Privacy policy

Plerion Pty Ltd ABN 86 654 628 841 with registered address Level 16, Tower 2 Darling Park, 201 Sussex Street, Sydney NSW 2000 (Plerion, we, us or our), understands that protecting your personal information is important. This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us when providing our “Plerion” software as a service, which enables you to assess the security posture of your accounts, workloads and environments, and our website (accessible at https://plerion.com) to you (Services) or when otherwise interacting with you.

Amendments

We may, at any time and at our discretion, vary this Privacy Policy by publishing the amended Privacy Policy on our website. We recommend you check our website regularly to ensure you are aware of our current Privacy Policy. In the event we make any significant changes to this Privacy Policy we will use our reasonable endeavours to inform you of such changes in advance in writing.

It is important that the personal information we hold about you is true, complete, accurate and current.  Accordingly, you must notify us of any changes to your personal information (for example, if you change your email address).

The information we collect

Personal information: is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.

The types of personal information we may collect about you include:

As a user of our software:

  • your name;
  • your employer and job title;
  • your contact details, including email address, mailing address, street address and/or telephone number;
  • your age and/or date of birth;
  • your preferences and/or opinions;
  • your credit card or other payment and bank account details (including through our third-party payment processor, if any);
  • information you provide to us in respect of our account recovery functions related to your account with us and the use thereof by you;
  • information you provide to us, including through feedback, customer surveys or otherwise;
  • details of services we have provided to you and/or that you have enquired about, and our response to you;
  • support requests submitted to us and our response to you;
  • information about your access and use of our Services, including through the use of Internet cookies, your communications with our online Services, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider;
  • your browser session and geo-location data, device and network information (including your IP address), statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;
  • additional personal information that you provide to us, directly or indirectly, through your use of our Services, associated applications, associated social media platforms and/or accounts from which you permit us to collect information; and
  • any other personal information requested by us and/or provided by you or a third party.

When you visit our website:

  • your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;
  • your contact details, including email address and/or telephone number;
  • your preferences and/or opinions;
  • information you provide to us, including through feedback, customer surveys or otherwise;
  • details of services we have provided to you and/or that you have enquired about, and our response to you;
  • support requests submitted to us and our response to you;
  • information about your access and use of our Services, including through the use of Internet cookies, your communications with our online Services, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider;
  • additional personal information that you provide to us, directly or indirectly, through your use of our Services, associated applications, associated social media platforms and/or accounts from which you permit us to collect information; and
  • any other personal information requested by us and/or provided by you or a third party.

Sensitive information: is a sub-set of personal information that is given a higher level of protection. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information.

Sensitive information: We do not actively request sensitive information about you. If at any time we need to actively collect sensitive information about you, unless otherwise permitted by law, we will first obtain your consent and we will only use it as required or authorised by law. We may inadvertently collect your sensitive information through your use of our Services. To the extent that we inadvertently collect your sensitive information, we will only use it with your consent and as required or authorised by law.

How we collect personal information

We collect personal information in a variety of ways, including:

  • Directly: We collect personal information which you directly provide to us, including when you register for an account, through the ‘contact us’ form on our website, when you interact with or utilise our Services, via email, when you provide feedback to us on our website and/or feedback form, when you interact with us on our webchat, when you request our assistance via email, or over the telephone, or when otherwise communicating with you.
  • Indirectly: We may collect personal information which you indirectly provide to us while interacting with us or third parties, such as when you use our Services, when you review our Services online, via social media or blogs, from marketing events, or over the telephone.
  • From third parties: We collect personal information from third parties, such as third-party payment providers, service providers who have referred you to us, details of your use of our website from our analytics and cookie providers and marketing providers. See the “Cookies” section below for more detail on the use of cookies.

Why we collect, hold, use and disclose personal information

We process your person information for purposes based on legitimate business interests, the fulfilment of our contract with you, compliance with our legal obligations, and/or your consent which are described further below:

As a user of our software:

  • to enable you to access and use our software, including to provide you with a login;
  • to provide our Services to you;
  • to run promotions, competitions and/or offer additional benefits to you;
  • to contact and communicate with you about our Services, including in response to any support requests you lodge with us or other enquiries you make with us;
  • for internal record keeping, administrative, invoicing and billing purposes;
  • for analytics, market research and business development, including to operate and improve our Services and associated applications, if any;
  • for advertising and marketing, including to send you promotional information about our services and other information that we consider may be of interest to you;
  • to comply with our legal obligations and resolve any disputes that we may have; and/or
  • if otherwise required or authorised by law.

When you visit our website:

  • to provide our website to you;
  • to contact and communicate with you about any enquiries you make with us via our website;
  • to comply with our legal obligations and resolve any disputes that we may have; and/or
  • if otherwise required or authorised by law.

