Privacy policy

Last updated 11 August 2026. This policy covers kosmosit.com.au and the services Kosmos IT provides. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What this website collects

The enquiry forms on this site collect your name, phone number, email address, suburb and whatever you write in the message field. That is used to call you back and to quote the work. Nothing else on this site tracks you: there are no advertising pixels, no third-party analytics scripts, and no cookies set by us. The site is static HTML and runs no JavaScript beyond a small keyboard-accessibility helper in the navigation.

Our web host records standard server logs — IP address, page requested, timestamp, browser — as every web server does. Those are used for security and troubleshooting, not profiling.

What we collect as your IT provider

Supporting your systems means we necessarily have access to a great deal. Depending on the work, that can include:

• Administrative credentials for your Microsoft 365 tenancy, servers, network equipment and backups
• Device names, serial numbers, warranty status, installed software and patch levels
• Monitoring and alert data from the machines we manage
• Support tickets, call notes and the record of what was changed and when
• Incidental sight of your business data — files, email, records — while diagnosing or repairing a fault

We do not read, copy, index or analyse your business data for any purpose other than performing the work you have asked for. We do not sell data to anyone, ever, and we do not use client data to train anything.

Remote sessions

A remote support session requires someone at your end to accept a prompt before we can connect. Nothing happens until they do. Sessions are logged, you can end one at any moment, and you can watch the screen throughout. Read how we keep remote support safe for the detail.

Who else sees your information

We use third-party services to do the work — remote support software, backup providers, Microsoft, and hardware suppliers when a warranty claim needs a serial number. Those providers see only what the task requires. We do not disclose your information to anyone else unless you ask us to, or unless we are legally required to.

Some of these providers store data outside Australia. Where we have a choice, we prefer Australian data residency for backups and will tell you where your data physically sits if you ask.

How long we keep it

Enquiries that do not become work are deleted within twelve months. Client records, documentation and support history are kept for the life of the engagement and for seven years afterwards, which is the period Australian business record-keeping obligations generally require. Backups are retained according to whatever retention schedule we have agreed with you.

If something goes wrong

If a data breach occurs that is likely to cause you serious harm, we will tell you and notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. We will tell you what happened rather than manage the message.

Access, correction and complaints

You can ask what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email support@kosmosit.com.au or call 07 3824 6117 and we will respond within 30 days.

If you are not satisfied with how we handle a privacy complaint, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.

See also our terms of service.