Cookies Policy.

This Cookies Policy explains the cookies, scripts, and similar technologies we use on www.ironsights.com.au, what they collect, why we use them, and how you can control them.

A cookie is a small text file that a website stores in your browser. Cookies are used to remember preferences, keep you signed in, measure how a site is used, and detect abuse.

When this policy refers to "cookies", we also mean closely related technologies: scripts that record analytics events, the browser's local storage (used by the Essential Eight self-assessment to save your progress on your device), and information about your request that any website naturally sees (such as your IP address and user agent string).

Most cookies are either strictly necessary for the website to function, or used to help us understand how the site is performing in aggregate. Whether analytics and advertising cookies are set by default depends on where you are. In the EU and EEA, the United Kingdom and Switzerland, we show a consent banner on your first visit and nothing beyond strictly necessary storage is set until you choose Accept All; until then our tags run in a cookieless mode that stores nothing on your device. Everywhere else, including Australia, those cookies are set from your first visit, and you can turn them off at any time using the button at the end of this page.

Our website uses the following third-party tools. Each is loaded only where it is required, and most are loaded only on the production site (not on staging or local development). All of them honour your consent choice: where a banner is shown they run cookielessly until you choose Accept All, and wherever you are, choosing Essential Only stops them setting cookies from that moment on.

We review the tools we use periodically and update this list when they change.

When you submit a form on our website, we record the IP address and user agent string from the request headers. This is not a cookie, but it is request-time data worth being transparent about.

These signals are used solely to detect and respond to abuse: applying per-IP rate limits, identifying patterns of automated submission, and following up on attempted attacks against the website. They are never used for marketing, and they are not shared with third parties except as required by law.

Local-storage entries used by the assessment are namespaced under "ironsights.e8.v1" and can be removed at any time by clearing your browser's storage for our site.

The website stores a few other first-party values in your browser, none of which are shared with third parties: "is-cr" (a cookie, 12 hours) records only whether your country requires an opt-in consent banner, which is worked out from your network location at our edge and never stored, "ironsights.consent.v1" (local storage) records your cookie choice for 12 months, "ironsights.consent.dismissed" (session storage) remembers that you closed the banner for the rest of the visit, "is_journey" (session storage) keeps the list of pages you viewed this visit so that an enquiry you submit reaches us with its context, and "is_lp_attribution" (local storage) records which campaign brought you to our landing pages so a later enquiry is attributed correctly.

If you choose to submit the optional "email me the report" form at the end of the assessment, that submission and the resulting email dispatch are governed by the Privacy Policy.

Many websites in our industry load a stack of advertising and social-media tracking pixels by default. We keep that list short, and the trackers we do use stay cookieless until you opt in.

Specifically, our website does not load or use:

The trackers we do use all honour your choice. Where an opt-in banner is legally required, it appears on your first visit and nothing beyond strictly necessary storage is set until you choose Accept All. Elsewhere, including Australia, where there is no opt-in requirement for analytics cookies, they run from your first visit and you can switch them off whenever you like. If we ever add a tracker that materially changes this position, we will update this policy first.

You have several layers of control over cookies and trackers on our website:

Blocking cookies may affect some site features, but it will not prevent you from reading our content, contacting us, or completing the Essential Eight self-assessment.

We may update this policy when we change the tools we use, or in response to legal or regulatory changes. The "Last updated" date below indicates when the most recent change took effect. Material changes will be highlighted on the website. We encourage you to review this policy periodically.