Privacy Policy

1. Who we are

Seacow Technology Pty. Ltd. (“Seacow”, “we”, “us”) is an Australian proprietary company providing cloud managed services. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

• Enquiry information — name, employer, work email, phone number and the content of your message, provided through our contact form or by email.
• Customer contact records — names and business contact details of authorised contacts at customer organisations, for service delivery and support.
• Technical and operational data — logs, metrics and configuration data from customer AWS environments we manage, which may incidentally contain personal information belonging to your users.
• Website analytics — aggregate usage data. We do not use advertising trackers or sell any data.
• Recruitment information — applications, CVs and references where you apply for a role with us.

3. How we use it

To respond to enquiries, deliver and support contracted services, meet legal and contractual obligations, manage security and incident response, and administer our business. We do not add enquiry contacts to marketing lists without consent, and we do not sell personal information.

4. Customer data and our role

Where we manage a customer's cloud environment, that customer determines what personal information is collected and why. In those cases Seacow acts on the customer's documented instructions under the terms of the services agreement. Individuals wanting access to or correction of such data should contact the customer organisation directly; we will assist our customer in responding.

5. Disclosure and sub-processors

We disclose personal information only to: our personnel who need it to perform their role; service providers who support our operations (listed in our sub-processor register, available on request); and where required or authorised by law.

Some service providers store data outside Australia. Where that occurs we take reasonable steps to ensure comparable protection, consistent with APP 8. Our current sub-processor list and their hosting locations are available to customers on request.

6. Where data is stored

Customer workloads we manage are hosted in the AWS regions selected by the customer — ordinarily ap-southeast-2 (Sydney) or ap-southeast-4 (Melbourne). Our internal business systems are hosted in Australia where the provider offers an Australian region. A small number of business applications — including our email and productivity suite — are operated by global providers who may process data outside Australia. Those providers, and the countries in which they operate, are listed in our sub-processor register, which is available on request.

7. Security

We maintain an information security programme aligned to ISO/IEC 27001, including access control, encryption in transit and at rest, logging and monitoring, personnel screening and incident response procedures. No system is perfectly secure; we notify affected parties and the OAIC where the Notifiable Data Breaches scheme requires it.

8. Retention

We keep personal information only as long as needed for the purpose collected or as required by law, then destroy or de-identify it.

• Website enquiries — 24 months from last contact, unless the enquiry becomes a customer relationship.
• Customer records — the term of the agreement plus 7 years, which is the period Australian tax and corporate record-keeping obligations require.
• Operational logs from managed environments — as set in your service description; ordinarily 90 days for application logs and 7 years for audit logs.
• Recruitment records — 12 months from the close of the role for unsuccessful applicants, unless you ask us to keep them longer.

9. Cookies

This website uses only cookies strictly necessary for the site to function and, where enabled, privacy-preserving aggregate analytics. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser without losing site functionality.

10. Access, correction and complaints

You may request access to, or correction of, the personal information we hold about you. Write to privacy@seacowtech.cloud. We will respond within 30 days.

If you are dissatisfied with our handling of a privacy matter, tell us first and we will investigate. If you remain unsatisfied you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes

We may update this policy. The current version is always published here with its last-updated date.

12. Contact

Privacy Officer
Seacow Technology Pty. Ltd. (ABN 15 167 507 039)
Sydney, NSW, Australia
privacy@seacowtech.cloud