Cloud Ctrl Privacy Policy

This policy was last updated on 16 October 2026.

MSP Cloud Holdings Pty Ltd ABN 91 695 375 109 and its product “Cloud Ctrl” (together ‘we’, ‘our’, ‘us’) respect personal privacy. All information you give us is treated with the utmost care and security.

Please take time to read this policy, as it explains the type of data we collect, and how your personal information will be treated by us. We do not sell, rent or loan any identifiable information about you or any of our customers to any third party. Only in the circumstances described within this Privacy Policy would we share your information with any third party.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the EU or UK General Data Protection Regulation applies to you, we handle personal data in accordance with Regulation (EU) 2016/679 (GDPR). Where the GDPR applies, we rely on the lawful bases of performing our contract with you, complying with our legal obligations, our legitimate interests in operating and improving our services, and your consent where we ask for it.

If you're visiting our websites, using our products and services, working with any of our teams, meeting us at events or applying for a role with us, this privacy policy sets out what data we collect, and how we use it. It also describes your rights regarding our use of your data.

We may update this policy from time to time. When we do, we will publish the revised policy on this page and update the date at the top. If we make a material change, we will take reasonable steps to let you know.

We collect common types of personal information, such as: name, company, email address, and phone number.

We use this information to:

Provide and run the service

• Provide, operate, maintain, and improve our website, products, and services

• Process and complete transactions and orders, and send you related information

• Create and administer trials and accounts

• Administer and otherwise carry out our obligations in relation to any agreement you have with us

Communicate with you

• Send transactional messages, such as responding to your comments or feedback, providing customer service and support, and sending you technical notices such as alerts or status updates

• Send you our newsletter, where you have asked us to

Improve and understand our service

• Compile aggregate analytics about how the features of our products are used, so we can improve them

Meet our legal and compliance responsibilities

Marketing

• Monitor and analyse trends, usage, and activities for marketing purposes

• Track your engagement with us, including through our website, articles, and newsletters

Other purposes

• For other purposes, for which we will obtain your consent

• Process your application if you apply for a job with us

Information we collect and receive

1. Information that you give to us directly

Our Websites and Cloud products may ask for information about you and the company you work for. This is collected as you register for an account, purchase a subscription, register for product trials, or otherwise use or interact with our website.

Examples of the information we collect includes:

• Contact information, such as your name, email, mailing address and phone number

• Billing information, such as credit card details and billing addresses

• Profile information, such as a username, profile photo and job title

• Account preferences, such as notification and email marketing preferences

This information is provided by you when you enter it into our website or use one of our products, and so you naturally consent to us collecting it for these purposes.

In some cases information about you may be entered by someone else, typically a billing or system administrator at your company — for example when they set up an account for you, include you as a contact on an invoice, or add you as a recipient of a scheduled report. If you are providing information about someone else, you must have the authority to act for them and to consent to the collection and use of their personal information as described in this policy.

In addition to the product itself, we collect personal information when you submit an enquiry through our website, when you complete one of our free assessments, or when you contact our team by email.

When you provide your contact details in a free assessment and continue, we send those details to our team so we can follow up about your assessment. Your answers stay in your browser until you finish, when we email your completed report to the address you provide. You do not need to opt in to marketing to receive your report.

Marketing emails are optional. On our website enquiry and assessment forms, you can choose to receive Cloud Ctrl product updates, practical cloud and AI cost insights, and event invitations using a separate, initially unchecked checkbox. If you select it and submit, we record your choice, the consent wording and version, the source form and the time received in an internal enquiry email for our team to manage manually. The website does not automatically add you to a mailing list. Leaving the checkbox unchecked does not grant new marketing permission or change any existing subscription preferences. You can withdraw marketing consent at any time using the unsubscribe link in our promotional emails or by contacting support@cloudctrl.com.au.

We also collect content that you create, input, send, submit, or upload when using our websites and support services. Examples of content you might provide include annotations on usage, connection and configuration details, support requests and emails that you send us, or data that you enter in the course of using the functionality in our Websites or Cloud products. This content includes any personal information, or sensitive information, that you choose to include.

The nature of our product means we also collect usage data from the cloud account sources which you provide. This usage data may include personal or sensitive information that you or your company choose to include in account names, service names, tags, or other metadata.