Our disclosures of personal information to third parties

We only share and disclose your personal information in the following situations:

  • Contractual.  We may share personal information with any third party partners to enable any orders for products or services, or obligations arising out of any such orders, to be fulfilled.
  • Compliance with Legal Obligations.  We may disclose your personal information where we are legally required to do so in order to comply with applicable laws, governmental requests, judicial proceedings, court orders, or legal processes, such as in response to a court order or a subpoena (including in response to requests from public authorities in order to meet national security or law enforcement requirements).
  • Vital Interests.  We may disclose your personal information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, illegal activities or situations involving potential threats to the safety of any person, or where we believe it is necessary for the purpose of providing evidence in connection with litigation proceedings in which we are involved.
  • Third Party Service Providers.  We may share your personal information with third party vendors, service providers, credit reference agencies, trade associations of which we are a member, credit card associations, contractors or agents who perform services and require access to such personal information to carry out that work, for example third party software developers).  Such third parties will only have access to your personal information to the extent that they need to perform those services.  They are required to keep your personal information confidential and may not use it other than as we ask them to and always in accordance with this Privacy Policy.
  • Business Transfers.  We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Third Party Advertisers.  We may use third party advertising companies to serve ads when you visit our website.  These companies may use information about your visits to our website and other websites that are contained in web cookies and other tracking technologies in order to provide personalised advertisements about goods and services that may be of interest to you.  See our Cookie section for further information.
  • Business Partners.  Provided you have given us consent to do so we may share your personal information with our business partners to offer you certain products, services or promotions.
  • With your consent.  We may disclose your personal information for any other purpose with your consent, including with any person who you have named as a person we can contact to discuss your account and any agent or representative of yours.

Google Analytics: We may enable Google Analytics Advertising Features including Remarketing Features, Advertising Reporting Features, Demographics and Interest Reports, Store Visits, Google Display Network Impression reporting etc.. We and third-party vendors use first-party cookies (such as the Google Analytics cookie) or other first-party identifiers, and third-party cookies (such as Google advertising cookies) or other third-party identifiers together.

You can opt-out of Google Analytics Advertising Features including using a Google Analytics Opt-out Browser add-on found here. To opt-out of personalised ad delivery on the Google content network, please visit Google’s Ads Preferences Manager here or if you wish to opt-out permanently even when all cookies are deleted from your browser you can install their plugin here.  To opt out of interest-based ads on mobile devices, please follow these instructions for your mobile device: On android open the Google Settings app on your device and select “ads” to control the settings. On iOS devices with iOS 6 and above use Apple’s advertising identifier. To learn more about limiting ad tracking using this identifier, visit the settings menu on your device.

Cookies

We may use cookies on our website from time to time. Cookies are text files placed in your computer's browser to store your preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. If and when you choose to provide our online website with personal information, this information may be linked to the data stored in the cookie.

We use the following cookies:

  • Essential cookies.  These cookies are required for the operation of the Services.  They include, for example, cookies that enable you to log in to secure areas of the Services, use a shopping cart or make use of e-billing services.
  • Analytical/performance cookies.  These cookies allow us to recognise, and count the number of, visitors and to see how visitors move around the Services when they are using it.  This helps us to improve the way the Services works, for example by ensuring that users are finding what they are looking for easily.
  • Functionality cookies.  These cookies enable us to recognise you when you return to the Services.  This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Targeting cookies.  These cookies record your visit to the Services, the pages you have visited and the links you have followed.  We will use this information to make the Services and the advertising displayed on it more relevant to your interests.  We may also share this information with third parties for related purposes.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control.

You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies.  However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the Services.

If you would like more information about these third-party cookies, it is available from www.youronlinechoices.com/uk.

Note that when third parties are collecting information about you, those third parties are acting as controllers in their own right (i.e. they are not acting on our behalf).

Overseas disclosure

We may store personal information overseas. Where we or any third parties that we use transfer your personal information overseas we will take all reasonably practicable measures to protect your personal information in accordance with this Privacy Policy and applicable laws.  To the extent that any transfer requires approved safeguards to be in place we will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information.  Where we use certain service providers, we may use specific contracts approved for use (for example the Standard Model Contractual Clauses).  Please contact us if you want further information on the specific mechanism(s) used by us when transferring your personal information overseas.

Individuals under 18

The Services are not directed to individuals who are under the age of 18 and we do not solicit or knowingly collect personal information from children under the age of 18. If you believe that we have unknowingly collected any personal information from someone under the age of 18, please contact us immediately.

Consent

You will be required to give consent to certain processing activities before we can process your personal information.  Where applicable, we will seek consent from you when you first submit Information to or through the Services.

If you have previously given your consent you may freely withdraw such consent at any time.  You can do this by submitting a Contact Us form or, where applicable, clicking the ‘Unsubscribe’ button that appears in mailing list communications.

If you withdraw your consent, and if we do not have another legal basis for processing your personal information, then we will stop processing your personal information.  If we do have another legal basis for processing your personal information, then we may continue to do so subject to your legal rights.

Please note that if we need to process your personal information in order for you to use the  Services and you object or do not provide consent to us processing your personal information, you accept that the Services will no longer be available to you.

