Website policy & privacy notice

Cyberlutions® is operated by K&D BUSINESS GROUP PTY LTD, ABN 53 169 958 356, trading as Cyberlutions.

Terabyte Industries (Australia) Pty Limited t/as TerraByte Digital, ACN 689 265 594. TerraByte Digital provides Tech On-Demand, websites, apps, portals and AI automation.

Cyberlutions provides intelligence, investigation, cybersecurity, digital evidence, and related professional services. This Website Policy explains how you may use our website, how we handle information collected through the website, and how website-related privacy enquiries are managed.

This policy applies to use of cyberlutions.com.au and terrabytedigital.com and any forms, pages, resources, or communications made available through these websites.

For TerraByte Digital website activity, the website use and privacy provisions below also apply to TerraByte Digital. Cyberlutions references and descriptions of specialist investigation, cybersecurity and evidence services are retained for Cyberlutions. Each website is operated by the company identified above for that brand. It does not replace any client engagement letter, service agreement, non-disclosure agreement, operational policy, investigation authority, data processing agreement, or written terms issued for a specific matter.

For service delivery, investigations, cyber incident work, evidence handling, and operational matters, additional confidentiality, legal, evidentiary, security, or contractual requirements may apply.

Cyberlutions works with individuals, businesses, legal professionals, insurers, government agencies, and other organisations that require disciplined, ethical, and technically defensible support.

Our work may involve sensitive information, confidential client instructions, digital evidence, cybersecurity data, investigation material, and information obtained from authorised, public, commercial, legal, or client-provided sources.

We treat information security, privacy, confidentiality, evidence integrity, and lawful authority as core obligations.

You may use this website to learn about Cyberlutions, review our services, read general information, and contact us.

You must not use this website to:

• attempt unauthorised access to any system, account, page, portal, database, server, or administrative function;
• scan, probe, test, exploit, attack, disrupt, overload, scrape, or interfere with the website or connected infrastructure without written authorisation;
• upload or transmit malware, malicious code, harmful files, phishing material, or unlawful content;
• impersonate another person or organisation;
• submit false, misleading, abusive, defamatory, threatening, or unlawful material;
• interfere with another person's use of the website;
• copy, reproduce, or commercially exploit website content without permission;
• use information on this website to facilitate harassment, stalking, doxxing, fraud, cyber abuse, unauthorised surveillance, or other unlawful activity.

We may restrict, suspend, block, investigate, or report activity that appears unlawful, unsafe, unauthorised, abusive, or inconsistent with this policy.

Information on this website is provided for general information only. It is not legal advice, cybersecurity advice, forensic advice, investigative advice, insurance advice, or professional advice tailored to your circumstances.

You should not rely on website content as a substitute for advice specific to your matter. A professional relationship with Cyberlutions is formed only when we have accepted your matter in writing and the relevant engagement terms have been agreed.

Submitting an enquiry through the website does not guarantee that Cyberlutions will accept your matter, provide services, preserve evidence, commence an investigation, or act within a particular timeframe.

We aim to keep website information accurate, current, and useful. However, cybersecurity, investigations, technology, privacy, and legal environments change quickly. Website content may be updated, withdrawn, or replaced without notice.

We do not guarantee that the website will always be available, uninterrupted, secure, error-free, or free from technical issues. We may suspend or restrict access for maintenance, security, operational, legal, or business reasons.

Unless otherwise stated, all website content, including text, graphics, images, logos, design elements, documents, layouts, service descriptions, and downloadable materials, is owned by or licensed to Cyberlutions.

You may view and download website content for personal, internal business, or reference purposes only. You must not reproduce, republish, modify, distribute, transmit, sell, scrape, frame, or commercially exploit website content without written permission, except where permitted by law.

Cyberlutions®, associated branding, and related marks must not be used without permission.

This website may link to third-party websites, platforms, tools, articles, social media pages, booking systems, payment providers, analytics services, or external resources.

Third-party websites and services are not controlled by Cyberlutions. We are not responsible for their content, security, privacy practices, availability, accuracy, or conduct. Accessing third-party websites is at your own risk and may be subject to their own terms and privacy policies.

Cyberlutions is committed to handling personal information responsibly, lawfully, securely, and transparently.

This section explains how we may collect, hold, use, disclose, secure, and manage personal information collected through the website or website-related communications.

7.1 Personal information we may collect

Depending on how you interact with us, we may collect:

• your name;
• business or organisation name;
• role or position;
• email address;
• phone number;
• location or service area;
• enquiry details;
• information you submit through website forms;
• appointment or consultation details;
• communications with us;
• marketing preferences;
• billing or administrative information;
• website usage data;
• technical information such as IP address, device type, browser type, referring pages, pages visited, date/time of visit, and interaction data;
• documents, screenshots, links, evidence, logs, or other material you choose to provide.

