Website Terms of Use & Privacy Notice A.C.N. 691 466 869 PTY LTD | ABN: 79691466869 Effective: 01 October 2025 Contact: privacy@eval-sec.com Applies to: eval-sec.com and any pages that link to these terms. 1. Acceptance of these terms By using our website, you agree to these Terms of Use and to our Privacy Notice below (together, “Terms”). If you do not agree, please do not use the site. 2. Changes We may update these Terms from time to time. The “Effective” date above shows the latest version. Continued use after changes means you accept the revised Terms. 3. Permitted use You may browse and use this site for lawful purposes. You must not copy, reproduce, republish, frame, or commercialise any site content except as permitted by law or with our written consent. 4. Prohibited conduct (including security) Do not attempt to interfere with, damage, scan, probe, or test the vulnerability of our site or related systems without our prior written authorisation. Do not bypass or attempt to bypass any security controls or access controls. Do not use automated means (including bots or scrapers) to access the site except for search engine indexing in accordance with robots.txt. If you believe you have found a security issue, please report it responsibly to security@eval-sec.com or via our Vulnerability Disclosure Policy at https://eval-sec.com/security.txt (we also publish /.well-known/security.txt). 5. Third‑party services and links This site may include integrations or links to third‑party services (for example, anti‑spam/abuse prevention and content delivery). Those services are subject to their own terms and privacy statements. We are not responsible for third‑party sites. 6. No professional advice Content on this site is general information only and is not legal, security, or professional advice. Obtain professional advice tailored to your situation before acting on any information here. 7. Liability and consumer guarantees (Australian Consumer Law) Nothing in these Terms excludes, restricts, or modifies any consumer guarantees, rights, or remedies under the Australian Consumer Law that cannot be excluded. To the extent permitted by law, and for non‑excludable guarantees, our liability is limited to resupplying the services or paying the cost of having the services resupplied. 8. Privacy Notice (how we handle personal information) We handle personal information in an open and transparent way and aim to align with the Australian Privacy Principles (APPs). 8.1 What we collect • Details you choose to submit via our contact form or email (e.g., name, email, and the message you send). • Technical data generated by your device/browser (e.g., IP address, user‑agent, timestamps, and diagnostic logs). • Anti‑abuse/anti‑bot signals produced by our security tools (e.g., Cloudflare Turnstile tokens). We do not intentionally collect sensitive information through the site and ask that you do not submit it. 8.2 How we collect • Directly from you when you submit the contact form or communicate with us. • Automatically via our website’s technical logs and security/availability tooling. 8.3 Why we collect, use, and disclose • To respond to enquiries, provide quotes/proposals, deliver and manage services, operate and secure our website and systems, and comply with law. • To maintain accurate records and manage our business (e.g., billing, audit, and insurance). 8.4 Third‑party service providers and data flows We use reputable service providers to help operate our website and business systems (for example, hosting, security/anti‑abuse and content delivery). These providers may process personal information in or outside Australia. We take reasonable steps to ensure those providers protect personal information consistently with Australian privacy law. We do not sell personal information. 8.5 Security We apply reasonable technical and organisational measures to protect personal information we hold against misuse, interference, loss, and unauthorised access, modification or disclosure. Examples include encryption in transit, access control, logging/monitoring, and periodic reviews. 8.6 Retention and deletion We retain enquiry information only for as long as needed for the purposes above and to meet legal/insurance requirements, after which we delete or de‑identify it. 8.7 Access and correction You can request access to, or correction of, your personal information by contacting us at privacy@eval-sec.com. We will respond within a reasonable time. 8.8 Overseas disclosures Where information may be processed overseas by our providers, we take reasonable steps to ensure recipients do not breach the APPs. Details of our key service providers are available on request. 8.9 Notifiable Data Breaches If we are covered by the Privacy Act and an eligible data breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required. 9. Cookies and analytics We may use functional cookies or similar technologies to operate the site and improve performance. Our anti‑spam/abuse mechanism (e.g., Cloudflare Turnstile) may set or read tokens necessary to distinguish humans from automated traffic. You can adjust your browser settings to manage cookies, though this may affect site functionality. 10. Intellectual property Unless stated otherwise, we own (or are licensed to use) all content on the site, including text, graphics, logos, and software. You are granted a limited, revocable licence to access the site for your own use. 11. Suspension or termination We may suspend or restrict access to the site (temporarily or permanently) if we reasonably believe you have breached these Terms or to protect the security, integrity, or availability of the site. 12. Governing law These Terms are governed by the laws of NSW, Australia. You submit to the non‑exclusive jurisdiction of its courts and courts of appeal. 13. Contact Privacy or security enquiries: privacy@eval-sec.com Vulnerability disclosure: https://eval-sec/security.txt 14. Definitions (plain English) • “Personal information” has the meaning given in the Privacy Act 1988 (Cth). • “APPs” means the Australian Privacy Principles under the Privacy Act 1988 (Cth). • “We/us/our” means A.C.N. 691 466 869 PTY LTD. “You/your” means site users. END OF TERMS