Your rights and controlling your personal information

You have certain rights in relation to the personal information that we hold about you depending on where you are located or from.  For EU and UK citizens and residents you have a number of specific rights, details of these rights and how to exercise them are set out below.  If you are based in another country and request to exercise one of the rights below or any other right you may have, we will do our best to fulfil such a request and will always fulfil the request if legally required.  Please note that we will require evidence of your identity before we are able to respond to any requests.  This is a security measure to ensure that your personal information is not disclosed to a person who does not have the right to receive it.  We may also contact you to ask you for further information in relation to your request to speed up our response.  To exercise or discuss any of your rights, please submit a Contact Us form.

  • Right of Access.  You have the right at any time to ask us for a copy of the personal information that we hold about you and to check that we are lawfully processing it.  Where we have good reason, and where data protection law permits, we can refuse your request for a copy of your personal information, or certain elements of the request.  If we refuse your request or any element of it, we will provide you with our reason(s) for doing so.
  • Right of Correction or Completion.  If the personal information we hold about you is not accurate or is out of date and requires amendment or correction, you have a right to have the data rectified or completed.
  • Right of Erasure.  In certain circumstances, you have the right to request that the personal information we hold about you is erased (for example, if the personal information is no longer necessary for the purposes for which it was collected or processed or our processing of the personal information is based only on your consent and there are no other legal grounds on which we may process the personal information).
  • Right to Object to or Restrict Processing.  In certain circumstances, you have the right to object to our processing of your personal information (for example, if we are processing your personal information on the basis of our legitimate interests but there are no longer any compelling legitimate grounds to justify our processing overriding your rights and interests).

You may also have the right to restrict our use of your personal information, for example during a period in which we are verifying the accuracy of your personal information in circumstances where you have challenged the accuracy of that personal information.

  • Right of Data Portability.  In certain instances, you have a right to receive the personal information that we hold about you (or a portion thereof) in a structured, commonly used and machine-readable format.

In such circumstances, you can ask us to transmit your personal information to you or directly to a third-party organisation on your behalf.

While we are happy for such requests to be made, we are not able to guarantee technical compatibility with a third-party organisation’s systems.  We are also unable to comply with requests that relate to personal information of others without their consent.

If we are relying on consent to process your personal information, you have the right to withdraw your consent at any time.  Please note however that this will not affect the lawfulness of the processing that occurred before the withdrawal of such consent.

Information Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax law, accounting requirements  or other legal or regulatory requirements).

When we have no ongoing business purpose to justify the processing of your  personal information, we will either delete or anonymise it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Storage and security

We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures, to safeguard and secure personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure. We have procedures in place to deal with any suspected data security breach. We will notify you and any applicable supervisory body of a suspected data breach where we are legally required to do so.

While we are committed to security, we cannot guarantee the security of any information that is transmitted to or by us over the Internet. The transmission and exchange of information is carried out at your own risk.

Links to other websites

Our website may contain links to other party’s websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.

Use of Google API Services (this section applies to personal information accessed through Google API Services)

We may use Google’s Application Programming Interface (API) Service to provide our Services.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (set out in the Google API Services User Data Policy).

We limit our use of the personal information that we collect to provide or improve our Services. We do not use the personal information for any other purposes.

We only transfer the personal information to others if it is necessary to provide or improve our Services or as necessary to comply with applicable law or as part of a merger, acquisition or sale of assets where we notify you of this.

We do not use or transfer the personal information for serving ads, including retargeting, personalised or interest-based advertising.

We have policies and procedures in place setting out appropriate safeguards for protecting your personal information obtained with the Google APIs. We will also ensure that our employees, agents and contractors comply with the Google API Services Data Policy.

Use of geo-localisation data

We may collect your precise or approximate location when using our Services for the following purposes:

  • to prohibit access to our Services in certain locations;
  • for security and safety;
  • to prevent and detect fraud; and
  • as permitted by law.

We collect this information when our software is being utilised. If you do not want us to use your location for the purposes above, you should turn off the location services in your account settings in our software (to the extent possible) or in your mobile phone settings. If you do not provide location information to us, we may not be able to provide our Services to you.

Contact Us

We welcome your feedback and questions on this Privacy Policy.  If you wish to contact us about this Privacy Policy or have any other questions, please submit a Contact Us form.

Pursuant to data protection law, Plerion has appointed the below as its UK and EU Representative.  If you have any enquiries relating to your rights under UK or EU data protection law, for example a data subject access request, please contact the below and ensure you include reference to Plerion and any other relevant information regarding the reason you are contacting them.

UK Representative

Contact: gdpr@ametrosgroup.com

Address: Ametros Group Ltd, Lakeside Offices, Thorn Business Park, Rotherwas Industrial Estate, Hereford, Herefordshire, England, HR2 6JT

EU Representative

Contact: gdpr@ametrosgroup.com

Address: Ametros Ltd, Unit 3D, North Point House, North Point Business Park, New Mallow Road, Cork, Ireland

You have the right to make a complaint at any time for example in the UK to the Information Commissioner’s Office (the ICO), the UK supervisory authority for data protection issues (https://ico.org.uk/concerns) and in Australia to the Australian Information Commissioner.  We would, however, appreciate the chance to deal with your concerns before you approach any supervisory body, so please contact us in the first instance with full details of your complaint. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take in response to your complaint.

Plerion Pty Ltd ABN 86 654 628 841

Last update: 17 February 2022