Privacy Policy
Last updated: 17 August 2026
1. About this policy
Nexnode Pty Ltd (Nexnode, we, us) provides IT infrastructure, managed services, cloud and cyber security services to Australian businesses. This policy explains how we collect, hold, use, disclose and protect personal information, and how you can access it, correct it or make a complaint.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we hold personal information on behalf of a client under a services agreement, we act on that client’s instructions and their privacy policy will also apply.
2. What personal information we collect
The personal information we collect depends on your relationship with us. It generally includes:
- Contact and business details — name, job title, business name, email address, phone number, and postal or site address.
- Enquiry content — the information you provide when you submit our contact form, email us or call us.
- Service delivery information — where we deliver services, technical information about your environment such as usernames, device identifiers, system configuration, log data and support ticket history.
- Website usage information — IP address, browser and device type, pages visited and referring source, collected via analytics (see section 7).
3. How we collect personal information
We collect personal information directly from you wherever practicable — when you contact us, engage our services, or use systems we manage on your behalf. We may also collect it from your organisation, from publicly available sources such as your company website or LinkedIn, and automatically through our website and monitoring tools.
4. Why we collect, hold and use it
We use personal information to:
- respond to enquiries and provide quotes;
- deliver, support, monitor and secure the services you have engaged us for;
- manage our relationship with you, including billing and account administration;
- investigate and respond to security incidents and service faults;
- improve our services and website; and
- meet our legal, regulatory and insurance obligations.
5. Who we disclose it to
We may disclose personal information to:
- Service providers and vendors who help us deliver our services — including hosting, monitoring, backup, security, ticketing and communications platforms.
- Our professional advisers, such as accountants, insurers and lawyers.
- Law enforcement or regulators, where required or authorised by law.
6. Overseas disclosure
Some of the platforms we and our clients rely on store or process data outside Australia. In operating this website and our services, personal information may be disclosed to recipients located in the United States, the European Union and other jurisdictions — including through Microsoft (Azure and Microsoft 365), Google (analytics), and our web form provider.
Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs. Where a client requires data residency in Australia, we can generally accommodate that as part of the services agreement — please raise it with us before we design the solution.
7. Cookies and website analytics
This website uses Google Analytics to understand how visitors use the site. Google Analytics sets cookies and collects information including your IP address, device and browser type, and the pages you view. This information is used in aggregate to improve the site.
You can block or delete cookies through your browser settings, and you can opt out of Google Analytics using Google’s browser add-on. Blocking cookies will not prevent you from using this website.
8. How we protect information
We apply technical and organisational controls appropriate to the sensitivity of the information we hold, including access controls and least-privilege administration, multi-factor authentication on administrative accounts, encryption in transit, monitoring and logging, and secure backup. We restrict access to personal information to personnel who need it to perform their role.
No system is completely secure. If you believe your information has been compromised, contact us immediately using the details in section 12.
9. Data breaches
We maintain procedures for identifying, containing and assessing suspected data breaches. If a breach involving personal information we hold is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme. Where the affected information is held on behalf of a client, we will notify that client promptly and support their response.
10. How long we keep it
We retain personal information only for as long as it is needed for the purposes described in this policy, or as required by law, contract or our insurers. Service records are generally retained for seven years after the engagement ends. When information is no longer required, we destroy or de-identify it securely.
11. Accessing and correcting your information
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us using the details in section 12 and we will respond within a reasonable period, generally within 30 days.
There is no charge for making a request. We may charge a reasonable fee for the cost of providing access where a request is substantial. If we refuse access or correction, we will tell you why in writing and explain how you can complain.
12. Complaints and contact
If you have a question about this policy, want to access or correct your information, or wish to make a privacy complaint, contact us:
- Email: info@nexnode.com.au
- Phone: 03 7056 6607
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The current version is always available on this page, and the date it was last updated appears at the top.