Privacy policy

West Protect | Effective from: 1 September 2026
Last updated: 16 October 2026 · Privacy version: WP-PRIVACY-2026-10-16

West Protect provides CCTV, intruder alarm, access control and related security installation and support services, including supplying equipment for agreed jobs.

It covers website visits, enquiries, quotations, equipment purchases, installation, support and any separately agreed device-health service.

1. Contact us

Contact us below with a privacy question, a request to access or correct information, or a complaint.

support@westprotect.com.au · 0422 226 436

2. Information we collect

Depending on your enquiry or service, we may collect:

• Your name, contact details and installation or billing address.
• Information about the property, requested work and your authority to arrange it.
• Quotations, agreements, invoices, payment status and correspondence.
• Equipment models, serial numbers, configuration information, service history and diagnostic records.
• Relevant installation photographs, layouts and information needed to assess or resolve a fault.
• Records of permissions you give for access, testing or support.

We ask for information reasonably needed for the task. Do not include passwords, access codes, unnecessary identity documents or sensitive footage in a general enquiry.

We usually receive information directly from you during an enquiry, quotation, job or support request.

Optional website activity measurement

Optional measurement is off until you enable it in the footer’s website measurement preferences. We store daily totals for allowed pages and actions such as opening a guide or clicking a call button. These activity records contain no customer contact details, IP addresses, individual event history, referral addresses or visitor identifiers. A local browser preference remembers your choice; browser privacy signals keep optional measurement off. Aggregate totals older than 13 months are removed when measurement, enquiry processing or reporting next runs. Hosting providers still process technical information needed to serve and secure the website.

We also count a received enquiry once when it is saved, independently of optional measurement. The enquiry itself contains the details you submit and is kept in the private owner inbox under the record-handling arrangements below.

Enquiry email alerts

Where email alerts are enabled, the Resend email sending service receives a request type, reference and private inbox link for an alert to West Protect. The reference is operational information that West Protect can match to the original enquiry. Customer contact details and the enquiry message are kept out of that alert. Processing locations depend on the email provider and account arrangements. Alert failures do not undo a saved enquiry.

Where necessary and lawful, we may also receive information from your authorised representative, a supplier or manufacturer, or equipment covered by an agreed diagnostic service.

3. How we use information

We use relevant information to:

• Respond to enquiries and prepare quotations.
• Arrange and complete agreed work.
• Communicate about appointments, invoices, warranties and support.
• Configure authorised services and investigate faults.
• Maintain appropriate business and service records.
• Manage safety, security, complaints and legal obligations.

You can ask a general question by phone without giving your name where practical. For an online general enquiry, a name or alias is optional, but we need a reply contact to answer you; it is not an anonymous online channel. To quote, visit a property or provide ongoing support, we normally need contact and site details. Without necessary information, we may be unable to provide that service.

4. Enquiries, customer records and signed forms

We may keep enquiry details to respond, prepare a requested quote and carry out reasonable follow-up. A signed customer form is not required for those purposes.

When arranging an agreed paid service, we provide the policy and ask you to acknowledge the necessary job records and their purposes. This acknowledgement records that the information was provided; it is not blanket consent to marketing, optional device-health services, configuration changes or viewing/copying footage. Those permissions are separate. Necessary records may be kept on another lawful basis where applicable.

For brief informal help without an agreed paid service, we do not intentionally create an ongoing customer, installation or service record. The original enquiry still exists in the website database or the relevant communication system. It does not disappear because no job agreement was signed; retention is explained in section 11.

Your acknowledgement does not remove legal rights or obligations. We may need records without a signed form, or after a permission is withdrawn, to finish requested work, protect safety or security, resolve disputes, or meet accounting, tax, warranty, insurance, legal or regulatory requirements.

4A. Job agreements, completion records and handover

Job records include the signed agreement, relevant tests and inspections, required certification, and completion and handover records. They may contain names, signatures, dates, work descriptions, test results, instructions and outstanding matters. We keep them to document the work and support servicing, warranties, complaints and legal requirements.

