Effective date: 23 January 2026
Version 3.1
1. Who we are & how to contact us
Legal entity: Innovative Control Solutions Pty Ltd (ABN 33 602 766 727)
Business names: Blu Sky Security, Alarmify
2. Scope
This Policy covers personal information handling for:
- Enquiries and sales conversations (phone, email, web forms, chat)
- Quotes, proposals, and customised system design
- Online orders and package purchases
- Onsite inspections, installation, commissioning, and training
- Servicing, maintenance, troubleshooting and support
- Alarm monitoring services and alarm response administration
- Billing, payments, accounts management, and customer administration
- Websites, portals and mobile apps (including cookies/analytics)
3. What personal information we collect
A) Identity & contact details
- Name, email, phone, addresses
- Company name, job title, ABN (if provided)
B) Site & service information
- Installation and billing address
- Access instructions (gate codes, parking, pets, site induction notes)
- Authorised contacts and nominated responders
- Service records, technician notes, job logs and support tickets
- Device identifiers/serial numbers, configuration and commissioning data
- Alarm event logs (arming/disarming, sensor activations, system health events)
C) Security imagery & recordings (where applicable)
- Alarm-triggered images or video clips
- CCTV footage provided for diagnostics/support or managed as part of services
D) Billing & payment information
- Invoices, payment references, transaction identifiers
Full card numbers are not stored. Payment providers handle card data with PCI compliance.
E) Website/app technical data
- IP address, device/browser type, operating system
- Cookies and similar technologies, including analytics identifiers
- Login credentials (username); passwords stored with industry-standard encryption
F) Credit-related information (where applicable)
- Credit-related data handled when authorised
- Credit reports obtained from credit reporting bodies per Credit Reporting Notice
G) Testimonials and reviews
- Collected testimonials with permission
- Publicly available reviews from third-party platforms (e.g., Google Reviews)
4. How we collect personal information
Information is collected when you:
- Contact us by phone, email, form, or online chat
- Request quotes, proposals, security evaluation or consultation
- Place orders online or sign up for services
- Book or receive installation, servicing or maintenance
- Use portals/apps (e.g., Alarm.com user interfaces)
- Interact with our websites (cookies/analytics)
- Are nominated as an authorised or monitoring contact
Information may also come from third-party service providers including monitoring centres, Alarm.com, and equipment manufacturers.
5. Why we collect, hold, use and disclose personal information
Provide and manage services
- Prepare quotes, proposals and system designs
- Schedule and complete installations, servicing, upgrades and maintenance
- Commission systems and provide user training
- Provide ongoing support and troubleshooting
- Administer monitoring services and alarm response arrangements
Manage accounts & billing
- Process payments, issue invoices and manage accounts
- Administer subscriptions and post-paid services
- Manage failed payments and account administration
Communicate with you
- Send order confirmations, scheduling details and service updates
- Deliver critical service, safety and security notifications
- Respond to enquiries and support requests
Improve and protect our services
- Security monitoring, fraud prevention and risk management
- Auditing, analytics and product/service improvement
- Quality assurance and training (including call recording)
Comply with legal obligations
- Comply with applicable laws, regulations, standards and lawful requests
6. When we disclose personal information
Information may be disclosed to third parties including:
- Installation technicians and subcontractors
- Monitoring centres and emergency response administrators
- Cloud platforms and technology partners (e.g., Alarm.com)
- Payment processors (Stripe, GoCardless)
- Manufacturers/wholesalers for warranty
- IT, CRM and job-management providers
- Couriers and logistics providers
- Professional advisers
- Law enforcement or regulators if legally required
We do not sell your personal information.
7. Overseas disclosures (including cloud services)
Some service providers may store or process information overseas, including cloud infrastructure supporting Alarmify and Blu Sky systems.
We take reasonable steps to ensure overseas recipients handle personal information in accordance with the Australian Privacy Principles (APPs). Credit-reporting information is not disclosed overseas.
8. Credit reporting (if applicable)
We may conduct credit checks for post-paid service eligibility when authorised. Full details appear in the separate Credit Reporting Notice.
9. Direct marketing
You may receive product and service updates from us. You can opt out at any time via the unsubscribe link in any communication or by contacting our Privacy Officer.
10. Cookies & online technologies
We use cookies and similar tools to operate our websites, secure accounts, improve performance and measure usage. You can adjust cookie settings in your browser at any time.
11. Security of personal information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Controls include:
- Encryption in transit and at rest
- Access controls and role-based permissions
- Multi-factor authentication for admin systems
- Logging and monitoring
- Staff training
- Supplier due-diligence and contractual safeguards
No transmission or storage method is completely secure, but we maintain safeguards appropriate to the sensitivity of the information held.
12. Data retention & deletion
We retain data only as long as necessary to provide services or meet legal obligations. When information is no longer required, we take reasonable steps to destroy or de-identify it, unless a legal retention requirement applies.
13. Access and correction
You may request access to or correction of any personal information we hold about you. We will respond within a reasonable timeframe and explain if we are unable to comply with a request.
To make a request, contact our Privacy Officer using the details in section 1.
14. Anonymity and pseudonymity
Where lawful and practicable, you may interact with us anonymously (for example, general enquiries). Identity confirmation may be required for certain services.
15. Children's privacy
Our services are intended for adults and businesses. Where we become aware that personal information has been collected from a child, we will delete it where required by law.
16. Notifiable Data Breaches (NDB) scheme
If an eligible data breach occurs, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Privacy Act 1988 (Cth).
17. Complaints
If you have a privacy concern or complaint, please contact our Privacy Officer (see section 1). We will acknowledge your complaint and aim to resolve it within 30 days.
If your complaint remains unresolved, you may contact the OAIC at oaic.gov.au.
18. Updates to this Policy
We may update this Policy from time to time to reflect changes in our practices or legal requirements. An updated effective date will be posted at the top of this page.
This Policy should be read alongside:
- Credit Reporting Notice (where applicable)
- Relevant product and service terms, including monitoring/service terms (where applicable)