Legal

Privacy policy

Last updated: 21 July 2026

1. Introduction

Vyfority Pty Ltd ("Vyfority", "we", "our", "us") is committed to protecting the privacy of your personal information. This policy describes how we handle personal information when you visit vyfority.com.au (the "Site") and when you engage with us.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where our obligations under that Act are limited by the small business exemption, we nonetheless apply the APPs as a matter of practice, because we advise our clients to do the same.

2. What we collect

Automatically, when you visit the Site

  • Usage data: pages viewed, time on page, referring URL, approximate location derived from IP address, browser and device type, and dates and times of access.
  • Your IP address is used to derive approximate location and is not retained by us in an identifiable form.

When you contact us

  • If you email us, we receive whatever you choose to include: typically your name, email address, organisation and the content of your message.
  • If you book a call through our Calendly scheduling link, Calendly collects your name, email address, and any details you provide when booking, and shares that booking information with us.

What we do not collect

  • The Site has no contact forms, no account registration, and no gated downloads. Publications and diagnostics on the Site can be downloaded without providing any personal information.
  • We do not collect payment information through the Site.

3. Cookies, analytics and your choices

We use two analytics tools:

  • Google Analytics 4, to understand which content is useful and how visitors move through the Site. GA4 uses cookies. We have configured it with Google Consent Mode: analytics cookies are set only if you accept them. If you decline, GA4 receives anonymous, cookieless signals that allow us to count page views in aggregate but do not identify or track you across visits.
  • Ahrefs Web Analytics, which is cookieless and does not track individuals.

Booking buttons on the Site ("Book a consultation" and similar) open Calendly in a popup over the page. Nothing Calendly-related loads until you click one of these buttons: no script, no cookie, on any page, until that deliberate click.

When you first visit the Site, a banner offers three choices, each a single click:Accept all, Reject all, or Manage preferences. Manage preferences opens a panel with two categories:

  • Strictly necessary — always on. Covers Cloudflare's bot-management and security cookies, required to deliver the Site securely. These cannot be switched off.
  • Analytics — off by default. Google Analytics, so we can see which publications are useful. Declining still lets us count page views in aggregate, but does not identify or track you.

Your choice is stored on your device and applied automatically on later visits, for up to twelve months, after which you will be asked again. You can change your choice at any time using the "Cookie preferences" link in the footer. You can also configure your browser to refuse cookies; the Site works normally without them.

We do not use advertising cookies, we do not run advertising on the Site, and we do not permit third parties to use the Site to build advertising profiles.

4. How we use information

  • To operate and improve the Site, and to understand which publications and topics are useful.
  • To respond to enquiries and to arrange and conduct meetings you request.
  • To meet our legal, professional and record-keeping obligations.

We do not use your information for automated decision-making, and we do not use it to train machine learning models.

5. Disclosure

We do not sell, rent or trade personal information.

We use the following service providers, who may handle information on our behalf:

  • Cloudflare (Cloudflare Pages), for hosting and content delivery.
  • Google (Google Analytics 4), for Site analytics.
  • Ahrefs, for cookieless Site analytics.
  • Calendly, for scheduling. Bookings made through Calendly are subject to Calendly's own privacy policy.
  • Microsoft (Microsoft 365), for email.

We may also disclose information where required by law, in response to a valid request from a public authority, or in connection with a sale or restructure of our business.

6. Where your information is held

The Site is served from Cloudflare's global content delivery network, which means Site content is distributed across servers in multiple countries, including outside Australia. Our analytics and scheduling providers may also process information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

7. Retention

We retain analytics data for the period configured in Google Analytics (currently 14 months) and correspondence for as long as necessary for the purpose for which it was provided, plus any period required to meet our legal and professional record-keeping obligations. We delete or de-identify information when it is no longer required.

8. Security

We apply reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will act in accordance with the Notifiable Data Breaches scheme.

9. Your rights

Under the Australian Privacy Principles you may:

  • request access to the personal information we hold about you;
  • ask us to correct information that is inaccurate, out of date or incomplete;
  • ask us how we handle your information.

If you are in the European Economic Area or the United Kingdom, you may also have rights to erasure, restriction of processing, objection, and data portability under the GDPR. If you are a California resident, you may have rights under the CCPA.

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable period, and within 30 days where the Privacy Act requires it.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes

We may update this policy. Changes take effect when published on this page, and the "last updated" date will change accordingly.

11. Contact

Vyfority Pty Ltd
ABN 29 679 606 510
Email: [email protected]