Privacy Policy.
What we collect when you use this website or contact us, why, who receives it, and the rights available to you.
This policy explains what personal information we collect when you use this website or contact us, why we collect it, who receives it, and the rights available to you.
It covers this website and our handling of enquiries. It should be read together with our Cookie Policy, which lists each cookie and tracking technology individually.
Who we are
ABYSS SOLUTIONS PTY. LTD. is the controller of the personal information described in this policy.
- ACN
- 602 698 457
- ABN
- 66 602 698 457
- Registered office
- Unit 35, 11–21 Underwood Road, Homebush NSW 2140, Australia
- Telephone
- +61 2 8005 2325
- Privacy contact
- policy@abysssolutions.co
We provide autonomous inspection, data analytics and integrity management services to operators of critical infrastructure in the energy, marine and infrastructure sectors.
Where we operate. We are incorporated in Australia, the United States, Pakistan, the United Arab Emirates and the United Kingdom. We maintain staffed offices in Australia, the United States and Pakistan. We serve clients in other jurisdictions, including the European Union, Canada and Brazil, without being established in them.
Information we collect
If you contact us. Our contact form collects your name, your work email address, your company (optional) and your message.
If you browse this site. With your consent, our analytics provider records the pages you view, your scroll depth, the page sections you reach, your approximate location derived from your IP address, and your browser and device characteristics. Without your consent, none of this collection takes place. Each cookie and pixel is listed individually in our Cookie Policy.
Information we do not collect. We do not collect sensitive information through this website, including health information, biometric data, racial or ethnic origin, or political opinions. We do not knowingly collect information from children, and this website is addressed to a business audience. We do not currently accept job applications through this website. This policy will be revised before we do so.
Purposes and legal bases
| Purpose | Reason | Legal basis |
|---|---|---|
| Responding to your enquiry | To answer your question and, where relevant, to discuss providing services to you | Steps taken at your request prior to entering a contract, and our legitimate interest in responding to business enquiries. GDPR Art 6(1)(b) and 6(1)(f); APP 3 |
| Recording your enquiry in our customer relationship management system | To retain the history of our correspondence with you | Our legitimate interest in managing client and prospect relationships. Art 6(1)(f) |
| Associating your earlier browsing with your enquiry | To understand what prompted you to contact us | Your consent. Art 6(1)(a) |
| Measuring how this website is used | To improve the website and its content | Your consent. Art 6(1)(a), together with ePrivacy Art 5(3) in respect of the cookies and pixels themselves |
| Protecting the website from abuse | To maintain availability and security | Our legitimate interest in security. Art 6(1)(f) |
| Meeting legal obligations | Where retention or disclosure is required by law | Art 6(1)(c) |
- Purpose
- Responding to your enquiry
- Reason
- To answer your question and, where relevant, to discuss providing services to you
- Legal basis
- Steps taken at your request prior to entering a contract, and our legitimate interest in responding to business enquiries. GDPR Art 6(1)(b) and 6(1)(f); APP 3
- Purpose
- Recording your enquiry in our customer relationship management system
- Reason
- To retain the history of our correspondence with you
- Legal basis
- Our legitimate interest in managing client and prospect relationships. Art 6(1)(f)
- Purpose
- Associating your earlier browsing with your enquiry
- Reason
- To understand what prompted you to contact us
- Legal basis
- Your consent. Art 6(1)(a)
- Purpose
- Measuring how this website is used
- Reason
- To improve the website and its content
- Legal basis
- Your consent. Art 6(1)(a), together with ePrivacy Art 5(3) in respect of the cookies and pixels themselves
- Purpose
- Protecting the website from abuse
- Reason
- To maintain availability and security
- Legal basis
- Our legitimate interest in security. Art 6(1)(f)
- Purpose
- Meeting legal obligations
- Reason
- Where retention or disclosure is required by law
- Legal basis
- Art 6(1)(c)
We do not rely on legitimate interests as a basis for analytics. Consent is the only basis relied upon for that purpose.
We do not carry out automated decision-making that produces legal or similarly significant effects. We do not sell personal information, and we do not disclose it for cross-context behavioural advertising.
Recipients
| Recipient | Role | Location |
|---|---|---|
| HubSpot, Inc. | Analytics and customer relationship management, processing on our instructions under a data processing agreement | United States |
| Cloudflare, Inc. | Content delivery and bot protection, engaged by HubSpot | United States |
| VentraIP Australia Pty Ltd | Website hosting | Australia |
- Recipient
- HubSpot, Inc.
- Role
- Analytics and customer relationship management, processing on our instructions under a data processing agreement
- Location
- United States
- Recipient
- Cloudflare, Inc.
