The short version

✅You can see your full results without giving us an email address
✅Your answers stay in your browser unless you ask us to email your results
✅Nothing goes to Cyber83 unless you tick the box asking us to send it
✅We don't require your business name for the free assessment
✅We don't sell your data. We never will.
✅Our server is in Australia. Document generation, email and payments use overseas providers, see below
✅You can delete everything with one request

Who we are

EssentialScore (essentialscore.com.au) is an Australian cybersecurity assessment tool operated by CyberPosture that helps SMBs understand and improve their security posture against the ACSC Essential Eight framework.

Taking the assessment

While you answer the questions, your answers stay in your browser (localStorage). Nothing is sent to us, and you do not need an account or an email address. You can see your full score, your breakdown and your gaps without giving us anything.

We do record anonymous page views (which pages are visited, roughly where in the world from, no names, no cookies used for tracking, no profiles). That happens on our own server in Australia using self-hosted Umami.

If you ask for your results by email

This is optional. If you do, we collect and store:

Your email address
Your phone number, only if you choose to enter one
Your overall score and your score for each of the eight mitigation strategies
Whether you ticked the sharing box described below

We send your results, then two follow-up emails with remediation tips. You can unsubscribe from any of it, and replying to any of our emails reaches a person.

Sharing with Cyber83

EssentialScore is built by the team behind Cyber83 Australia (cyber83.com), a managed security services provider. On the results page there is a tick box, unticked by default, asking whether you want your answers and business details sent to Cyber83 so they can contact you about closing the gaps your assessment found.

If you leave it unticked, nothing is sent to Cyber83. If you tick it, we send your email address, your score, your per-question answers and any industry and staff count you entered. Cyber83 handles that information under its own privacy policy.

We do not share your information with anyone else for marketing.

If you buy the gap report and policy templates

We additionally collect and use:

The business details you enter on the generation form (business name, and whatever optional fields you fill in)
Your assessment answers, which are needed to write the document around your gaps
Payment details, handled entirely by Stripe. We never see your card number

Your generated document is stored on our server so you can download it again.

Where your data is handled

Your stored results, generated documents and our analytics are held on our own server in Australia.

Three parts of the service use specialist providers that operate overseas: document generation and payment processing (United States) and email delivery (Japan). Each one only receives what it needs to do that job, and only uses it to provide the service to us.

Deleting your data

Email support@essentialscore.com.au and we will delete your record, including your email address, stored results and any generated documents. Clearing your browser storage removes the local copy of your answers at any time.

Your rights

Under the Australian Privacy Act 1988, you have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion of your data, including from Cyber83
Opt out of follow-up emails at any time

To exercise these rights, email us at support@essentialscore.com.au

Contact

Questions about this policy? Email support@essentialscore.com.au

Privacy Policy