Privacy Policy

This Privacy Policy explains how GABEY Consulting Pty Ltd collects, uses, stores, protects, and manages personal information in connection with the DotShield® Partner Portal, partner enquiries, licence enquiries, NDA requests, pilot discussions, support requests, and related commercial engagement. DotShield® is a registered trade mark of GABEY Consulting Pty Ltd; references to the DotShield® Partner Portal are references to a service operated by GABEY Consulting Pty Ltd.

1. Purpose of this policy

This policy supports open and transparent handling of personal information. It applies to personal information collected through the DotShield® Partner Portal, related account features, contact forms, support forms, licence enquiries, NDA enquiries, pilot requests, and partner-management processes.

2. Information we may collect

We may collect personal information including:

• name, job title, organisation, department, and business contact details;
• email address, phone number, postal address, country, and region;
• partner portal registration details and account identifiers;
• platform enquiry, request, order, status, billing, or administrative records;
• support-ticket details, contact-form messages, and business correspondence;
• NDA request status, partner approval status, licence enquiry status, and pilot request status;
• login, security, audit, IP address, browser, device, and access-log information;
• information required to assess eligibility for partner, client, pilot, licence, or restricted-resource access.

We do not intentionally collect sensitive information unless it is necessary for a specific engagement, required or permitted by law, or voluntarily provided by the individual or organisation. Where sensitive information is received, we will handle it on a need-to-know basis and apply reasonable controls appropriate to the nature of the information. Where the information is not required to be retained in identifiable form, it may be redacted, minimised, de-identified, desensitised, or securely destroyed before transfer to, or processing within, offsite record-management systems. Where information must be retained for legal, security, audit, contractual, dispute-management, NDA, licence, or legitimate business reasons, it may be retained in controlled records with appropriate access restrictions.

3. How we collect information

We may collect information when you:

• submit a contact, support, partner, licence, or NDA enquiry form;
• create an account on the partner portal;
• request access to restricted partner material;
• submit a platform enquiry, product request, pilot request, licence request, or service request;
• communicate with us by meeting, phone, email, support ticket, or other business channel;
• interact with our websites, login pages, portal pages, or support systems.

4. Why we collect and use information

We collect and use information to:

• assess DotShield® partner, licence, NDA, support, or commercial enquiries;
• manage partner registration, account access, and approval workflow;
• provide restricted resources only to authorised users;
• process platform enquiries, product requests, pilot requests, licence requests, or service requests;
• communicate with clients, partners, suppliers, prospective partners, and approved users;
• maintain security, auditability, and access-control records;
• investigate misuse, unauthorised access, fraud, security incidents, or policy breaches;
• comply with legal, regulatory, tax, accounting, contractual, and dispute-management obligations;
• improve the website, portal, support process, and commercial engagement workflow.

Registration does not automatically create an approved partner, client, licence, NDA, or commercial relationship. Restricted DotShield® material is made available only after review, approval, and any required commercial or confidentiality steps.

5. Partner portal access levels

The DotShield® Partner Portal may use staged access levels to separate ordinary registration from approved access.

Access Level	Purpose
Public visitor	General website and public enquiry access.
Partner applicant	Initial registration or expression of interest. No restricted material is granted automatically.
NDA pending	NDA review, identity review, commercial review, or approval workflow in progress.
NDA approved	Access to approved NDA-controlled material, subject to role, scope, and approval.
Pilot partner	Access to pilot-specific material and engagement workflow, where approved.
Commercial partner	Access to commercial partner material, subject to the relevant agreement and approval.
Internal administrator	Administrative access for authorised GABEY Consulting Pty Ltd personnel or approved service providers.

6. Platform and account information

The Partner Portal may leverage GABEY-developed or third-party platforms to manage accounts, partner-request products, licence-request products, NDA request workflow, support requests, resource access, billing records, and related administrative data.

GABEY platform records may include account details, order or request history, billing details, status updates, administrative notes, and related correspondence. These records may be retained for security, legal, commercial, tax, audit, and relationship-management purposes.

7. Sensitive information and restricted DotShield® material

The Partner Portal is not intended to operate as the primary storage location for sensitive NDA packages, patent-sensitive architecture files, cryptographic material, evidentiary records, production system secrets, or restricted DotShield® technical material.

