Introduction
Vidette Pty Ltd (ABN 11 643 851 843) (Vidette, we, us, our) is committed to protecting the privacy of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, hold, use, and disclose personal information through our website and related enquiry and prospective partner application processes. It also explains how individuals may access, correct, or make a complaint about personal information we hold about them.
Visitors accessing this website from New Zealand or Singapore should also read Section 12 (New Zealand Visitors) and Section 13 (Singapore Visitors), which describe our obligations and your rights under privacy laws in those jurisdictions.
1. About Vidette
Vidette Pty Ltd (ABN 11 643 851 843) is an Australian company. Our registered office is located at Suite 30, Level 1, Tower A, 888 Pittwater Road, Dee Why NSW 2099, Australia. Postal correspondence may be directed to PO Box 50, Dee Why NSW 2099, Australia.
Vidette is the governing entity of the Vidette framework — a structured alliance of independent Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) operating across Australia and New Zealand. Head Office and governance for the Vidette framework is located in Australia.
2. Personal information we collect
We may collect the following categories of personal information through this website:
2.1 Contact and enquiry submissions
- Full name
- Email address
- Phone number
- Company or organisation name
- Content of your enquiry or message
2.2 Prospective partner onboarding applications
- Business name and registration details (including ABN, NZBN, or Singapore UEN as applicable)
- Registered business address
- Names and contact details of directors, key personnel, and nominated representatives
- Business description and service capability information
- Insurance coverage details and policy references
- Compliance certifications and security posture information
We do not intentionally collect sensitive information (as defined in section 6 of the Privacy Act 1988 (Cth)) through this website. Where sensitive information is included in a free-text submission, we will handle it in accordance with Australian Privacy Principle 3.3.
We do not knowingly collect personal information from persons under 18 years of age.
3. How we collect personal information
We collect personal information directly from you when you:
- Submit a contact or enquiry form on this website
- Submit a prospective partner application
We may also collect limited aggregated technical information automatically when you visit our website through our web analytics service. See Section 8 (Web Analytics) for further detail.
We collect personal information only by lawful and fair means, and not in an unreasonably intrusive way, in accordance with Australian Privacy Principle 3.
4. Purposes for collection, use, and disclosure
We collect, hold, use, and disclose personal information for the following purposes:
- To respond to your enquiry or contact submission
- To assess and process prospective partner applications
- To communicate with you about the Vidette framework, membership, and services
- To maintain records of enquiries and applications for governance and audit purposes
- To improve our website and associated services
- To comply with applicable legal, regulatory, and governance obligations
We will not use or disclose personal information for a purpose other than the primary purpose of collection, except where:
- You have consented to the secondary use or disclosure
- The secondary use or disclosure is directly related to the primary purpose and you would reasonably expect it
- The secondary use or disclosure is required or authorised by or under an Australian law or a court or tribunal order
- Another permitted general situation or exception under the APPs applies
5. Disclosure of personal information
We may disclose personal information to:
- Vidette framework members, where relevant to the assessment of a partner application or to a service referral, and only subject to appropriate controls to protect that information
- Our professional advisers (legal, financial, and IT) where necessary for the conduct of our business and governance obligations
- Government agencies, regulators, and law enforcement bodies, where required or authorised by applicable law
- Third-party service providers engaged to assist in the operation of this website and the management of records, including cloud hosting providers and email service providers, subject to contractual obligations requiring the protection of personal information
We do not sell personal information to third parties. We do not disclose personal information to third parties for the purpose of direct marketing by those third parties.
6. Overseas disclosure
Where we disclose personal information to overseas recipients — including Vidette framework members, professional advisers, or cloud service providers located outside Australia — we take reasonable steps to ensure those recipients do not breach the APPs in relation to that information, consistent with Australian Privacy Principle 8.1.
Countries to which personal information may be disclosed include:
- New Zealand — Vidette framework members and associated service operations
- United States — cloud infrastructure and network service providers, including Cloudflare, Inc., which operates our website's content delivery network and security infrastructure
Australia has determined that New Zealand provides substantially similar privacy protections to Australia's APPs. For disclosures to other countries, we rely on contractual protections or other appropriate mechanisms to ensure that personal information receives adequate protection.
Where an exception under APP 8.2 applies to a specific overseas disclosure (for example, where the disclosure is required by Australian law, or the individual has consented), we will rely on that exception and record it accordingly.
7. How we hold and protect personal information
Personal information collected through this website is held in electronic form in secure systems operated or contracted by Vidette. We take reasonable steps to protect personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure, consistent with Australian Privacy Principle 11.
When personal information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by applicable law to retain it, we will take reasonable steps to destroy or de-identify it.
For further detail on our security arrangements, please refer to our Security Policy, also published on this website.
8. Web analytics
This website uses Cloudflare Analytics, a privacy-focused web analytics service provided by Cloudflare, Inc. (United States).