For investigations, cybersecurity, digital evidence, incident response, or intelligence-related matters, we may also collect information that is necessary to assess, scope, quote, verify, or deliver services. This may include information about systems, accounts, incidents, online activity, digital assets, evidence sources, persons of interest, organisations, devices, networks, public records, or other matter-specific material.

7.2 Sensitive information

Some matters may involve sensitive information. This may include information about health, biometrics, identity documents, criminal history, legal matters, employment issues, financial circumstances, online harm, family safety, security incidents, or allegations involving other people.

We only collect sensitive information where it is reasonably necessary for our functions or activities and where we have a lawful basis to do so, such as consent, legal authority, contractual necessity, a permitted general situation, a permitted health situation, or another basis allowed by law.

7.3 How we collect information

We may collect information:

• directly from you;
• when you complete a form, call us, email us, book a consultation, or otherwise contact us;
• from your authorised representative;
• from clients who instruct us;
• from documents or files provided to us;
• from public sources;
• from commercial, technical, investigative, cybersecurity, or open-source intelligence tools where lawful and appropriate;
• from service providers that support our website or business systems;
• through cookies, analytics, logs, and website security tools;
• during the assessment, quoting, onboarding, delivery, or closure of a matter.

Where practical, we collect personal information directly from the person concerned. In some investigation, cybersecurity, legal, insurance, fraud, safety, or evidence-related contexts, it may be necessary or lawful to collect information from other sources.

7.4 Why we collect, use, and disclose information

We may collect, hold, use, and disclose information to:

• respond to enquiries;
• assess whether we can assist;
• verify identity, authority, conflict, scope, and legitimacy of requests;
• provide quotes, proposals, consultations, and services;
• manage client relationships;
• conduct authorised investigations, intelligence work, cybersecurity assessments, evidence capture, reporting, and related professional services;
• preserve evidence integrity and maintain records;
• communicate with clients, representatives, suppliers, and service providers;
• manage billing, accounts, insurance, audits, and business administration;
• improve our website, systems, services, and communications;
• protect our website, systems, clients, staff, and business from misuse, fraud, cyber threats, or unlawful activity;
• comply with legal, regulatory, contractual, professional, insurance, or evidentiary obligations;
• respond to subpoenas, warrants, notices, court orders, regulator requests, law enforcement requests, or other lawful requirements;
• establish, exercise, or defend legal rights;
• send service updates or marketing communications where permitted by law.

We do not sell personal information.

7.5 Disclosure to third parties

We may disclose information where appropriate to:

• employees, contractors, consultants, analysts, investigators, technical specialists, and authorised personnel;
• clients and authorised representatives;
• legal, accounting, insurance, compliance, and professional advisers;
• IT, hosting, security, cloud, analytics, communications, CRM, payment, document management, and business support providers;
• subcontractors or specialist providers engaged for a matter;
• courts, tribunals, regulators, law enforcement, government agencies, or other bodies where required or authorised by law;
• another party where you have consented or where disclosure is necessary for the purpose for which the information was collected.

Where we use third-party service providers, we take reasonable steps to select providers that support appropriate confidentiality, privacy, and security standards.

7.6 Overseas disclosure

Cyberlutions operates in Australia, but some website, cloud, communications, analytics, cybersecurity, support, or professional tools may involve storage, processing, support access, or routing outside Australia.

Depending on the services used at the time, information may be disclosed to or processed in countries such as Australia, New Zealand, the United States, the United Kingdom, Canada, Singapore, member states of the European Union, or other jurisdictions where our service providers or their infrastructure operate.

Before publishing this section, Cyberlutions should confirm the current countries used by its hosting, email, CRM, analytics, ticketing, cloud storage, security, and payment providers.

7.7 Security of personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, unauthorised modification, and unauthorised disclosure.

Security measures may include access controls, authentication, least-privilege permissions, encryption where appropriate, secure storage, logging, monitoring, vendor review, staff training, confidentiality obligations, incident response processes, backup controls, and retention management.

No website, email, internet transmission, or electronic storage method is completely secure. You should avoid submitting highly sensitive material through general website forms unless we have provided a secure or agreed method for doing so.

7.8 Data retention

We retain information for as long as reasonably necessary for the purpose for which it was collected, including service delivery, legal compliance, insurance, contractual obligations, evidence integrity, dispute management, taxation, business records, cybersecurity, and audit purposes.

