Privacy and Data Handling Policy

1. Scope

This policy covers how Mac Technical Support Pty Ltd (Mac Smart) collects, uses and protects personal and technical information belonging to its clients and website visitors.

2. Information collection

• Direct collection: we collect names, email addresses and phone numbers through our website contact form, to respond to service enquiries.
• Service delivery data: to provide managed IT services, we store technical data including network configurations, device identifiers and administrative credentials.
• Credential management: client passwords and sensitive access keys are managed using hardware-encrypted vaults (Apple Keychain) and multi-factor protected, restricted-access documentation within Google Workspace.

3. Use of data

Data is used solely for:

• Providing technical support and network management.
• Monitoring system health and security (through SentinelOne and UniFi).
• Performing offsite backups as set out in service agreements.

4. Data security and storage

• Encryption: all data at rest on Mac Smart systems is encrypted using FileVault or equivalent hardware encryption.
• Access control: multi-factor authentication (MFA) is mandatory for all administrative portals, including Google Workspace and network management tools.
• Backups: our standard recommendation and service model is based on a 3-2-1 backup method. Where engaged to do so, we store client data across multiple locations, including encrypted offsite cloud repositories and local hardware-encrypted storage. Each client's backup configuration is set by their service agreement and infrastructure.

5. Data retention and destruction

• Financial records: retained for 7 years, as required by Australian tax law.
• Client technical data: retained for the duration of the service agreement.
• Destruction: when services end, client credentials are removed from our repositories within 30 days. Physical media (hard drives) are cryptographically wiped or physically destroyed before disposal.

6. Disclosure to third parties

We do not sell client data. Technical data may be shared with upstream vendors (such as Apple, Google and Ubiquiti) only as required for hardware warranty or cloud service provisioning.

Questions about privacy

Call 1300 622 762 or send us a message.