Last updated 28 October 2026
ANSR Tech Pty Ltd (“ANSR Tech”, “we”, “us”) handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, who we share it with, and the choices you have. It applies to this website, to enquiries, and to the services we provide to our clients.
1. What we collect
We only collect personal information that is reasonably necessary for our business. Depending on how you deal with us, that may include:
- Enquiry details — your name, email address, phone number, company, the type of help you need and anything you write in your message.
- Client and billing details — contact details for the people we work with, the services you buy, quotes, invoices and payment records. We do not store full credit or debit card numbers.
- Service delivery information — details we need to support you, such as user names, device and network information, support requests, call notes and the access credentials you give us to manage your systems.
- Phone calls and voicemail — your phone number, call times and any voicemail you leave.
- Website and technical information — your IP address, browser and device type, the pages you visit and how you reached us. See section 5.
We do not ask for sensitive information such as health, racial or ethnic origin, religious or political views. Please don’t include it in an enquiry. If we receive personal information we didn’t ask for and don’t need, we will destroy or de-identify it where it is lawful and reasonable to do so.
You can contact us anonymously or under a pseudonym for general questions. We will usually need your real name and contact details to quote, contract with or support you.
2. How we collect it
Most information comes directly from you, through our contact form, email, phone or in person. We also collect information:
- from your employer or organisation, when they engage us and name you as a contact or user;
- automatically, when you use this website or a system we manage (for example, server and security logs);
- from publicly available business sources, referrals, and advertising platforms when you respond to one of our ads.
3. Why we use it
We use personal information to:
- respond to your enquiry and prepare quotes;
- provide, support, secure and improve the services you have engaged us for;
- manage our relationship with you, including invoicing and collecting payment;
- protect this website, our systems and our clients from spam, fraud and attack;
- understand how this website is used, so we can improve it;
- send you information about our services where you have agreed or would reasonably expect it (you can opt out at any time); and
- meet our legal, tax and regulatory obligations.
We won’t use your information for an unrelated purpose unless you consent, you would reasonably expect it, or the law requires or allows it. We do not sell personal information.
4. Information in our clients’ systems
When we provide managed IT, hosting, web, AI or marketing services, we may be able to see personal information that belongs to our client — for example, their staff’s email or their customers’ records in a website database. In that situation:
- we act as the client’s service provider and only access that information as needed to deliver the services they have asked for;
- we keep it confidential and protect it with the safeguards in section 8;
- we don’t use it for our own purposes; and
- if you want to access or correct it, please contact the organisation that holds it. We will help them respond.
5. Cookies, analytics and spam protection
Cookies are small files a website stores in your browser. This website uses:
| Service | What it does | Data involved |
|---|---|---|
| Google Analytics 4 | Tells us how many people visit, which pages they view and whether they send an enquiry. | Cookies named _ga and _ga_<id> (up to 2 years), pseudonymous device ID, IP address (used for approximate location and not stored by Google Analytics), pages viewed, device and browser. |
| Google Ads conversion measurement (if enabled) | Tells us whether an ad led to an enquiry. | Cookies and ad click identifiers set by Google. |
| Cloudflare Turnstile (contact page only) | Checks that a form submission comes from a person, not a bot, usually without a puzzle. | Browser and device signals and IP address, processed by Cloudflare. No advertising or cross-site tracking. |
| Google Fonts | Delivers the typefaces this website uses. | Your IP address and browser details, sent to Google when the fonts load. |
We don’t use cookies to show you advertising on other websites. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. Blocking cookies won’t stop you from using this site or sending us an enquiry. See how Google uses information from sites that use its services.
Our web servers also keep access and security logs: your IP address, the time, the website and page requested, and your browser. We use them to keep our sites running and to detect and stop attacks. An address that repeatedly probes a site for weaknesses is automatically blocked for a period. See section 9 for how long logs are kept.
