Last updated 25 August 2026
Bastion IT is a registered business name of BASTION CYBERSECURITY & MANAGED SERVICES PTY LTD.
ABN 71 696 276 187
23 Bridgnorth St, Carindale QLD 4152
This policy covers this website and the enquiry form on it. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
When you fill in the form on this site we collect your name, email address and phone number. We also record which ad or search term brought you here, so we know which advertising is worth paying for.
Our web server records standard technical information such as your IP address, browser and the pages you opened.
We use Microsoft Clarity and Google Analytics to understand how people use this page. Clarity records how you move, scroll and click, and builds anonymous heatmaps and session replays from it. This tells us which parts of the page are working and which are not.
These recordings are not used to identify you, and we do not attempt to match them to your enquiry. Anything you type into the form is masked in the recording. If you would rather not be recorded, most browsers let you block these scripts, and the form still works if you do.
We advertise on Google. When you arrive from an ad and then submit the form, Google records that a conversion happened so we can tell which ads produce real enquiries. Google receives that a conversion occurred, not the contents of your enquiry.
We do not sell your information, and we do not add you to a marketing list from this form without telling you.
We share personal information only with the services we use to run the business, including our email provider, our customer records system, and the analytics and advertising services named above. We share it with them so they can do a job for us, not for their own purposes.
We will also disclose information where the law requires it.
Some of these providers store data outside Australia, including in the United States. Where that happens we rely on the provider's contractual protections. Our own client records are held in Australia.
This site is served over HTTPS and enquiries reach us through an encrypted connection. We limit who inside the business can see enquiry records. No system is perfect, and we will tell you promptly if a breach affects your information.
If you become a client, we keep your records for as long as we work together and for seven years afterwards, which is what our tax and record-keeping obligations require. If you do not become a client, we keep the enquiry for two years so we have context if you come back to us, then delete it.
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email support@bastionit.com.au and we will respond within 30 days. There is no charge.
If you think we have mishandled your information, tell us first at support@bastionit.com.au and we will look into it. If you are not satisfied with how we deal with it, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.
If we change this policy we will update the date at the top of this page.
Email support@bastionit.com.au or call 1300 900 222, Mon to Fri, 8:30am to 5:00pm.