Privacy Policy

Who we are and what this policy covers

“MiCiS”, “MiCiS Group”, “we”, “us” and “our” refer to the MiCiS Group entity responsible for the relevant interaction or service. The group currently includes:

• MiCiS Consulting Pty Ltd (ABN 28 141 219 767);
• MiCiS Information Systems Pty Ltd (ABN 37 166 269 021); and
• MiCiSTel Pty Ltd (ABN 17 166 228 431),

together with any other entity using the MiCiS Group name that is identified in the relevant quotation, order, invoice, statement of work or service agreement. The responsible entity for a specific service is the entity named in the applicable document.

This policy applies to this website, general enquiries, prospective and existing client relationships, procurement, support, managed services, projects, telecommunications and electronic-security services where a MiCiS Group entity handles personal information. It may be supplemented by a collection notice, client agreement, employment notice or other service-specific document.

Information we collect and hold

The information we collect depends on the interaction, the systems involved and the role MiCiS has been asked to perform. It may include:

Identity and contact information

• name, position, organisation, business address, email address and telephone number;
• authorised contacts, decision-makers, approvers, site contacts and emergency contacts.

Commercial and account information

• enquiries, proposals, quotes, orders, contracts, invoices, payment status and procurement records;
• licensing, subscription, warranty, asset and service-entitlement information.

Support and technical information

• service requests, tickets, emails, call notes, meeting notes and other correspondence;
• device, account, network, application, service, IP-address, audit, diagnostic, monitoring and security-event information;
• configuration, access, ownership and dependency information needed to deliver or support an agreed service.

Site and security-system information

Where authorised and within an agreed service, we may handle site contact, visitor, contractor, credential, access-control, alarm, intercom, video, image, audio or operational-event information. This type of information is not collected merely because someone visits this website.

Website and device information

Our systems may record IP address, browser and device type, date and time, pages requested, referring page, form-submission metadata, security events and cookie or similar identifiers.

Sensitive information

We do not seek sensitive information through a general website enquiry. If sensitive information is necessary for a specific function or service, we handle it only where authorised and permitted by law. Do not place passwords, private keys, recovery codes or unnecessary sensitive records in the general enquiry form.

How we collect personal information

We may collect information:

• directly from you through forms, calls, email, meetings, orders, support requests and agreements;
• from your organisation, an authorised representative, employer, client or service owner;
• from carriers, vendors, distributors, landlords, builders, trades, professional advisers and other providers involved in an authorised engagement;
• from supported systems, devices, applications, platforms, logs, monitoring tools and service records;
• from public registers, directories, websites and professional sources where lawful and relevant; and
• automatically when you use the website or an online service.

If you give us personal information about another person, you must have authority to do so and, where required, make them aware of this policy or the relevant collection notice.

If we receive personal information we did not request, we assess whether it may lawfully be retained. Information that is not required may be deleted or de-identified where lawful and practicable.

Why we collect, use and disclose information

We may handle personal information to:

• respond to enquiries and identify an appropriate service, project or next step;
• prepare quotes, process orders, administer contracts, invoices, licensing and accounts;
• design, deliver, monitor, maintain, secure and support technology or site systems within agreed scope;
• verify authority, manage identity and access, prevent misuse and investigate security events;
• coordinate carriers, vendors, distributors, contractors, advisers and other authorised providers;
• keep service, project, test, acceptance, audit, support and change records;
• improve quality, training, documentation, workflows, products and services;
• meet legal, regulatory, insurance, accounting and record-keeping obligations;
• manage complaints, disputes, incidents, fraud, safety and business continuity; and
• send relevant marketing where consent or another lawful basis exists.

Direct marketing

Submitting a one-off enquiry does not automatically subscribe you to a marketing list. Where we send commercial electronic messages, we use consent or another basis permitted by law, identify the sender and provide a functional way to unsubscribe. Service and transactional messages may still be sent where needed to administer an account, order or service.

