Terms of Sale
These terms apply when you buy a report from us. Please read What this report is not, because it is the section that matters most.
This site is operated by PRIVACY PICKET PTY LTD (ACN 655 636 981, ABN 11 655 636 981), a company registered in Victoria, Australia.
Who you are buying from
Purchases are sold and processed by our payment provider acting as merchant of record. They are the seller of record on the transaction, and their name is what appears on your receipt and your statement. They handle payment processing and any sales tax, VAT, or GST that applies where you are. We produce and deliver the report.
What you get
A report personalised to the answers you gave in your self-assessment, covering three areas:
- the business decisions to make
- how to bring your people along
- the technical implementation steps, with sources
The price is the one shown at checkout, in the currency shown there, before you confirm. The report is delivered immediately after purchase, and you can retrieve it again later using the licence key we issue.
This is a one-off purchase. It is not a subscription. Nothing recurs and there is nothing to cancel.
What you may do with it
You bought it, so use it. Specifically, you may:
- read it, print it, and keep it
- share it with your own staff
- give it to your IT provider, managed service provider, or contractor so they can act on it
- give it to your insurer, broker, auditor, or a client asking about your security posture
That last group is a large part of the point of the report, so sharing it there is expected, not merely tolerated.
You may not resell it, republish it publicly, or present it as your own work product to third parties for commercial gain.
What this report is not
Please read this part. It defines what you are and are not buying.
- It is not a security audit. Nobody inspected your systems. The report is built entirely from answers you supplied about your own environment.
- It is not a certification, attestation, or assessment of compliance with the Essential Eight, ACSC guidance, ISO 27001, SOC 2, or any other framework, standard, or regulation. It does not make you compliant with anything, and it is not evidence that you are.
- It does not guarantee any security outcome. Following it will improve your position. It will not make you immune to a security incident, a breach, ransomware, or a claim, and nothing in it should be read as promising otherwise.
- It is not legal, insurance, financial, or professional advice. If you need advice of that kind, get it from someone qualified to give it.
- Its accuracy depends on your answers. If what you told us does not reflect your actual environment, the report will not either. We cannot verify what you told us.
- Cost, timeline, and scope figures are estimates. They are general indications for a business of the size you described. They are not quotes, and not a commitment by us or by anyone else.
Security guidance goes out of date. The report reflects our content and generally accepted practice as at the date it was produced, and we do not undertake to update it afterwards. Our Disclaimer covers the limits of self-assessment in more detail and applies to the report as well.
Refunds
30 days, no questions asked. See our Refund Policy.
Privacy
See our Privacy Policy. In short: the assessment runs in your browser, your answers reach us only at the moment you buy, and we keep the finished report rather than your raw answers.
Your licence key
We issue a licence key so you can retrieve your report later. Treat it as a password. Anyone holding it can retrieve your report, so we are not responsible for access obtained by someone you gave the key to, whether deliberately or not.
If you lose it, email services@privacypicket.com from the address you bought with.
Availability
We will keep your report retrievable for at least 12 months from purchase. If we ever have to withdraw the service before then, we will email you a copy of your report first, at the address you bought with.
Outside that commitment we cannot promise uninterrupted availability, because no small business honestly can. Download your own copy and keep it. That is the safest thing for both of us.
Limitation of liability
To the maximum extent permitted by law, and subject to Your consumer rights below:
- We are not liable for any indirect, incidental, special, or consequential loss, including lost profits, lost data, business interruption, reputational harm, or the cost of responding to a security incident.
- Our total liability arising out of or in connection with your purchase, on any basis whatsoever, is limited to the amount you paid for the report.
A report at this price cannot carry the liability of a professional engagement, and this limitation is a reasonable allocation of risk reflected in what you paid.
Your consumer rights
Nothing in these terms excludes, restricts, or modifies any guarantee, right, or remedy you have under the Australian Consumer Law, or under any other law that cannot lawfully be excluded. Any term that tried to do so has no effect to that extent. Where our liability for failing to meet a consumer guarantee can lawfully be limited, it is limited to resupplying the report or paying the cost of resupply.
This overrides the limitation of liability above. Where the two conflict, this section wins.
Our goods and services come with guarantees that cannot be excluded under the Australian Consumer Law. For major failures with the service, you are entitled to cancel your service contract with us and to a refund for the unused portion, or to compensation for its reduced value. You are also entitled to choose a refund or replacement for major failures with goods. If a failure with the goods or a service does not amount to a major failure, you are entitled to have the failure rectified in a reasonable time. If this is not done you are entitled to a refund for the goods and to cancel the contract for the service and obtain a refund of any unused portion. You are also entitled to be compensated for any other reasonably foreseeable loss or damage from a failure in the goods or service.
If you are a consumer in the EU or the UK, your statutory rights are unaffected by these terms.
Governing law
These terms are governed by the laws of Victoria, Australia, and you and we submit to the non-exclusive jurisdiction of its courts. If you are a consumer, this does not deprive you of the protection of the mandatory consumer law of the country you live in.
If part of these terms does not hold up
If any term here is found to be unenforceable, or unfair under the Australian Consumer Law, that term is severed and the rest continue to apply. We would also rather know about it, so tell us and we will fix the wording.
Changes
We may update these terms. The version that applies to your purchase is the one published at the time you bought.
Contact
PRIVACY PICKET PTY LTD
ACN 655 636 981 · ABN 11 655 636 981
Last updated: August 2026