West Protect's written completion confirmation is issued after the agreed work and relevant checks have been completed. West Protect signs the commissioning record first; the customer then signs to acknowledge the handover and operating instructions. The internal commissioning and handover process is fully signed off when both signatures are recorded. If acknowledgement is outstanding, we record that status and arrange follow-up without withholding legally required documents. A signed enquiry, information form or job agreement is not, by itself, certification that a system is complete or compliant. The completion process and the scope of any confirmation are explained in section 5A of our Website and Service Terms.

Privacy protections and applicable information-handling obligations do not wait until completion, payment or a customer's signature. A handover acknowledgement is not consent to unrelated marketing, footage use or ongoing system access, and does not waive legal rights. Required records may be retained for the purposes and periods explained in this policy even if a completion acknowledgement is not signed.

5. CCTV footage and access to your system

During installation and testing, we may need to view images or play recordings to check the included functions. Later remote viewing, playback or copying requires appropriate authority for the specific task.

Access is limited to what the authorised task reasonably requires. Before copying support footage, we agree its purpose, recipient, transfer method and retention with you or another authorised person.

We do not routinely collect or store customer CCTV footage as part of ordinary device-health monitoring.

Installation or servicing permission does not cover advertising use of identifiable footage, job photographs or customer details. We obtain separate permission for that purpose.

For business or shared premises, we record who can authorise access and what that authority covers. Arranging a visit does not automatically authorise access to footage, staff or resident records, or another person’s account.

6. Optional DoLynk Care services

DoLynk Care requires you to nominate, or “entrust”, West Protect as the service provider through your compatible DMSS account. Without that customer-controlled entrustment, we do not receive ongoing DoLynk device-health reports for your system.

During an agreed paid DoLynk Care service, the platform may report supported equipment-health events while West Protect remains entrusted. Depending on the equipment, these can include offline devices, recording errors, storage faults and hard-drive warnings.

The platform may process device identifiers and technical details to match a fault report to the equipment and service record. Device-health reporting alone does not authorise live viewing, playback or configuration changes.

You control the entrustment relationship in the DMSS app and can withdraw it at any time using the supported DMSS controls.

A device-health service is not professional alarm monitoring or an emergency response service.

7. Temporary configuration access

Temporary DoLynk configuration access is available only while you have entrusted West Protect as your service provider in the DMSS app. You control this entrustment and can withdraw it at any time using the supported DMSS controls. Without your entrustment, we do not request or begin temporary DoLynk access. Entrustment does not replace the two separate approvals below.

Before requesting temporary DoLynk Care configuration access, we send both an email and a text message stating the proposed date, time, purpose and duration.

You must first approve the proposal by replying by email or text. Silence is not approval. We do not send the platform access request before receiving your reply.

After that approval, we send the DoLynk Care access request for your separate approval in DMSS. Access does not begin until you approve this second request.

The session is limited to the approved task and duration, with a maximum of eight hours per approval and a shorter period where appropriate. We check the equipment and app’s permission, expiry and revocation controls before requesting access. We stop when the task finishes, the agreed time ends or you withdraw permission, whichever happens first. A longer platform permission does not authorise us to continue.

We do not approve requests for you, bypass approval or ask for your password or one-time login code. If the system cannot support the separate approval process, we discuss another support method. You can withdraw entrustment or access permission at any time using the supported DMSS controls. You can also contact us to stop a session.

Changing the approved date, time, task or duration requires a new email and text notice, a fresh email or text approval, and the separate DMSS approval.

8. Who we share information with

We may share relevant information where reasonably necessary with:

• People authorised to help deliver the agreed work.
• Suppliers and manufacturers involved in equipment support or warranty assessment.
• Providers supporting business communications, record storage, invoicing or other administration.
• Professional advisers.
• Authorities or other parties where disclosure is legally required or authorised.

We share information only for the relevant purpose and seek appropriate confidentiality and security arrangements.

We do not sell personal information.

9. Third-party services and overseas handling

These are globally operated services. OpenAI Sites does not currently offer data-residency controls, so we do not promise Australian-only processing or storage. A provider's head-office address is not evidence of the countries receiving your information. Manufacturer app, communications and payment arrangements depend on the services actually used for your job.

Email systems, business software, manufacturer apps and cloud services may process information outside Australia. Locations depend on the provider and account arrangements.