Information handled for clients

MiCiS often provides managed IT, cloud, telecommunications, integration and electronic-security services for organisations that determine why personal information is collected and how it is used. In those circumstances, MiCiS may handle information as a service provider under the client’s instructions and the applicable agreement.

The client remains responsible for its own collection notices, authority, retention decisions and legal obligations unless an agreement states otherwise. If your request concerns information controlled by a MiCiS client, we may refer you to that client or coordinate the request with them.

Who we may disclose information to

Depending on the interaction, we may disclose relevant information to:

• MiCiS Group entities, staff and authorised contractors;
• clients, account owners and authorised representatives;
• cloud, hosting, data-centre, communications, security, support, backup, software, payment, procurement, analytics and professional-service providers;
• carriers, vendors, distributors, manufacturers, warranty providers, builders, landlords and trades involved in an authorised service or project;
• insurers, auditors, accountants, lawyers and other professional advisers;
• government bodies, regulators, courts and law-enforcement agencies where required or authorised; and
• a prospective purchaser or successor in connection with a genuine business restructure or transaction, subject to appropriate confidentiality and legal requirements.

Overseas recipients and processing

Some cloud, communications, security, support, software and analytics providers operate or support services from outside Australia. Depending on the platform and configuration, personal information may be processed or accessible in the United States and other countries in which those providers operate. Where practicable, more specific locations are identified in a collection notice, service document or on request.

Where the Privacy Act applies to a cross-border disclosure, we take reasonable steps required in the circumstances. Data location and access arrangements for a specific client environment may also be governed by the relevant contract and platform configuration.

Website data, cookies and automated tools

Cookies and similar technologies

The website may use cookies or similar technologies that are necessary for security, forms, sessions, preferences, performance and administration. If analytics, embedded content or marketing technology is enabled, those providers may collect device, usage or interaction information under their own privacy terms. Browser settings can be used to block or delete cookies, although some website functions may not work as intended.

Forms and anti-spam controls

Form submissions may include technical metadata such as time, page, browser and IP address. We may use honeypots, reputation services, rate limiting, CAPTCHA or similar controls to reduce malicious or automated submissions.

Automation and AI-assisted tools

We may use automated tools to assist with spam filtering, security, classification, transcription, summarisation, routing or administrative workflows. These tools support staff review and do not, through this public website, make solely automated decisions that are intended to significantly affect an individual’s rights or interests. If a different automated-decision arrangement applies to a specific service, it will be documented separately and this policy will be updated where required.

Security, storage and retention

We use reasonable technical and organisational measures appropriate to the information, systems, risks and services involved. Measures may include access controls, identity controls, logging, endpoint and network protection, encryption where appropriate, backups, monitoring, staff procedures, supplier controls and incident response.

No internet transmission, cloud service or storage system can be guaranteed to be completely secure. You should use the agreed secure transfer method for credentials, protected records or sensitive configuration rather than a general website form or ordinary email.

We retain personal information for as long as reasonably required for the purpose for which it was collected, to provide and support services, resolve disputes, meet legal and contractual obligations and maintain appropriate business records. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to lawful retention, backup and technical constraints.

Data incidents

We assess suspected data incidents and take containment, investigation and remediation steps appropriate to the circumstances. Where the Notifiable Data Breaches scheme or another notification law applies, we notify affected individuals and the relevant regulator as required.

Access, correction and privacy complaints

You may ask to access personal information we hold about you or request correction if it is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity and authority. Legal exceptions may apply, including where access would unreasonably affect another person’s privacy or reveal protected information.

To make a request or privacy complaint, use the MiCiS contact page, call 1300 742 082, or write to:

Please mark the request “Privacy” and provide enough information for us to understand the issue without sending passwords, private keys or unnecessary sensitive records. We will assess the matter and respond within a reasonable period. If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy when our services, technology, providers or legal obligations change. The current version and effective date will be published on this page. Material changes may also be communicated through another reasonable channel where appropriate.

Effective date: 27 July 2026.