- Role
- Content delivery and bot protection, engaged by HubSpot
- Location
- United States
- Recipient
- VentraIP Australia Pty Ltd
- Role
- Website hosting
- Location
- Australia
We may also disclose personal information where required by law or legal process, to protect our rights or the safety of others, or to an acquirer or successor in the event our business is sold. In each case we disclose only what is necessary.
International transfers
Our analytics and customer relationship management provider, and the content delivery provider it engages, are located in the United States. Our website hosting is located in Australia. The safeguards applicable to transfers to the United States depend on your location.
| Transfer from | Mechanism |
|---|---|
| European Economic Area | European Commission standard contractual clauses |
| United Kingdom | UK International Data Transfer Addendum to those clauses |
| Australia | Australian Privacy Principle 8. We take reasonable steps to ensure that overseas recipients handle your information consistently with the Australian Privacy Principles |
| Canada | PIPEDA accountability principle, with comparable protection secured by contract |
| Brazil | LGPD Articles 33 to 36, using clauses approved by the ANPD |
- Transfer from
- European Economic Area
- Mechanism
- European Commission standard contractual clauses
- Transfer from
- United Kingdom
- Mechanism
- UK International Data Transfer Addendum to those clauses
- Transfer from
- Australia
- Mechanism
- Australian Privacy Principle 8. We take reasonable steps to ensure that overseas recipients handle your information consistently with the Australian Privacy Principles
- Transfer from
- Canada
- Mechanism
- PIPEDA accountability principle, with comparable protection secured by contract
- Transfer from
- Brazil
- Mechanism
- LGPD Articles 33 to 36, using clauses approved by the ANPD
Retention
| Category | Retention period |
|---|---|
| An enquiry that does not result in a relationship | 24 months from your last contact with us |
| Contact records for an active client or a live opportunity | 7 years after the relationship ends |
| Email and meeting correspondence | 7 years after the relationship ends |
| Record that you declined cookies | 6 months, in order to honour it |
| Analytics cookies | As stated in the Cookie Policy, to a maximum of 6 months |
- Category
- An enquiry that does not result in a relationship
- Retention period
- 24 months from your last contact with us
- Category
- Contact records for an active client or a live opportunity
- Retention period
- 7 years after the relationship ends
- Category
- Email and meeting correspondence
- Retention period
- 7 years after the relationship ends
- Category
- Record that you declined cookies
- Retention period
- 6 months, in order to honour it
- Category
- Analytics cookies
- Retention period
- As stated in the Cookie Policy, to a maximum of 6 months
Where a law requires a longer period, the longer period applies. Website enquiry data is not retained indefinitely.
Your rights
Wherever you are located, you may request a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it. You may withdraw consent at any time. Requests should be sent to policy@abysssolutions.co. We do not charge for responding to a request.
Additional rights apply depending on your location.
Australia, Privacy Act 1988. Access and correction, and the right to complain to us and subsequently to the Office of the Australian Information Commissioner at oaic.gov.au.
European Economic Area and United Kingdom, GDPR and UK GDPR. Access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent without affecting the lawfulness of processing carried out beforehand. We respond within one month. You may complain to your national supervisory authority, or to the Information Commissioner's Office at ico.org.uk. As we have no establishment in the European Union, any supervisory authority may consider your complaint.
Canada, PIPEDA. The right to know what information we hold and why, to access and correct it, and to withdraw consent subject to legal and contractual limitations. You may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
United States. Depending on your state of residence, the rights to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information, and we honour opt-out preference signals including Global Privacy Control. You will not be treated differently for exercising a right.
Brazil, LGPD. Confirmation of processing, access, correction, anonymisation or deletion of unnecessary data, portability, information about the parties with whom we share data, and withdrawal of consent. You may complain to the ANPD.
Security and breach notification
We hold ISO/IEC 27001 certification for our information security management system. Access to personal information is restricted to personnel who require it, transmission is encrypted, and our controls are subject to audit. No system of transmission or storage is entirely secure.
Where a breach of personal information is likely to result in serious harm, we will notify you and the relevant regulator within the period required by the applicable law. This includes the Notifiable Data Breaches scheme under the Australian Privacy Act, the 72 hour requirement under the GDPR and UK GDPR, and the corresponding obligations in the other jurisdictions listed above.
Third-party sites
This website links to third-party platforms, including LinkedIn and YouTube. Their privacy practices apply to your use of those platforms, and we are not responsible for them. We recommend that you review their policies.
Changes to this policy
If we change what we collect or the purposes for which we collect it, we will revise this policy and update the date above before the change takes effect. The addition of any third-party tool requires revision of this policy and the Cookie Policy beforehand.
Contact
policy@abysssolutions.co
ABYSS SOLUTIONS PTY. LTD., ACN 602 698 457 Unit 35, 11–21 Underwood Road, Homebush NSW 2140, Australia Telephone +61 2 8005 2325
Each cookie and tracking technology is listed individually in the Cookie Policy. To change or withdraw your choice, use in the footer of any page.