2. Information that we collect indirectly

We also gather information about you indirectly, through observing how you use our websites or Cloud products. This includes:

• Web server logs, which capture information including your IP address, browser and operating system version, and URLs requested. This information is typically not personally identifying, though it may incidentally capture personally identifiable information if that information is included as part of the request (for example, in a URL query string).

• Analytics data, which is captured either by us or by third party analytics partners.

This information is used to improve our website and products. As at the time this policy was last updated, we use the following third party analytics partners:

• Google Analytics. To learn more about the privacy policy of Google Analytics, refer to Google’s Policies and Principles. You can use the Google Analytics Opt-out Browser Add-on to prevent analytics information from being sent to Google Analytics.

Cookies & tracking technologies

We use cookies and similar technologies in two ways:

• On this website, we use analytics cookies set by Google Analytics to help us understand how the site is used (for example, which pages are visited and how visitors arrive). These are not required for the site to work.

• In our products and the customer portal, we use essential cookies — for example, to keep you signed in, to detect abuse of our systems, and to remember your preferences. These cannot be switched off without breaking parts of the service.

We do not use cookies to serve third-party advertising or to sell your information.

Your web browser allows you to control whether cookies can be stored by our websites, and you can block or delete cookies through your browser settings. Blocking cookies may stop some parts of our websites from working correctly. Your web browser’s documentation has more information on controlling cookie behaviour.

How we disclose data

We do not sell or rent your personal information to marketers or unaffiliated third parties. We may share your personal information with trusted third parties, including:

• Third parties: We may share your personal information with third parties in the event of any reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock.

• Service providers: We may share your personal information with service providers who help us provide our services. Service providers help us with things like payment processing (i.e., banks, credit bureaus, payment method providers), website hosting, data analysis, information technology and related infrastructure, customer service, email delivery, and auditing.

• Safety, legal, and law enforcement: We use and disclose personal information as we believe necessary: (i) under applicable law, or payment method rules; (ii) to enforce our terms and conditions; (iii) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (iv) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.

• To the public: for content that you have explicitly given us permission to publish, such as on a public forum, or as a testimonial. We may also use your company name in order to promote our products.

Where we store and process information

Our websites and products are hosted in Australia and, unless we agree otherwise with you, usage and billing data is stored in Australian-hosted infrastructure under our control.

For details of core platform hosting, backup locations and supporting services, see Australian hosting and data residency.

Some service providers we use to run our business are located overseas, so some personal information may be transferred to and processed in other countries. These include Google (website analytics) and SendGrid, a Twilio company (email delivery), which are based in the United States. Where we transfer personal data from the EU or UK, we use appropriate safeguards for the transfer.

How long we keep information

We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law, and we do not keep it for longer than we need it.

• Enquiry, assessment and website contact details: while we are actively following up with you, and for a reasonable period afterwards.

• Account, billing and usage data: for the life of your account, and then for as long as Australian tax and accounting law requires us to keep records (generally at least five years).

• Marketing consent evidence and unsubscribe records: for as long as needed to demonstrate consent and honour your communication preferences.

• Website analytics: according to the retention period we configure with our analytics provider.

Because we hold your assessment answers in your own browser until you finish, those answers are not stored on our systems until you choose to submit them. When we no longer need personal information, we delete it or de-identify it. You can ask us how long we keep a particular item at any time.

How we protect information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include encrypting data in transit using TLS and, where appropriate, at rest; access controls; and hosting our websites and products in Australian infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Choice and access

You have choices regarding our use and disclosure of your personal information.

• You can control or disable cookies and similar technologies through your browser settings, and can use the Google Analytics opt-out browser add-on to prevent analytics data being sent to Google.

• You can opt-out of receiving promotional emails from us by clicking the ‘unsubscribe’ link on any promotional email we send you, or by contacting our support team support@cloudctrl.com.au

• If you have provided a testimonial or we have used your company as an example of a customer using our products, you can require that we stop doing so.

• You can request to see what personal information we have about you and ask us to delete it. We may not always be able to delete information we have, for example, it may be needed for legal or compliance reasons.

How to make a complaint

If you believe we have breached our privacy obligations, contact us at support@cloudctrl.com.au. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the EU or UK, you can also contact your local data protection authority.

Use of services by minors

Our services are not directed to individuals under the age of 18, and we request that they not provide personal information through our websites, products or services.

Contact us

If you have any questions about this privacy policy, or want to access, correct or delete your personal information, please contact us at support@cloudctrl.com.au.