Privacy policy
We collect as little as we need, we tell you what we do with it, and we do not sell it. This policy sets out the detail.
Who we are
RedHandle Cyber is a registered business name of D2UNet Pty Ltd (ABN 48 641 637 890, ACN 641 637 890), an Australian company with its principal place of business at Suite 2.03, Building T2A, Warawara Circuit, Quakers Hill NSW 2763.
In this policy, "we", "us" and "our" mean D2UNet Pty Ltd trading as RedHandle Cyber.
What this policy covers
This policy explains how we handle personal information collected through redhandle.com.au and in the course of providing our services. It does not cover the systems or websites of our customers or suppliers.
What we collect
When you complete the health check form on this website, we collect your name, business name, website or email domain, email address, phone number, the approximate number of people in your business, and anything else you choose to tell us.
If you contact us by email or telephone, we collect whatever information you provide in that contact.
If you become a customer, we collect information necessary to deliver and administer the service, including contact details for the people we deal with, technical information about the systems we protect, and billing details.
We do not collect sensitive information as defined in the Privacy Act 1988 (Cth), and we ask that you do not send it to us.
Why we collect it
- To respond to your enquiry and arrange a cyber health check
- To carry out the assessment you have asked for and report the results to you
- To provide, support and bill for our services if you become a customer
- To meet our legal and record-keeping obligations
We will not use your details for unrelated marketing without asking you first, and we do not sell or rent personal information to anyone.
The cyber health check
The health check involves examining information about your business that is publicly visible on the internet, and checking whether credentials associated with your domain appear in known third-party data breaches. We only do this for a domain you have told us you are authorised to have assessed.
Where you ask us to review your Microsoft 365 environment, we do so using read-only access that you grant and can withdraw at any time. We use that access only to prepare your report.
Findings are shared with you. We do not publish them or disclose them to anyone else without your consent, other than where we are required to by law.
Who else handles your information
We use third parties to run parts of our business. Those relevant to information collected through this website are:
- Netlify — hosts this website and processes form submissions
- Microsoft — our email and business systems
- Our security platform providers — used to perform assessments and deliver monitoring services
Some of these providers store or process data outside Australia, including in the United States and Europe. We take reasonable steps to ensure they handle personal information consistently with the Australian Privacy Principles.
How long we keep it
If you enquire and do not become a customer, we keep your enquiry and any assessment findings for up to 24 months, then delete them. If you become a customer, we keep records for the period of the engagement and for seven years afterwards to meet our legal and tax obligations.
You can ask us to delete your information earlier and we will do so unless we are required to keep it.
Keeping it secure
We hold personal information in access-controlled systems protected by multi-factor authentication, and we limit access to the people who need it. We take security seriously — it is what we do for a living — but no system is completely secure, and we cannot guarantee absolute protection.
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
Cookies and analytics
This website does not use tracking or advertising cookies. If we add website analytics in future, we will update this policy and will use a service that does not track individuals across websites.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete it. Contact us using the details below and we will respond within a reasonable time, usually within 30 days.
Complaints
If you think we have mishandled your personal information, contact us first and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Contact us
Privacy enquiries
D2UNet Pty Ltd trading as RedHandle Cyber
Suite 2.03, Building T2A, Warawara Circuit, Quakers Hill NSW 2763
hello@redhandle.com.au
02 9188 0618
Changes to this policy
We may update this policy from time to time. The current version is always published here.
Last updated: September 2026