Privacy policy

This policy explains how Cylinder collects, uses, holds and discloses personal information through this website, and how you can access or correct it.

Cylinder is an Australian business and handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

By using this website you agree to the handling of personal information as described here. If you do not agree, please do not use the site.

Cylinder provides software that lets businesses verify recognised digital credentials.

To be confirmed: The legal entity name, ABN, and registered address of the company that operates this website.

This policy covers the website only. Where a business uses Cylinder to run verification checks, that business is the entity responsible for the personal information involved, and Cylinder acts on its instructions under a separate written agreement.

Cylinder is designed so that a verification returns a derived claim, such as whether a person is over 18, rather than a date of birth or a copy of a document. How that works is set out in our privacy guide, which describes product behaviour rather than legal obligations.

We collect only what you give us, and a small amount of technical information generated when you visit.

Demo requests. The name, work email address, and the types of check you select in the booking form.

Correspondence. If you email us or reply to us, we hold that correspondence and the address it came from.

Website analytics. Aggregate information about how the site is used, such as which pages are viewed, approximate location at a country or city level, referring site, and general device and browser type.

Server logs. Standard request logs generated by our hosting provider, which may include IP address, as part of operating and securing the site.

We do not ask you to create an account on this website, and we do not collect identity documents or credential data through it.

To reply to you and to prepare a demonstration relevant to the checks you told us you need.

To keep a record of our dealings with you.

To understand which pages are read and where the site can be improved.

To operate, secure and troubleshoot the website.

We use personal information only for the purpose it was given, for a directly related purpose you would reasonably expect, or where the law requires it.

We do not sell personal information.

We do not disclose it to third parties for their own marketing.

We do not build advertising or behavioural profiles of visitors, and we do not carry third-party advertising trackers.

We do not use demo request details for anything other than responding to and managing that enquiry.

This site uses website analytics to count visits and understand which pages are read. That information is used in aggregate; it is not used to identify you personally and it is not combined with your demo request.

Your browser may also store a small amount of data for the site to function, such as remembering whether you have chosen a light or dark theme. That preference is stored on your own device and is never sent to us.

Most browsers let you block or clear cookies and site data. Doing so will not stop you using this site, though a preference such as your theme will not be remembered.

To be confirmed: The analytics provider in use, and whether it sets cookies, so this clause can name it. If a consent banner is required for that provider, it needs to be added to the site.

We use service providers to run this site and to reach you, including hosting, website analytics, and email. They process information on our behalf, under contract, and may not use it for their own purposes.

We may also disclose personal information where it is required or authorised by law, or to protect our rights or the safety of others.

To be confirmed: The service providers actually in use (hosting, analytics, email or CRM), and whether any of them store data outside Australia. Overseas disclosure must be stated under APP 8.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Access is limited to those who need it to do their job.

No transmission over the internet can be guaranteed completely secure, and we do not warrant that it is.

A demo request and the correspondence around it are kept while the enquiry is live and for a reasonable period afterwards, so we can pick the conversation back up and meet our record-keeping obligations.

Analytics information is held in aggregate. Server logs are retained for a short period for security and troubleshooting.

When information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to keep it, we destroy it or de-identify it.

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to us at the address below and we will respond within a reasonable time, and in any case within 30 days.

We may need to verify who you are before acting on a request. If we refuse a request, we will tell you why in writing.

If you believe we have mishandled your personal information, contact us first and we will investigate and respond.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy as the product and our practices change. The current version is always the one published here, and the date it was last updated is shown at the top of this page.

Questions about this policy, or a request about your personal information, can be sent to us in writing.

To be confirmed: The email address privacy enquiries should be sent to, and a postal address if one is to be published.