Privacy and cookies

This page explains what personal information this website collects, what I do with it, and the cookies it does not use. The short version: I collect only what you choose to send me, I use it only to reply to you, and the site does not track you.

Last updated 7 October 2026

Who I am

This website is run by insightCISO Pty Ltd, a technology and risk advisory practice led by Barry Sollitt. In this policy, "I" and "me" mean insightCISO Pty Ltd. You can reach me about anything on this page at [email protected].

I handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What I collect

When you use the contact form, I receive your name, your email address, your business name if you give it, and your message. The form also passes your IP address to Cloudflare's spam check (see below). Nothing you type into the form is stored on this website.

When you email me directly, I receive whatever you include in your email, along with the details your email carries, such as your address.

When you visit the site, the company that hosts it, Cloudflare, processes the technical details every website sees, such as your IP address, your browser type and the pages you request, to deliver the site and protect it from attack. I do not use analytics or advertising tools, and I do not build a profile of visitors.

Please don't send me sensitive information, such as health information or details of a live security incident, through the form. If you need to, ask me first and we can agree a safer way.

How I use it

I use what you send me to read your enquiry and reply to it, and, if we go on to work together, to run that engagement. I do not sell your information, share it for marketing, or add you to a mailing list.

Who else handles it

A few well-known service providers handle your information on my behalf, only to make the site and my email work:

• Cloudflare hosts the website and runs Turnstile, the spam check on the contact form. Turnstile uses your IP address and technical details about your browser to confirm a person, not a bot, sent the form. Cloudflare states it does not use this for advertising.
• Resend delivers the contact form's message to my inbox as an ordinary email.
• Google Workspace provides my email, so your message, and any email you send me directly, is stored in my mailbox there.

These providers may store or process information outside Australia, including in the United States. Each is bound by its own privacy and security commitments: Cloudflare, Resend and Google.

I will only disclose your information to anyone else if you agree, or if the law requires it.

How long I keep it

I keep correspondence for as long as I need it to deal with your enquiry or our work together, and to meet my legal and record-keeping obligations. After that, I delete it.

How I protect it

The site is served only over an encrypted connection, the contact form is protected against automated abuse, and my email account is protected with multi-factor authentication. Only I have access to your messages.

Cookies

Cookies are small files a website can store in your browser. This website sets no cookies of its own, and it uses no analytics, advertising or tracking cookies, so there is nothing to accept or decline.

Two pieces of Cloudflare technology run on the site, and neither tracks you:

• Turnstile, the spam check on the contact form, loads from Cloudflare. Cloudflare states that Turnstile does not use cookies to collect or store information about you, and that any data it does handle is used only to keep the site secure.
• Email address protection hides my email address from automated harvesters and shows it to people. It sets no cookies.

If that ever changes, for example if I add a tool that needs cookies, I will update this page first and, where the law requires it, ask for your consent.

Seeing or correcting your information

You can ask me what personal information I hold about you, ask me to correct it, or ask me to delete it. Email [email protected] and I will respond within 30 days.

Questions and complaints

If you have a concern about how I have handled your information, please tell me first at [email protected], and I will respond within 30 days. If you are not satisfied with my response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this page

I will update this page if the way the site handles information changes, and change the date at the top when I do.