagues, business partners, referrals or publicly available professional sources where it is reasonable and lawful for us to do so.
Some technical information may be collected automatically when you visit our website through normal website logs, cookies or analytics technologies.
3. Why we collect and use personal information
We may use personal information to:
respond to enquiries
prepare quotes and proposals
scope and administer cybersecurity engagements
communicate with clients and prospective clients
provide and improve our services
operate, maintain and secure our website
understand how our website is being used
maintain business and accounting records
manage our relationships with clients, suppliers and business contacts
investigate misuse, security incidents or suspected unlawful activity
meet legal, regulatory, contractual or insurance requirements
send relevant business communications where permitted by law
We do not sell personal information.
4. Information encountered during cybersecurity engagements
Cybersecurity work can involve access to systems that contain personal or confidential information.
Where our work gives us access to information held within a client's environment, we only access and handle that information to the extent reasonably required to perform the agreed work.
The scope of our access, testing activities and handling of client information may also be governed by a Statement of Work, Rules of Engagement, confidentiality agreement, service agreement or other written agreement with the client.
We do not use information encountered during a client engagement for unrelated purposes.
Where practical, we avoid collecting or retaining personal information that is not necessary for the engagement.
5. Cookies and website analytics
Our website may use cookies and similar technologies to operate correctly, maintain security and understand website usage.
These technologies may collect information such as:
browser and device type
IP address
pages visited
time spent on pages
referring website
general interaction with the website
Some cookies may be required for the website to function. Other technologies may be used for analytics or similar purposes depending on the services configured on the website.
You can control or block cookies through your browser settings. Blocking some cookies may affect how parts of the website work.
We will update this Privacy Policy if we materially change the analytics, advertising or tracking technologies used on the website.
6. Marketing communications
We may send relevant commercial communications where we are permitted to do so under Australian law.
Commercial electronic messages sent by us will identify Invado Tech and provide an appropriate way to unsubscribe where required.
If you ask us to stop sending marketing communications, we will action the request within the period required by law.
Unsubscribing from marketing does not prevent us from sending communications that are reasonably necessary for an existing enquiry, engagement, account, legal obligation or other business relationship.
7. When we disclose personal information
We may disclose personal information where reasonably necessary to:
service providers that help us operate our business
website hosting and technology providers
email, cloud storage and communications providers
analytics providers
accounting, legal, insurance and professional advisers
contractors or specialist service providers involved in an engagement
regulators, courts, law enforcement or government authorities where required or permitted by law
another entity involved in a genuine business restructure, acquisition or transfer, subject to appropriate confidentiality and legal requirements
We only disclose information where there is a legitimate reason to do so.
Service providers may only receive the information reasonably required for the service they perform.
8. Overseas processing
Some of the technology and cloud services used by businesses such as ours operate infrastructure outside Australia.
As a result, personal information may in some circumstances be stored or processed overseas.
The locations can vary depending on the service provider, infrastructure and configuration being used.
Where Australian privacy law requires us to take particular steps in relation to overseas disclosure, we will take reasonable steps to comply with those requirements.
We will update this policy if our use of overseas service providers changes in a way that materially affects how personal information is handled.
9. How we protect information
We take reasonable technical, administrative and organisational measures to protect personal information against misuse, loss, unauthorised access, modification and disclosure.
The measures we use depend on the nature of the information and how it is being handled.
No website, network or electronic storage system can be guaranteed to be completely secure. You should take appropriate care when deciding what information to send electronically.
If a data breach occurs, we will assess and respond to it in accordance with applicable legal obligations. Where the Notifiable Data Breaches scheme under the Privacy Act applies, we will comply with those requirements.
10. How long we keep information
We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, or where retention is required for legal, contractual, accounting, insurance or legitimate business reasons.
Retention periods can vary depending on the type of information.
When information is no longer reasonably required, we take appropriate steps to delete, destroy or de-identify it where practical and lawful to do so.
11. Access and correction
You may contact us if you want to:
ask what personal information we hold about you
request access to your personal information
ask us to correct information that is inaccurate, incomplete or out of date
We may need to verify your identity before providing access or making a correction.
There may be circumstances where access cannot lawfully or reasonably be provided. If that occurs, we will explain the reason where appropriate.
12. Privacy complaints
If you have a concern about how Invado Tech has handled your personal information, please contact us using the details below.
Please describe the issue and provide enough information for us to investigate it.
We will review the complaint and respond within a reasonable period.
Where the Privacy Act applies and you are not satisfied with our response, you may also be able to make a complaint to the Office of the Australian Information Commissioner.
13. Automated decision-making
We do not currently use personal information collected through our public website to make automated decisions that could reasonably be expected to significantly affect an individual's rights or interests.
If this changes, we will update this Privacy Policy and provide any additional information required by applicable privacy law.
14. Third-party websites
Our website may contain links to websites or services operated by other organisations.
We are not responsible for the privacy practices, content or security of third-party websites.
You should review the privacy information provided by those organisations before providing personal information to them.
15. Changes to this Privacy Policy
We may update this Privacy Policy when our business, website, technology providers or legal obligations change.
The current version will be published on our website with the date it was last updated.
16. Contact us
For questions, requests or complaints relating to privacy, contact:
Invado Tech
Email: sales@invadotech.com
Phone: 1300 420 369
Website: invadotech.com