Last updated: 30 July 2026 · Applies to aegoriq.com.au and all AegorIQ Services
We collect your name, email, business details and the website URL you submit — including for the free scorecard — so we can generate your risk report and deliver it to you. If you use the free scorecard and don't proceed to a paid report, we'll send you one follow-up email about it; after that, we won't email you again unless you opt in. We don't sell your data. We don't use pre-ticked marketing boxes. You can ask us to access, correct, or delete your information at any time.
This Privacy Policy explains how AegorIQ ("AegorIQ", "we", "us", "our"), a trading name of WNMC Holdings Pty Ltd (ABN 55 698 239 502), collects, holds, uses, and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy applies to information collected through aegoriq.com.au, our intake forms, email communications, and any other AegorIQ service channel.
Depending on which Service you use, we may collect:
| Category | Examples |
|---|---|
| Contact details | Name, business name, email address, phone number |
| Business information | Industry type, website platform, business location (state/territory) |
| Target Website information | The URL you submit for review, and publicly accessible content of that website |
| Payment information | Processed directly by Stripe — AegorIQ does not store full card details |
| Technical information | IP address and timestamp of form submissions, for security and audit purposes |
| Communications | Any information you provide when you contact us, including emails and form responses |
We collect personal information:
We collect, hold, use and disclose personal information for the following purposes:
We do not use or disclose personal information for any other purpose without your consent, unless required or authorised by law.
We may disclose personal information to the following categories of third parties, solely for the purposes described above:
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
Some of the third-party service providers listed in Section 5 — in particular our data storage provider (Airtable) and our hosting and infrastructure provider (Netlify) — store or process information on servers located outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure these providers handle personal information in a manner consistent with the Australian Privacy Principles, including through the providers' own privacy and security commitments and contractual data-protection terms.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
We don't keep things indefinitely. These are the actual periods, and they are enforced automatically:
| What | How long we keep it | Why |
|---|---|---|
| Scan findings and website technical details — your report, re-scan results, and the record of the platform and components we detected on your site | 24 months from delivery of your report | So we can honour your re-scans, and tell you if a vulnerability later affects software we saw on your site. After 24 months this information is out of date and we delete it. |
| Purchase record — your name, business name, email, the amount paid and the date | 5 years from the transaction | Australian tax law requires us to keep records of our sales. This is the minimum we can lawfully keep, and nothing more is retained with it. |
| Free Scorecard details — if you never proceed to a paid report | 24 months | So we don't re-scan or re-contact someone who has already told us no. |
| Returning-customer discount code | 24 months, matching the life of the code | The code is valid for two years; once it expires we no longer need to hold it. |
When a retention period ends, the information is deleted or de-identified. You can ask us to delete your information sooner than these periods at any time, and we will — except for the purchase record, which we are legally required to keep.
We will only send you marketing communications (such as information about our other services or follow-up offers like a Fix Verification Re-scan) if you have provided your consent. We do not use pre-ticked consent boxes. Every marketing communication we send includes a functional unsubscribe mechanism, in accordance with the Spam Act 2003 (Cth). You can withdraw consent at any time by using the unsubscribe link or contacting us directly.
If you use the AegorIQ Free Scorecard, we may send you a single follow-up email referencing that scan and any time-limited discount offer associated with it. We treat this as a transactional communication directly related to the service you requested, rather than general marketing, consistent with the Spam Act 2003 (Cth)'s treatment of factual, transaction-related messages. This follow-up email also includes an unsubscribe mechanism, and we will not send further marketing communications beyond this single follow-up unless you separately opt in.
Your report is produced by automated analysis (our AI-assisted scanning engine). When you ask us to check a website, our systems examine its publicly available pages, configuration and public DNS records against a defined set of security and Australian-compliance checks, and generate the findings and score you receive. These checks are rule-based and applied consistently to every website we scan. For Expert reports, a qualified cybersecurity professional reviews the findings before the report is delivered to you.
We may also use artificial-intelligence tools to help write or summarise the plain-English explanations in our reports and guides, and to help us respond to your enquiries. Where we do, we do not submit any more of your personal information than is necessary, and we use reputable providers.
We do not use automated decision-making to make decisions that produce legal, or similarly significant, effects about you as an individual. Your report is advisory information and recommendations about a website; it does not approve, refuse, price, or otherwise decide anything about you personally. The automated decision-making transparency requirements added to the Privacy Act 1988 (Cth) — which apply from 10 December 2026 to certain automated decisions that significantly affect individuals — are therefore not engaged by how we currently operate. We will update this section if that changes.
If you have questions about how a particular finding in your report was generated, or about the automated analysis or AI tools we use, you can contact us using the details in Section 12 and we will provide a meaningful explanation of the general logic involved.
Our website may use minimal cookies necessary for core functionality (such as remembering form progress). We do not use third-party advertising or tracking cookies. [Update this section if analytics or marketing tools are added in future.]
Our website loads fonts from Google Fonts (fonts.googleapis.com), which may involve your browser connecting to Google's servers to retrieve font files. Google's privacy policy applies to this connection.
You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond within a reasonable timeframe.
If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with us directly. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
For privacy-related questions, access or correction requests, or complaints, please contact:
Email: contact@aegoriq.com.au
Trading name: AegorIQ, a trading name of WNMC Holdings Pty Ltd
ABN: 55 698 239 502
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements, including the Privacy Act reforms taking effect from December 2026. The updated policy will be posted on this page with a revised "Last updated" date.