6. Who we share it with
We share personal information only as needed to run our business and deliver our services, with:
- Service providers that host, secure or support our systems (listed below), under contracts or terms that require them to protect it;
- Vendors and distributors, when we buy hardware, software or licences for you (for example, a Microsoft 365 subscription in your name);
- Subcontractors we engage to help deliver your services, who are bound by confidentiality;
- Our professional advisers, such as accountants, lawyers and insurers; and
- Government agencies, regulators or law enforcement, where the law requires or allows it.
The main service providers we use are:
| Provider | Purpose | Where data is held |
|---|---|---|
| Akamai (Linode) | Website and server hosting, encrypted backups and log archives | Australia (Sydney); backups and log archives in Singapore |
| Microsoft 365 | Business email, documents and contact form delivery | Australia, with possible processing in other countries |
| Cloudflare | Domain name (DNS) services and spam protection | Global network, including the United States |
| Website analytics, advertising measurement, fonts and search tools | United States and other countries | |
| Bitwarden | Encrypted storage of passwords and system credentials | United States |
| Crazytel | Business phone calls and voicemail | Australia |
| Accounting, banking and payment providers | Invoicing, payments and record-keeping | Australia, with possible processing in other countries |
| AI service providers | Only for AI work you have agreed to — see our Responsible AI page | Depends on the provider, agreed with you first |
We also use tools for secure network access, monitoring and source-code management that hold system information but are not used to store personal information of website visitors or our clients’ customers.
7. Overseas disclosure
Some of the providers above store or process information outside Australia, mainly in the United States and Singapore, and potentially in other countries where those providers operate. We choose established providers with strong security and privacy commitments and take reasonable steps so they handle personal information consistently with the APPs. Where practical, we choose Australian data locations.
8. How we protect it
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. Our safeguards include:
- encryption of data in transit (HTTPS/TLS) and of backups at rest;
- strong authentication and limited access to our systems;
- administrative access limited to a private, authenticated network;
- security logs of sign-ins and changes to our systems and websites, sent to a separate logging server so they can’t be altered on the system they record;
- regular patching, security monitoring and controls guided by the Australian Signals Directorate’s Essential Eight; and
- an encrypted password manager for any credentials you give us.
No system is perfectly secure, so please don’t send passwords or sensitive information through our contact form or by ordinary email. We will arrange a secure way to share them.
9. How long we keep it
We keep personal information only as long as we need it, then securely destroy or de-identify it. As a guide:
- enquiries that don’t lead to work: up to 2 years;
- client, contract and financial records: 7 years after the engagement ends, to meet tax and legal requirements;
- client system credentials: deleted or handed back when the service ends;
- web server and security logs, including IP addresses: 90 days on our logging server, plus an encrypted archive copy kept for up to 15 months, then deleted; and
- encrypted website backups: up to 3 years, under a rolling schedule.
10. Direct marketing
We may send you information about our services if you are a client, have asked for it, or would reasonably expect to hear from us. Every marketing email identifies us and has a working unsubscribe link, as the Spam Act 2003 (Cth) requires. You can also opt out by contacting us. We don’t share your details with other businesses for their marketing.
11. Automated decisions
We don’t use computer programs to make decisions that significantly affect your rights or interests. Our contact form uses automated spam checks that may block a submission or flag it for a person to review. If you think a genuine message didn’t reach us, email info@ansrtech.com.au. If that changes, we will update this policy to describe the kinds of personal information used and the decisions made.
12. Access and correction
You can ask for access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. We will need to confirm your identity. We aim to respond within 30 days and won’t charge you for making a request. If we refuse a request, we will tell you why in writing and how to complain.
13. Data breaches
If a data breach involving your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC), in line with the Notifiable Data Breaches scheme. If a breach affects information we hold for a client, we will tell that client promptly so they can meet their own obligations.
14. Complaints
If you have a concern about how we have handled your personal information, please contact us first at info@ansrtech.com.au with “Privacy complaint” in the subject. We aim to acknowledge your complaint promptly and resolve it within 30 days.
If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
15. Changes to this policy
We may update this policy as our services, providers or the law change. The “Last updated” date at the top shows when it was last revised. Material changes will be highlighted on this page.