Privacy Policy
Last Updated: July, 2025
1. Introduction
ResiKEY (“ResiKEY”, “we”, “our”, “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our services. By using ResiKEY, you agree to the terms of this Privacy Policy.
2. Parent Company
ResiKEY is a product of Random Solutions Pty Ltd, which is the parent company responsible for the operation, management, and ongoing development of the ResiKEY platform. All references in this Privacy Policy to “we”, “our”, or “us” include both ResiKEY and Random Solutions Pty Ltd.
3. Information We Collect
We may collect the following types of information when you use ResiKEY:
Personal details such as your name and email address.
Mobile phone number (see Section 4).
Device information and usage data.
Access logs, authentication data, and security event information.
Any other information you voluntarily provide to us.
4. Collection and Use of Mobile Phone Numbers
As part of our account security and authentication process, we collect your mobile phone number. This number is used exclusively for multi-factor authentication (MFA) to verify your identity when accessing both our mobile and web applications.
MFA is delivered via SMS messages, which are mandatory security measures and therefore cannot be opted out of, as they are essential for protecting your account and ensuring secure access. Your mobile number will not be used for marketing or unrelated communications. When your account is deleted, all associated contact numbers are permanently removed from our systems.
5. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services.
- Authenticate users and secure access through MFA.
- Monitor system usage, troubleshoot issues, and enhance security.
- Comply with legal obligations and enforce our Terms & Conditions.
6. Disclosure of Information
We do not sell or rent your personal information. We may share information only with:
- Service providers assisting us in delivering our services (e.g., cloud hosting, authentication providers).
- Legal or regulatory authorities when required to comply with applicable laws.
- Other parties with your express consent.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure.
8. Data Retention
We retain your personal information only for as long as necessary to provide our services and comply with legal requirements. When you delete your account, all associated personal data, including mobile phone numbers, is permanently removed from our systems.
9. Your Rights
In accordance with the Privacy Act 1988 (Cth) and applicable international standards such as the General Data Protection Regulation (GDPR), you may have rights to:
- Access and update your personal data.
- Request deletion of your personal data.
- Withdraw consent (where applicable).
- Make a complaint to the relevant privacy authority.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Updated versions will be posted on our website.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your personal information, please contact us
here