Where sensitive personal information or restricted engagement material is received, it will be assessed according to the purpose for which it was provided. Information that is not required in identifiable form may be redacted, minimised, de-identified, desensitised, or securely destroyed before transfer to, or processing within, offsite record-management systems. Where restricted DotShield®, ConveyanceShield™, Networthy™, SCE Node, HVRC, architecture, patent-sensitive, technical, evidentiary, cryptographic, or operational material is required for an approved engagement, it may be handled through controlled external repositories, encrypted containers, offsite storage, counsel-reviewed document release channels, or other approved secure methods. The portal may retain metadata about the request, approval status, access decision, correspondence, or engagement record, but sensitive document packages are not intended to be stored in the public partner portal unless specifically approved for that purpose.

8. Security of information

Protective measures

We apply appropriate technical and organisational measures to protect information handled through the Partner Portal. These include access controls, role-based restrictions, administrative safeguards, audit logging, and continuous security monitoring. Partner, administrative, and restricted-resource accounts may be required to use multi-factor authentication or equivalent account-protection measures before accessing restricted material.

Monitoring and enforcement

GABEY Consulting Pty Ltd operates active detection and monitoring capabilities to identify hostile activity directed at this portal, including reconnaissance scanning, credential brute-forcing, and denial-of-service attempts. Where such activity is detected, we reserve the right to investigate its origin and transit path, to report it to relevant upstream network operators, internet service providers, and telecommunications carriers, and to require that appropriate controls be applied to traffic reaching our services. We reserve the right to pursue any legal or regulatory remedies available to us, to request the implementation of security controls to safeguard the services and network connections utilised by GABEY Consulting Pty Ltd, and to block, suspend, or terminate access from implicated sources without prior notice.

Your responsibilities

No website, portal, or electronic communication system can be guaranteed to be completely secure. You are responsible for keeping your login credentials confidential and must notify us promptly if you suspect unauthorised access to, or misuse of, your account.

9. Disclosure of information

We may disclose information to:

• employees, contractors, professional advisers, or service providers who support our business;
• website, hosting, email, security, payment, accounting, CRM, or support providers;
• legal, accounting, insurance, intellectual-property, or regulatory advisers;
• law enforcement, regulators, courts, or government authorities where required or permitted by law;
• counterparties involved in a partner, pilot, licence, support, or commercial engagement.

We do not sell personal information to advertisers.

10. Overseas access or disclosure

Some service providers used for hosting, email, security, analytics, payment, support, or administration may process or store information outside Australia. Where overseas service providers are used, we aim to use reputable providers and apply reasonable controls appropriate to the nature of the information and the engagement.

11. Cookies, analytics, and logs

Our websites and portals may use cookies, server logs, security logs, analytics tools, and similar technologies to operate the website, support login sessions, detect misuse, understand website performance, and maintain security and audit records.

You may disable cookies in your browser, but some portal features may not work correctly.

12. Retention of information

We retain information for as long as reasonably required for the purpose for which it was collected, including commercial, security, legal, tax, accounting, audit, relationship-management, dispute-resolution, and regulatory purposes.

Partner portal records may be retained for longer than ordinary website enquiries because they may relate to partner approval, NDA access, restricted-resource release, licence enquiries, pilot discussions, commercial engagement history, or access-control records.

13. Access, correction, and deletion requests

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading. We may need to verify your identity before responding.

You may request deletion or de-identification of personal information where appropriate. However, we may retain information where required or permitted for legal, commercial, tax, audit, security, investigation, dispute-management, NDA, licence, or legitimate business reasons.

If an account is erased or access is revoked, access to restricted downloads, partner resources, portal material, or approval status may also be removed.

14. Data breaches

If we become aware of a data breach affecting personal information, we will assess the incident and take reasonable steps to contain, investigate, and respond.

Where the Privacy Act applies and a breach is likely to result in serious harm, notification obligations may apply under the Notifiable Data Breaches scheme.

15. Automated or assisted decisions

We may use automated or semi-automated systems to assist with website security, spam prevention, access control, risk indicators, workflow triage, or portal administration. Final approval for restricted DotShield® partner, NDA, pilot, or commercial access is not granted solely because a user creates an account or submits a form.

16. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be published on our website or partner portal with a revised effective date.