How we keep your information safe

In plain terms

When you visit our website, fill in a contact form, or book an inspection, the information you send us travels across the internet. This page explains, without jargon, the technical safeguards that protect that information while it is in transit and once it reaches us. If you have any questions about how your data is handled, you can reach us on 0400 407 896 or jana@safetracebiohazard.com.

HTTPS — the padlock in your browser

Every page on safetracebiohazard.com is served over HTTPS — the secure version of the web. You can confirm this by looking for the padlock icon next to the address in your browser. HTTPS means the connection between your device and our website is encrypted, so nobody intercepting the traffic on the way can read or alter what is being sent.

We never serve any part of our website over an unencrypted connection. If you ever try to load an insecure (http) version of a page, you are automatically redirected to the secure HTTPS version.

HSTS — forcing the secure connection

HSTS (HTTP Strict Transport Security) is a setting we send to your browser the first time you visit us. It tells your browser: always connect to SafeTrace over HTTPS, and never fall back to an insecure connection — even if a link, a bookmark, or a mistyped address tries to use plain HTTP.

This protects you from situations where an attacker might try to downgrade your connection to insecure HTTP on an untrusted network (such as public Wi-Fi). Once your browser has remembered the HSTS instruction, it will refuse to load our site insecurely until the instruction expires.

Encryption in transit — TLS

The encryption that protects HTTPS connections is provided by TLS (Transport Layer Security). Our site negotiates modern TLS (up to TLS 1.3, the strongest version widely available). When you submit a contact form or booking request, your name, email, phone number, and the details of your enquiry are all scrambled into ciphertext before they leave your device, and only our server holds the key to decrypt them.

This means that even if someone were able to observe the traffic between you and our site, they would see only encrypted data — not your personal details.

Encryption at rest

Once your information reaches us, it is stored in our systems with encryption at rest — meaning the stored data is itself encrypted on disk. Access to the systems that hold enquiry and booking records is restricted to authorised personnel and is logged. We retain records only for as long as is necessary to deliver the service and meet our legal and professional obligations, after which they are deleted or anonymised.

Australian Privacy Principle 11

We apply Australian Privacy Principle 11, Security of Personal Information, by taking reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. When personal information is no longer required and no retention obligation applies, we securely delete or de identify it.

Tamper evident report records

Inspection reports and supporting records follow tamper evident audit standards. Relevant actions, report versions, and authorised access are recorded so changes can be traced and the integrity of each report can be verified.

Confidentiality for every client

Site addresses, enquiries, findings, laboratory results, reports, and client records are strictly confidential. Access is limited to authorised people and information is disclosed only with client authority, where required to complete the service under confidentiality obligations, or where required by law. These protections apply to homeowners, insurers, and commercial clients.

How we handle cookies

Cookies are small pieces of data stored in your browser. Our approach is deliberately minimal:

• Essential cookies only. We use the minimum cookies required for the website to function — for example, remembering your form input as you move between steps of a quote or booking, and keeping you signed in to any secure area you have accessed.
• No advertising or third-party tracking cookies. We do not sell or share your data with advertising networks, and we do not embed third-party advertising trackers on our pages.
• Analytics is privacy-respecting. Any traffic analytics we run is aggregate and does not track you across other sites or attempt to identify you personally.

You can clear or block cookies at any time through your browser settings; our site will continue to work, though some form features that rely on a short-lived session may need you to re-enter details.

Forms and bookings

When you submit a contact form, request a quote, or book an inspection, the details you enter are transmitted over the encrypted HTTPS connection described above and routed to the SafeTrace team. Your enquiry details are used solely to respond to you and deliver the service you requested — they are not used for any other purpose, as set out in our Privacy Policy.

Payment links, where offered, are processed by our payment provider over their own separately encrypted connection. Card details never pass through or are stored on SafeTrace systems.

Keeping these safeguards current

Our hosting and security configuration is managed on infrastructure that enforces HTTPS and HSTS at the edge, with TLS certificates kept current and renewed automatically. We review these settings periodically and whenever standards change. If a security issue is ever identified that could affect your data, we will act promptly and, where relevant, notify affected clients in line with our obligations.

Questions

If you have a question about how your information is protected, call us on 0400 407 896 or email jana@safetracebiohazard.com. For our full data handling practices, see our Privacy Policy and Terms.