Effective date: August 2026

Onsys Technologies Pty Ltd (ABN 49 602 081 005, ACN 602 081 005) (“Onsys”, “we”, “us”) is committed to protecting your privacy. This policy explains how we collect, hold, use and disclose personal information, and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

It applies to onsys.com.au and to the services we provide. By using this website or engaging us, you agree to the handling of your information as described here.

1. The information we collect

We only collect personal information that is reasonably necessary for our functions and activities.

When you contact us through this website

  • Identity and contact details — your name, email address, phone number and company name
  • Enquiry details — the service you are interested in and the message you send us
  • Marketing attribution — the referring website and any campaign parameters in the link you arrived through

When you use the chat assistant

  • Any name and email address you choose to provide
  • The content of your conversation
  • The page you opened the chat from, and your browser user-agent string
  • A one-way hash of your IP address. We do not store your raw IP address against a chat session.

When we deliver services to you

  • Business contact details for the people we work with at your organisation
  • Service records — tickets, incidents, change records and correspondence
  • Credentials for access to your systems, held under the terms of our engagement

We do not collect sensitive information as defined in the Privacy Act, and we do not collect government identifiers, through this website. We do not process card payments on this website.

2. How we collect it

We collect personal information directly from you — through our contact form, the chat assistant, email, phone or in the course of an engagement. Where it is reasonable and practicable, we collect it from you rather than from anyone else. If you provide us with personal information about another person, you must have their consent to do so.

3. Why we use it

  • To respond to your enquiry and provide a quote or proposal
  • To deliver, manage and support the services you engage us for
  • To manage our relationship with you, including billing and account administration
  • To improve our website, services and support
  • To send you service information, and marketing communications where you have consented
  • To meet our legal, regulatory and insurance obligations

4. Cookies and analytics

We keep tracking on this website deliberately minimal.

  • We do not use advertising or re-targeting cookies. We do not run Google Ads, Meta or LinkedIn tracking pixels on this site.
  • Analytics. We use Plausible Analytics, a privacy-focused service that measures aggregate traffic without cookies and without collecting personal information or building cross-site profiles.
  • Essential cookies. A session cookie and a CSRF-protection cookie are set only when a staff member signs in to our content management system. Ordinary visitors are not issued these cookies.
  • Spam protection. Cloudflare Turnstile runs on our contact form to distinguish humans from automated submissions.

You can block or delete cookies in your browser. Doing so will not affect your ability to browse this website.

5. Who we disclose information to

We do not sell your personal information. We disclose it only as follows:

  • Our people — Onsys employees and contractors who need it to do their job
  • Service providers — the suppliers listed in section 6, who host our infrastructure and operate parts of this website
  • Professional advisers — our lawyers, accountants, auditors and insurers, where relevant
  • Legal and regulatory bodies — where we are required or authorised by law to disclose
  • A successor — in the event of a sale, merger or restructure of our business, subject to confidentiality

6. Overseas disclosure

Some of your information is accessed or processed outside Australia. Before disclosing information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs.

  • Sri Lanka. Onsys operates a delivery centre in Colombo. Our offshore team members may access service records and correspondence in the course of delivering support, under the same confidentiality obligations as our Australian staff.
  • United States. If you use the chat assistant, the content of your messages is sent to OpenAI to generate a response. Do not enter confidential information, credentials or personal information about others into the chat.
  • Microsoft. We use Microsoft services to send transactional email and, where a chat conversation is escalated to a person, to route that conversation to our team in Microsoft Teams.
  • Cloudflare for spam protection, and Plausible Analytics (hosted in the European Union) for aggregate website statistics.

7. The chat assistant

Our website chat is answered in the first instance by an automated assistant that generates responses using artificial intelligence. Its answers may be incomplete or incorrect and are general information only — they are not advice, a quote, or a commitment by Onsys. You can ask at any time to be transferred to a person. Conversations are retained so we can follow up your enquiry and improve the service.

8. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encryption in transit, access controls and role-based permissions, hashed credentials, audit logging, and restricting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. How long we keep it

We retain personal information only as long as we need it for the purpose it was collected, to meet our legal and contractual obligations, and to resolve disputes. When it is no longer required we destroy it or de-identify it.

10. Data breaches

If we suffer an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

11. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within a reasonable period, normally 30 days. There is no charge for making a request, though we may charge a reasonable fee for the cost of providing access. If we refuse access or correction we will tell you why in writing.

12. Marketing and unsubscribing

We only send marketing communications where you have consented or where it is otherwise permitted under the Spam Act 2003 (Cth). Every marketing email includes an unsubscribe link, and you can opt out at any time by contacting us. Opting out of marketing does not stop service-related communications about work we are doing for you.

13. Complaints

If you believe we have breached the Australian Privacy Principles, contact our Privacy Officer using the details below. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

14. Children

Our website and services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Third-party websites

This website links to sites we do not control, including our own product sites and partner sites. We are not responsible for their privacy practices, and we encourage you to read their policies.

16. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The current version is always published on this page with its effective date.

17. Contact us

Privacy Officer, Onsys Technologies Pty Ltd
Level 1, 530 Little Collins Street, Melbourne VIC 3000
Email: privacy@onsys.com.au
Phone: 1800 431 416