Privacy policy.
How Overwatch Technologies Limited handles personal information.
The privacy policy content is the company’s to provide and have approved (consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as the company’s advisers confirm).
For company / legal review — full privacy policy content needed.
Analytics and site measurement
The company measures website use with privacy-respecting, cookieless analytics. This section must disclose what is collected and how, before analytics is enabled at go-live.
- Cloudflare Web Analytics — cookieless by design; collects aggregate page-view and performance metrics without setting cookies or tracking individuals across sites.
- Matomo (self-hosted) — configured cookieless and honouring “Do Not Track”; hosted by the company on its own infrastructure. Because it runs at the edge it processes visitor IP addresses; retention and anonymisation are set by the company.
Acknowledgement marker. When you complete the investor-material acknowledgement, a short-lived, first-party marker is set so you are not re-prompted within the same session. It contains no personal information and is not used for tracking.
For company / legal review + security-guardian — confirm the analytics disclosure (what is collected, cookieless status, Matomo IP handling / retention / anonymisation) and the acknowledgement-marker disclosure. Confirm whether a consent mechanism is required for the chosen configuration.
Contact form and enquiries
When you send an enquiry through our contact form, we collect the information you provide and use it only to respond to you and route your enquiry to the right team.
- What we collect: your name, email address, enquiry type and message.
- How it is sent: your enquiry is delivered by email to the relevant Overwatch team via a transactional email provider. Your email address is used as the reply-to so we can respond.
- Bot protection: we use Cloudflare Turnstile and short-term rate limiting to prevent abuse. This processes your IP address and a verification token at the time of submission.
- Retention: enquiries are retained per the company's records-management policy.
For company / legal review + security-guardian — confirm the contact-form data disclosure, the transactional email provider named, IP handling for Turnstile/rate-limiting, retention, and lawful basis. Apply the same disclosure to the investor register/subscribe form when its backend is wired.