Before arranging overseas disclosure, we identify the providers and, where practicable, the countries involved, and take the steps required by applicable privacy law. Ask us which providers are involved in your service.

Manufacturer apps, cloud services and other websites may have their own privacy policies. We identify relevant services when arranging their use; this policy is not a blanket waiver of privacy protections.

10. Our website

The enquiry form saves your supplied name, contact details, suburb, message, selected service or package, reply preference and enquiry context in the website database. It also records a request reference, timestamps, review status and the version of the permission to respond. A reference is shown after a successful submission. Access to the enquiry inbox is restricted to the authorised owner.

Hashed contact and network identifiers help limit repeated submissions, and a hash of the submitted details helps recognise a retry. Hashing obscures an identifier but does not guarantee anonymity: hashes can link submissions and may remain personal information. Contact details are also stored separately so we can respond. The rate-limit windows do not delete records or hashes; their retention follows section 11. Monthly checklist ticks stay temporarily in the page and are not sent to West Protect.

The website uses OpenAI Sites and Cloudflare hosting infrastructure. Hosting and security services may process IP addresses, browser details, requested pages and access times to operate and protect the site. The current site has no advertising pixels, third-party analytics, embedded maps or payment checkout.

A visit or enquiry is not permission for unrelated advertising or unrestricted tracking. If an additional website service needs a specific notice or choice, we will provide it.

External links may take you to websites operated by other organisations. Their information handling is governed by their own arrangements.

11. Security and retention

We take reasonable protective steps suited to the information and the risks of loss, misuse or unauthorised access or disclosure.

We keep information for as long as reasonably needed for its authorised purpose or a legal requirement. When no longer required, we take reasonable steps to securely delete or de-identify it.

WA security legislation requires us to keep prescribed engagement and service records, including who engaged us, the security supplied and who supplied it. Prescribed records must be preserved for three years after the last entry; other legal requirements may require some records to be kept longer. This does not mean customer CCTV footage is routinely copied or kept for three years. Withdrawing an optional permission does not require deletion of records we must lawfully retain.

An authorised support copy of footage is kept only for the agreed purpose and period, unless the law requires preservation.

No system offers absolute security. Contact us promptly about suspected unauthorised access to information we hold. We assess what happened, the information and people affected, the risk of serious harm and available remedial steps. Where the Notifiable Data Breaches scheme applies, we take reasonable steps to complete a suspected eligible-breach assessment within 30 calendar days and notify the OAIC and affected people as soon as practicable when required. This is not permission to wait 30 days before responding to an incident.

12. Payments

West Protect does not store or retain customers' payment card details or online banking credentials.

Third-party payment providers or financial institutions may process payments under their own privacy and security arrangements.

We may keep ordinary transaction records—such as amounts, dates, invoice numbers and payment status—for accounting, tax and business requirements. These records may still be needed after an authorisation is withdrawn.

13. Service messages and marketing

We use your contact details for relevant enquiries, jobs, invoices, warranties and agreed services.

Optional marketing must meet applicable consent and unsubscribe requirements. Contact us or use the provided unsubscribe option to stop marketing; necessary service messages may continue.

14. Access, corrections and complaints

Contact us to ask what personal information we hold, request a correction or raise a concern.

Before releasing information, especially security-system details, we may need reasonable proof of identity or authority.

We consider requests and complaints within a reasonable time and under applicable law. A lawful exception, retention requirement or another person’s privacy or security may limit what we can provide. Where appropriate, we explain the decision and available next steps.

For a complaint, tell us what happened, when, the relevant request or job reference and the outcome you seek. We consider it, investigate relevant records and explain our response and any next steps. You can ask for the business principal to review an unresolved response.

If a privacy concern remains unresolved, you can contact the Office of the Australian Information Commissioner where it has jurisdiction. The OAIC generally asks you to complain to the business first and allow 30 days for a response. That guidance does not create a universal deadline for every type of request or complaint. Applicable rights do not depend on accepting this policy.

15. Updates to this policy

We update this policy when practices, services or legal requirements change. The date above identifies the current version.

An update does not retrospectively grant consent to a new use of information. Contact us with questions about your enquiry or service.

Read our Website and Service Terms