This policy explains how Digital Greenhouse Pty Ltd, the operator of Huntress Sydney, collects, uses, shares and protects personal information through huntress-sydney.com.au, and when you contact us about Huntress security services. We use the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) as our guide.
Who we are
Huntress Sydney is operated by Digital Greenhouse Pty Ltd (ABN 92 148 046 799), a Sydney IT consultancy that resells and supports Huntress security products. In this policy, “we”, “us” and “our” mean Digital Greenhouse Pty Ltd.
We’re separate from Huntress Labs, Inc., which makes the Huntress products. “Huntress” is a trademark of Huntress Labs, Inc.
What this policy covers
This policy covers this website and the personal information we handle when you email us, or when we quote for or provide Huntress services to your business. Security data collected by the Huntress software is handled by Huntress Labs, as explained below.
You can browse this website without telling us who you are. If you contact us, you can use just a first name, but we need a working email address to reply.
Personal information we collect
Depending on how you deal with us, we may collect the following. We don’t ask for sensitive information such as health details, so please leave it out of messages unless it’s needed.
- Contact and quote form: your name, email address, message and consent to be emailed back, plus your business name, phone number, approximate number of users and topic if you add them. When you send the form, our server adds the date and time, your IP address and your browser details to the email we receive.
- Emails: your email address and whatever you send us. If you contact us about an active security incident, that may include details of your systems and what’s happening.
- Customer details: if your business becomes a customer, the contact and billing details we need to set up, support and invoice the service, and the names or email addresses of staff included in monitoring or security awareness training, and any personal information in your systems, Huntress alerts or backups that we need to handle to investigate alerts, respond to incidents or restore data.
- Website use: information collected by Google Analytics and Google Fonts (see “Cookies, local storage and analytics”).
- Server logs: like most websites, our web host may keep standard server logs, such as your IP address, browser type and the pages you request.
- Pricing calculator: it runs in your browser, and the device count you enter isn’t sent to us.
How we use personal information
We use personal information only for the purpose we collected it for, or a related purpose you’d reasonably expect, unless you agree or the law requires or allows otherwise. We use it to:
- reply to your enquiry and prepare a quote
- set up, manage, support and invoice Huntress services, including monthly reports
- help you respond to security incidents
- keep business, tax and accounting records
- run and protect the website, including filtering spam and understanding how it’s used
Huntress Labs and your security data
Huntress works through a small agent installed on each of your computers. The agent looks for suspicious behaviour and sends security information to Huntress Labs, Inc., a United States company, for review by its security operations centre. If you use security awareness training, Huntress Labs also holds your staff’s names, email addresses and training and phishing-simulation results. Huntress Labs holds this data on its own platform and handles it under its own privacy policy, available on huntress.com.
As your reseller, we use the Huntress dashboard to add and remove users, deal with alerts and prepare your monthly report. If you use security awareness training, the report can show which staff are still failing phishing simulations. If you stop using us, we can hand administration of your Huntress account over to you.
Who we share it with
We don’t sell, rent or trade personal information. We share it only with service providers that help us run our business, when you ask us to, or when the law requires or allows it, for example in response to a court order. These are:
- Google (Google Workspace): our email service. Contact-form messages and emails to info@digitalgreenhouse.com.au are delivered to, and stored in, our Google Workspace mailbox.
- Google (Google Analytics and Google Fonts): website statistics and web fonts (see “Cookies, local storage and analytics”).
- VentraIP: our Australian web host. It runs this website, and its mail server delivers quote-form messages to our mailbox (the host may briefly keep a copy).
- Huntress Labs, Inc.: provides the Huntress services. For customers, we share the details needed to set up and manage your Huntress account.
- Stripe: processes the payment if you choose to pay an invoice by credit card.
- Backup platforms: if you add managed backup, your backup data is stored with the platform used, such as Microsoft Azure, Datto or Acronis.
Overseas disclosure
Our website is hosted in Australia. Google stores and processes information in the United States and other countries, so information handled through Google Workspace, Google Analytics and Google Fonts is likely to be stored or accessed outside Australia.
Huntress Labs is a United States company, so security data from the Huntress agent, and staff details and results from security awareness training, are likely to be stored or accessed in the United States. Stripe may also process card payments in the United States and other countries, and where backup data is stored depends on the backup service and how it’s set up.
Cookies, local storage and analytics
We use Google Analytics 4 to see, in aggregate, how people use this website. It sets cookies (usually named _ga) to tell visits apart and collects details such as the pages you view, the site that referred you, your device and browser, and your approximate location based on your IP address. Our code doesn’t send what you type into forms to Google Analytics.
Pages also load web fonts from Google Fonts, so your browser sends your IP address and browser details to Google when it fetches them.
Our own code doesn’t set cookies or save anything in your browser’s storage.
To opt out of Google Analytics, install Google’s opt-out browser add-on, block analytics cookies in your browser or use a content blocker.
Direct marketing
We never sell personal information, and we don’t have a marketing mailing list. If we ever send marketing emails, they’ll only go to people who agree to receive them, and every email will include an easy way to unsubscribe.
Security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. No online system is completely secure, so we can’t guarantee the security of information sent to us over the internet. These steps include:
- offering the website over encrypted HTTPS connections
- emailing form enquiries to our mailbox rather than saving them in a website database
- checking form input and filtering automated spam
- using established providers for hosting and email
How long we keep it
We keep personal information only for as long as we need it for the purposes in this policy or as required by law, for example tax and business record-keeping obligations. When we no longer need it, we take reasonable steps to delete or de-identify it.
To ask us to delete information we hold about you, email us. We’ll tell you what we can delete and anything we need to keep.
Accessing and correcting your information
To ask for access to the personal information we hold about you, or to have it corrected, email info@digitalgreenhouse.com.au. We may need to confirm your identity first, and there’s no charge to make a request. We aim to respond within 30 days. If we refuse, we’ll explain why in writing and tell you how to complain.
Making a complaint
If you’re concerned about how we’ve handled your personal information, please contact us first (details below) and tell us what happened. We’ll look into it and aim to reply in writing within 30 days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
Changes to this policy
We may update this policy when our website, services or providers change. The current version, with the date it was last updated, will always be on this page.
Contact us
For privacy questions, requests or complaints, contact Digital Greenhouse Pty Ltd:
- Email: info@digitalgreenhouse.com.au
- Post: PO Box 532, Gordon NSW 2072