Cloudflare Analytics is designed to measure website traffic without collecting personal information and without using tracking cookies. It does not track individual users across sessions or across other websites. The data collected is aggregated and statistical in nature, and includes information such as:
- Number of page visits and unique visitors (aggregated)
- Pages viewed
- Referring sources (aggregated)
- Device type and browser type (aggregated)
- Approximate geographic location at country and region level (aggregated)
Because Cloudflare Analytics does not use cookies for analytics purposes and does not collect or process personal information, it does not give rise to individual tracking concerns and no cookie consent mechanism is required for its operation on this website.
Cloudflare also operates as the content delivery network (CDN) and security layer for this website. In that capacity, network traffic to and from this website passes through Cloudflare's infrastructure, which may be located in multiple countries including the United States. Cloudflare's handling of data in this context is governed by its Privacy Policy, available at www.cloudflare.com/privacypolicy.
You may visit this website without any impact from analytics-related cookies, as none are set by our analytics service.
9. Access and correction
You have the right to request access to personal information we hold about you, and to request correction of that information if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading, consistent with Australian Privacy Principles 12 and 13.
To make an access or correction request, contact us using the details in Section 15. We will:
- Acknowledge your request within 5 business days
- Respond substantively within 30 calendar days, or notify you promptly of any delay and its reason
- Ask you to verify your identity before providing access or making a correction to protect against unauthorised disclosure
We may decline to provide access or make a correction in circumstances permitted under the APPs — for example, where access would unreasonably affect the privacy of another individual, or where the information is subject to legal professional privilege. We will provide written reasons for any refusal.
10. Notifiable data breaches
Where we have reasonable grounds to believe that a data breach has occurred that is likely to result in serious harm to any individual, we will:
- Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
- Notify affected individuals, providing a description of the breach, the kinds of information involved, the likely consequences, and the steps taken or proposed to be taken in response
These obligations are consistent with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth).
11. Complaints
If you believe we have handled your personal information in a manner that does not comply with the APPs or this Privacy Policy, you may lodge a complaint by contacting us using the details in Section 15.
We will:
- Acknowledge your complaint within 5 business days
- Investigate and respond substantively within 30 calendar days
- Notify you promptly of any delay and the reason for it, if we are unable to respond within 30 days
If you are not satisfied with our response, you may escalate your complaint to:
- Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au | 1300 363 992
12. New Zealand visitors
If you are located in New Zealand or submit personal information to us from New Zealand, the Privacy Act 2020 (NZ) and the Information Privacy Principles (IPPs) may apply to the handling of your personal information, in addition to the Australian Privacy Principles.
Your rights under the Privacy Act 2020 (NZ) include:
- The right to request access to personal information we hold about you (section 44, Privacy Act 2020 (NZ))
- The right to request correction of that information (section 52, Privacy Act 2020 (NZ))
- The right to complain to the Office of the New Zealand Privacy Commissioner: www.privacy.org.nz | 0800 803 909
Where a privacy breach is a notifiable privacy breach under Part 7 of the Privacy Act 2020 (NZ) — that is, where the breach is likely to cause serious harm to any New Zealand individual whose information is involved — we will notify the New Zealand Privacy Commissioner and the affected individual(s) as required.
13. Singapore visitors
If you are located in Singapore or submit personal information to us from Singapore, the Personal Data Protection Act 2012 (Singapore) (PDPA) may apply to the collection and handling of your personal data.
Vidette Pty Ltd is an Australian company with its Head Office in Australia and no registered entity in Singapore. To the extent the PDPA applies to the collection of personal data from individuals in Singapore through this website, we handle that data consistently with applicable PDPA obligations, including:
- Notifying you of the purposes for which your personal data is collected at or before the point of collection
- Collecting, using, and disclosing your personal data only for the purposes notified to you, or to which you have consented
- Making reasonable security arrangements to protect your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks
- Retaining your personal data only as long as necessary to fulfil the identified purpose or as required by applicable law
- Responding to requests for access to or correction of your personal data, subject to applicable exceptions
For data breach notification, where a breach involving personal data of Singapore individuals constitutes a notifiable data breach under Part VIA of the PDPA, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required. The PDPC can be contacted at www.pdpc.gov.sg.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the Vidette framework. The current version of this Policy, with the date of last update, will be published on our website.
Material changes will be noted at the top of the Policy. We encourage you to review this Policy periodically.
15. Contact us
Privacy enquiries, access and correction requests, and complaints should be directed to:
Privacy Officer
Vidette Pty Ltd
Suite 30, Level 1, Tower A, 888 Pittwater Road, Dee Why NSW 2099, Australia
PO Box 50, Dee Why NSW 2099, Australia
Email: [email protected]
We will acknowledge all privacy enquiries within 5 business days.