Your privacy.
Our responsibility.

1. Introduction

AusHosts (“we”, “us”, “our”) is an IT managed services provider operating in Australia. We are committed to protecting the privacy of our clients, website visitors, and any individual whose personal information we handle in the course of providing our services.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It also reflects our obligations under the Privacy and Other Legislation Amendment Act 2024, including the statutory tort for serious invasions of privacy that commenced on 10 June 2025.

By visiting our website at www.aushosts.com.au, submitting an enquiry, or engaging our services, you agree to the collection and use of your information as described in this Privacy Policy.

We encourage you to read this policy carefully and to review it periodically. The current version is always available at www.aushosts.com.au/privacy-policy.

2. Who We Are

Our contact details are:

• Website: www.aushosts.com.au
• Email: [email protected]
• Director: Jayden Harvey

If our business structure or contact details change, we will update this Privacy Policy and notify clients accordingly in accordance with clause 19A of our service agreements.

3. What Personal Information We Collect

We collect personal information that is reasonably necessary to provide our IT managed services and operate our business. This includes:

3.1 Identity and Contact Information

• Full name
• Business name and ABN / ACN
• Email address
• Phone number
• Business address

3.2 Login Credentials and System Access Information

• Usernames and temporary passwords for managed accounts and systems
• Remote access credentials for managed devices
• Microsoft 365 and other platform login details
• Network and system configuration details

All credentials are stored in a secure, encrypted password manager protected by a master password and Multi-Factor Authentication (MFA). Access is restricted to authorised AusHosts technicians only.

3.3 Device and System Data

• Device identifiers, operating system versions, and hardware details
• Software inventory and licence information
• Network configuration, IP addresses, and system logs
• Performance and health monitoring data collected via our remote management platform (Action1)
• Security event and incident logs

3.4 Business Information

• Details about your IT environment, systems, and infrastructure
• Franchise and business structure information where relevant
• Service history and support ticket records

3.5 Billing and Payment Information

• Billing contact details and business address
• Invoice and payment records

We use FOSSBilling integrated with Stripe for invoicing and payment processing. AusHosts does not store your full credit card or payment card details on our own systems. Payment card information is handled directly by Stripe in accordance with Stripe’s Privacy Policy. We receive only tokenised payment references and basic transaction confirmation.

3.6 Website and Enquiry Information

• Information submitted via our website contact form, including name, email address, and enquiry details
• Website usage data such as pages visited, browser type, and general location (collected via standard web analytics tools)
• IP addresses and device information collected automatically when you visit our website

4. How We Collect Personal Information

We collect personal information in the following ways:

• Directly from you when you submit an enquiry via our website contact form or contact us by phone or email
• When you enter into a service agreement with us and provide details as part of the onboarding process
• Automatically through our remote monitoring and management platform (Action1) when we manage your devices and systems
• Through our Microsoft 365 environment in the course of providing and managing services
• Through our billing and invoicing platform (FOSSBilling / Stripe) when processing payments
• Indirectly from third parties such as your franchisor or other IT providers where relevant and authorised by you

5. Why We Collect and Use Personal Information

We collect and use personal information for the following purposes:

• To provide IT managed services, remote monitoring, maintenance, and support under our service plans
• To manage and administer your account, including billing, invoicing, and renewals
• To communicate with you about your services, including fault notifications, updates, and service changes
• To generate and store secure credentials for your managed accounts and systems
• To respond to enquiries submitted through our website or by other means
• To comply with our legal and contractual obligations
• To protect the security and integrity of your IT systems and our own infrastructure
• To improve our services and internal processes

We will only use your personal information for the purpose for which it was collected, or a directly related purpose, unless you consent to another use or we are required by law to use it otherwise.

6. How We Store and Protect Your Information

We take the security of your personal information seriously and implement the following measures:

6.1 Password Manager

All credentials and sensitive access information are stored in a secure, encrypted password manager (specifically BitWarden). The password manager itself is protected by a strong master password and Multi-Factor Authentication (MFA), and access is restricted to authorised AusHosts personnel only.

6.2 Microsoft 365

General business data, correspondence, and service records are stored within our Microsoft 365 environment. Our Microsoft 365 tenancy is secured with Multi-Factor Authentication (MFA) on all accounts.

6.3 Action1 (Remote Management Platform)

Device monitoring and management data is processed through Action1, our remote monitoring and management (RMM) platform. Action1’s data handling and security practices are governed by their own privacy policy, available at www.action1.com. We access this data only as needed to provide the Services.

6.4 Stripe and FOSSBilling

Payment processing is handled by Stripe. Billing records are maintained in FOSSBilling.

6.5 General Security Practices

• Access to client data is restricted to authorised personnel on a need-to-know basis
• We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure

While we take these steps, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

7. Disclosure of Personal Information

We do not sell, rent, or trade your personal information. We may disclose your personal information in the following limited circumstances:

7.1 Third-Party Service Providers

We use the following third-party platforms that may process your personal information as part of delivering our services:

• Stripe — payment processing (stripe.com/au/privacy)
• Action1 — remote monitoring and management (action1.com/privacy)
• Microsoft 365 — cloud-based business operations and data storage

These providers are engaged solely to assist us in providing our services and are not authorised to use your information for any other purpose.

7.2 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect the safety of any person or to prevent or report suspected unlawful activity.

7.3 Business Transfers

If AusHosts transitions to a new structure or otherwise changes its business entity, client information will transfer to the new entity as part of that transition. You will be notified of any such change in accordance with our service agreement.

8. Overseas Disclosure

Some of the third-party platforms we use (including Microsoft, Stripe, and Action1) may store or process data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure those providers handle your information in a manner consistent with the Australian Privacy Principles. By using our services, you consent to your information being processed in this way.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve your browsing experience and collect basic analytics data such as pages visited and time spent on site. This data is collected in aggregate and is generally not linked to individual identities.

You can disable cookies through your browser settings, although this may affect the functionality of our website.

10. Data Retention

We retain personal information for as long as necessary to provide our services and meet our legal and contractual obligations.

11. Complaints

If you believe we have mishandled your personal information or breached your privacy, please contact us in the first instance at [email protected]. We take privacy complaints seriously and will investigate and respond.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version is always available at www.aushosts.com.au/privacy-policy. We encourage you to review this page periodically. Your continued use of our website or services after any update constitutes acceptance of the revised policy.

13. Contact Us

For any privacy-related questions, access requests, or concerns, please contact:

• Email: [email protected]
• Website: www.aushosts.com.au

This Privacy Policy was prepared in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the Privacy and Other Legislation Amendment Act 2024. AusHosts recommends seeking independent legal advice if you have specific concerns about your privacy rights.