Privacy Policy

Last updated: 16 March 2026

1. Introduction

Seraco Pty Ltd ("we", "us", "our") operates the BoardScore platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We may collect the following types of information:

  • Account information: name, email address, organisation name, and role
  • Usage data: how you interact with the platform, including assessment responses and scores
  • Technical data: IP address, browser type, and device information

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Generate cybersecurity assessment reports and benchmarking data
  • Communicate with you about your account and the Service
  • Ensure the security and integrity of the platform
  • Comply with legal obligations

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

5. Data Sharing

We do not sell your personal information. We may share your data with:

  • Service providers who assist in operating our platform
  • Legal authorities when required by law

Benchmarking data is always aggregated and anonymised so that individual organisation scores cannot be identified.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymise your data within a reasonable timeframe, unless retention is required by law.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

8. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@boardscore.io.