Privacy Policy
Last updated: 16 July 2026
A clear explanation of how Compuloop collects, uses, protects and discloses information across our website, enquiries, support work, managed IT services and business technology operations.
Data Clarity
Explains what personal, technical, enquiry, billing and support information Compuloop may collect.
Access Controls
Covers analytics, IP/security logs, support records, cloud processing, MFA, backups and retention practices.
Your Choices
Outlines access and correction requests, complaints, marketing opt-outs and how to contact Compuloop.
Who this policy applies to
This Privacy Policy explains how Compuloop collects, uses, stores and protects personal information when people visit our website, contact us, request support, buy a product or service, or work with us as a customer, supplier or business contact.
Compuloop provides business technology services including managed IT support, Microsoft 365 support, cybersecurity, cloud hosting, remote support, backup planning, service-area support and industry-focused IT services.
Customer environments and third-party personal information. During support, security, Microsoft 365, hosting, backup or migration work, Compuloop may incidentally see personal information held by a customer, such as names, email addresses, mailbox content, filenames, logs, access records or screenshots. Customers remain responsible for ensuring they have authority to provide access to their systems and data.
Role of Compuloop when supporting customer systems. Depending on the service, Compuloop may act as an independent service provider, contractor or technical administrator for the customer environment. We use customer-environment information only for support, security, service delivery, diagnostics, documentation, billing, legal compliance and dispute handling.
Remote access sessions. Remote support tools may record connection metadata, device names, usernames, timestamps, chat messages, diagnostics or support notes. We use this information to deliver support, maintain records, investigate incidents and protect both parties if a dispute arises.
Security incidents and data breaches. If Compuloop becomes aware of a suspected privacy or security incident involving personal information we hold, we will assess it and take reasonable steps in line with our obligations. If the Privacy Act or Notifiable Data Breaches scheme applies and notification is required, we will take reasonable steps to notify affected parties and regulators as required.
Customer responsibilities for privacy. Customers should not provide more personal information than is needed for a support request. Customers should also avoid sending passwords, MFA codes, identity documents, payment card details or sensitive personal information through ordinary email unless there is a clear operational need and an appropriate process has been agreed.
De-identified and aggregated information. We may use de-identified or aggregated operational information to improve services, reporting, security practices and website performance. We do not use that information to identify individuals.
Children and personal use. Compuloop provides business technology services and does not intentionally target children. If we receive personal information about a child while supporting a customer environment, we handle it only as needed for the relevant business support purpose.
Policy updates. We may update this Privacy Policy as our services, systems, legal obligations or business processes change. The version published on this page applies from the date shown.
YouTube API Services and Google user data
Compuloop’s internal social publishing tool, Compuloop Social Publisher, uses YouTube API Services to verify Compuloop’s owned YouTube channel and upload owner-approved videos, Shorts, metadata and custom thumbnails to that channel. Its use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements where applicable.
Permissions and information accessed. The tool requests only youtube.upload, to upload owner-approved videos, Shorts and thumbnails, and youtube.readonly, to verify the identity and title of the authorised Compuloop channel. It may access or process the authorised channel ID and title, OAuth tokens, the video and thumbnail selected by the owner, owner-approved video metadata and the YouTube video ID returned after an upload. It does not request or store the Google or YouTube account password. It does not access comments, contacts, subscriber lists, viewing history, analytics or advertising data.
Use, storage and sharing. OAuth credentials and tokens are encrypted for the authorised Windows user. Information is used only for the owner-requested channel-verification and upload functions. It is not sold, used for advertising or shared with unrelated third parties. Limited information is transmitted to Google and YouTube only as required to authenticate the owner and perform the requested YouTube API operation. The installed command-line tool does not place additional advertising or tracking cookies on a user’s device.
Retention and deletion. Compuloop retains authorised API data only while it is needed for the approved function and active authorisation. Authorised data is deleted or refreshed within 30 days where required by the YouTube API Services Developer Policies. If the owner requests deletion, disconnects the tool or revokes authorisation, Compuloop will delete locally stored authorised data and tokens as soon as possible and within seven calendar days. Data associated with an authorisation token that is no longer valid and cannot be refreshed is also deleted. Deleting local data does not delete content held by YouTube; content on YouTube must be deleted through YouTube or an authorised client that supports deletion.