When information is no longer required, we take reasonable steps to securely delete, destroy, archive, or de-identify it, unless we are required or permitted to retain it.

7.9 Access and correction

You may request access to personal information we hold about you. You may also ask us to correct information you believe is inaccurate, out of date, incomplete, irrelevant, or misleading.

We may need to verify your identity before responding. In some cases, we may refuse access or correction where permitted or required by law, including where access could prejudice an investigation, breach confidentiality, reveal information about another person, compromise legal privilege, affect security, or interfere with lawful processes.

7.10 Privacy complaints

If you have a privacy concern, contact us using the details below. Please include enough information for us to understand and assess your concern.

We will review privacy complaints and respond within a reasonable time. Where appropriate, we may ask for further information, investigate the issue, take corrective action, or explain why a request cannot be fulfilled.

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

7.11 Data breaches

If we become aware of a suspected data breach involving personal information, we will assess the incident and take appropriate steps to contain, investigate, remediate, and notify where required by law.

Where required under Australia's Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner if an eligible data breach is likely to result in serious harm.

This website may use cookies, pixels, tags, logs, analytics tools, security tools, or similar technologies to operate the website, protect it, improve performance, understand visitor behaviour, and support communications.

Cookies may be used for:

• essential website functionality;
• security and fraud prevention;
• performance and diagnostics;
• analytics and website improvement;
• remembering preferences;
• marketing or remarketing, where enabled and lawful.

You can manage cookies through your browser settings. Blocking some cookies may affect website functionality.

Where a separate Cookie Policy is available, it should be read together with this Website Policy.

We may send marketing or service-related communications where permitted by law. You can unsubscribe from marketing communications at any time using the unsubscribe link or instructions provided, or by contacting us.

Australian spam rules generally require commercial electronic messages to have consent, identify the sender, include contact details, and provide an easy unsubscribe method.

Transactional, operational, legal, security, billing, or service-related messages may still be sent where necessary.

Cyberlutions may use technical tools, automation, analytics, security systems, or specialist software to support website security, triage, service delivery, investigation workflows, cybersecurity analysis, quality control, and business administration.

We do not use website visitor information to make fully automated decisions that produce legal or similarly significant effects about individuals.

Where AI-assisted or automated tools are used in client work, their use should be appropriate to the engagement, subject to human review where required, and managed consistently with confidentiality, security, evidence integrity, and applicable law.

Confidential client information, sensitive evidence, or protected matter data should not be entered into public AI tools unless authorised and risk-assessed.

If you believe you have identified a security issue affecting this website, please report it responsibly.

Do not:

• exploit the issue;
• access, copy, delete, modify, or disclose data;
• interrupt services;
• conduct denial-of-service testing;
• use social engineering;
• test third-party systems without permission;
• publicly disclose the issue before Cyberlutions has had a reasonable opportunity to assess it.

Send security reports to: cyber.sec@cyberlutions.com.au Suggested subject line: Website Security Report

Unless expressly agreed in writing, Cyberlutions does not operate a public bug bounty program and does not authorise unsolicited penetration testing, scanning, exploitation, or security testing of its systems.

Cyberlutions may handle confidential, sensitive, privileged, operational, or evidentiary information. Website enquiries and general communications should not include highly sensitive material unless necessary and unless a secure transfer method has been agreed.

Operational, investigative, cybersecurity, intelligence, or evidence-handling practices may be governed by separate policies, procedures, client agreements, lawful authority, professional obligations, or confidentiality requirements.

Nothing in this Website Policy requires Cyberlutions to disclose operational methods, security controls, investigation techniques, confidential client information, privileged material, or information that could compromise safety, evidence, security, legal obligations, or active matters.

Nothing in this policy excludes, restricts, or modifies any rights, remedies, guarantees, warranties, or protections that cannot lawfully be excluded under the Australian Consumer Law or other applicable laws.

To the maximum extent permitted by law, Cyberlutions excludes liability for indirect, incidental, consequential, special, exemplary, or punitive loss arising from use of this website.

We may update this Website Policy from time to time to reflect changes in our website, services, operations, technology, legal obligations, or business practices.

The updated version will be published on this page with a revised effective date or review date.

For website, privacy, security, or policy enquiries, contact:

Cyberlutions® Operated by K&D BUSINESS GROUP PTY LTD ABN: 53 169 958 356 Email: cyber.sec@cyberlutions.com.au Website: cyberlutions.com.au

TerraByte Digital Terabyte Industries (Australia) Pty Limited t/as TerraByte Digital, ACN 689 265 594 Email: service@terrabytedigital.com Phone: 1800 889 713 Website: terrabytedigital.com