Revoking access. The owner can revoke Compuloop Social Publisher’s access at any time through Google’s third-party access security settings. Google’s handling of information is described in the Google Privacy Policy.
For questions, complaints, revocation assistance or a request to delete locally stored YouTube API data, contact sales@compuloop.com.au. We will action a valid deletion request as soon as possible and within seven calendar days.
Information we may collect
We aim to collect only information that is reasonably necessary for our business functions and activities.
- Contact details, such as name, email address, phone number, business name and job title.
- Enquiry details, such as the service you are interested in, messages, support requests, booking details and order details.
- Technical information, such as IP address, browser type, device type, approximate location, referral source, pages visited and form submission metadata.
- Service information, such as Microsoft 365 tenant details, device information, network details, logs, screenshots, tickets or diagnostic notes where needed to provide support.
- Billing and transaction information needed for orders, invoices, refunds, account records and dispute handling.
Website analytics, tracking and IP information
We use analytics and security tools in a measured way. These tools help us understand which pages are useful, where enquiries come from, whether advertising is working, and whether the website is being abused by spam, bots or malicious traffic.
Google Analytics 4 and Google Tag Manager may record events such as page views, phone clicks, email clicks, form submissions, booking clicks and remote-support clicks. GA4 does not give us a raw list of visitor IP addresses.
Cloudflare, hosting logs and security tools may process IP addresses, request logs and security signals to protect the website, block spam, investigate abuse and keep services reliable. Contact forms may include admin-only metadata such as page URL, page title, form source, service interest and submitter technical details.
We do not sell visitor tracking data.
How we use personal information
We may use personal information to:
- respond to enquiries, support requests and bookings;
- deliver IT services, remote support, cybersecurity, Microsoft 365 support, hosting and related technology services;
- prepare quotes, proposals, invoices and account records;
- manage licensing, vendor support, warranty, procurement and service delivery;
- improve our website, services, reporting and customer experience;
- measure marketing performance and lead source attribution;
- protect our website, customers, systems and staff from spam, fraud, security incidents and misuse;
- meet legal, tax, accounting, insurance, regulatory and dispute-resolution obligations.
When we share information
We do not sell personal information. We may share limited information with trusted providers where it is needed to operate the business or deliver services.
- Cloud, hosting, email, analytics, payment, ticketing, remote-support and security providers.
- Technology vendors, distributors or wholesalers where needed for licensing, support, warranty or service delivery.
- Professional advisers such as accountants, legal advisers, insurers or auditors.
- Government, regulatory or law-enforcement bodies where required by law.
Where a third-party provider processes information for us, we expect them to handle it responsibly and only for the relevant purpose.
Overseas services and cloud platforms
Some systems used by Compuloop or our customers may store or process information outside Australia. This may include cloud, analytics, support, email, hosting, security, payment or vendor platforms.
We choose reputable providers and use sensible access controls, but cloud services can involve international processing depending on the provider, configuration and service location.
Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Security controls may include access controls, MFA, encrypted services, secure backups, audit logs, staff access limits and vendor security controls.
We keep information only for as long as it is needed for the purpose it was collected, business records, support history, legal obligations, security evidence, dispute handling or legitimate operational needs. When information is no longer required, we take reasonable steps to delete, de-identify or securely archive it.
Access, correction and complaints
You can ask us to access or correct personal information we hold about you. We may need to verify your identity before responding.
If you have a privacy concern, contact us first so we can review it properly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. Information is available at oaic.gov.au.
Marketing communications
We may send service updates, business technology information or marketing material to existing customers and people who have contacted us. You can opt out of marketing communications at any time.
Important service, billing, security or support messages may still be sent where necessary.
Contact us
For privacy questions, access requests or correction requests, contact Compuloop at sales@compuloop.com.au or call 1300 007 613.
Questions about this page?
Privacy should be understandable. If something in this policy is unclear, contact us and we will help.