Privacy Policy

WA Central Security (operating as WA Central Security Pty Ltd, WA Police Security Agent Licence #SA58248) is committed to safeguarding the privacy, confidentiality, and data integrity of all clients, property owners, commercial tenants, and visitors to our website and serviced premises.

This Privacy Policy sets out our policies and operational protocols regarding the collection, handling, storage, disclosure, and protection of personal information. We operate in strict compliance with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), the Security and Related Activities (Control) Act 1996 (WA), and the Surveillance Devices Act 1998 (WA).

Statutory Compliance Commitment: As a Western Australia Police licensed security contractor, WA Central Security upholds the highest statutory standards of confidentiality. We treat all site layouts, security codes, alarm telemetry, and surveillance recordings with paramount institutional security.

Due to the specialised nature of security engineering, physical alarm installation, and 24/7 back-to-base monitoring, we collect information necessary to design, commission, support, and monitor your security infrastructure:

2.1Client Identification & Contact Information

• Individual Details: Full legal name, residential address, business trading name, billing address, and contact numbers.
• Emergency Response Contacts: Names, priority contact telephone numbers, and designated keyholder verifications for alarm response dispatches.
• Financial Information: Direct debit authorities, credit card details processed via PCI-DSS compliant gateways, and invoicing records.

2.2Site Architecture & Technical Security Telemetry

• Premises Blueprints: Floor plans, sensor zone maps, cable run pathways, and optical camera coverage diagrams.
• System Credentials: User access levels, RFID fob identifiers, alarm user numbers, and encrypted communication paths.
• Network Configurations: Local IP subnets, NVR port forwards, MAC addresses, DDNS hostnames, and cellular communicator SIM identifiers.

Closed-Circuit Television (CCTV) cameras, video doorbells, and AI smart vision systems record visual imagery of individuals on and around your premises. In Western Australia, optical surveillance is strictly governed by the Surveillance Devices Act 1998 (WA).

Western Australian Surveillance Law Notice: Under Section 5 and Section 6 of the Surveillance Devices Act 1998 (WA), optical surveillance devices must not be installed or maintained to visually record a private activity without the express or implied consent of all parties involved. WA Central Security engineers cameras strictly to protect client boundaries and public access points, never directed into private living spaces or neighbouring residential windows.

• Local Storage Ownership: All high-definition and 4K footage recorded by systems installed by WA Central Security is retained on client-owned hard disk recorders (NVRs/DVRs) on your premises, under your sole operational custody.
• Technician Access Protocols: Our licensed engineers only access video streams during physical installation, scheduled maintenance, or when diagnosing fault reports with your explicit consent.
• Warning Signage: We supply compliant statutory surveillance warning labels indicating that 24/7 CCTV surveillance is active on the premises, satisfying legal notification requirements.

WA Central Security collects and processes personal information solely for legitimate operational security purposes, including:

• System Engineering & Installation: Preparing comprehensive site assessments, designing customised security diagrams, and executing licensed installations.
• Alarm Monitoring & Rapid Response: Facilitating back-to-base alarm signalling, verifying intrusions, contacting nominated keyholders, and dispatching licensed patrols.
• Preventative Maintenance & Health Checks: Verifying battery backups, conducting remote ping diagnostics, upgrading firmware security patches, and executing warranty repairs.
• Statutory & Regulatory Obligations: Fulfilling mandatory compliance audits under WA Police licensing frameworks and Australian taxation legislation.

We never sell, rent, commercialize, or disclose your personal data or client security records to external third-party advertisers or data brokers under any circumstances.

For clients subscribed to our 24/7 monitoring services, signals transmitted by your alarm panel (including arming, disarming, mains power failure, low battery, perimeter break, smoke detection, and duress triggers) are received by an accredited ASIAL Grade A1 monitoring facility.

• Timestamped Incident Logs: All incoming signals and monitoring operator actions are digitally logged with millisecond accuracy for audit and insurance verification.
• Voice Recording: Inbound and outbound telephone conversations between monitoring dispatchers and client keyholders are automatically recorded for verification and compliance.
• Duress Passcodes: Verbal passwords and duress emergency phrases are stored in encrypted databases accessible only to authorised operators upon signal activation.

We adopt robust defence-in-depth measures to protect electronic and physical data against unauthorised access, disclosure, interception, or loss:

• Network Encryption: Remote camera streaming and smartphone alarm apps use modern TLS 1.3 encryption, secure P2P handshakes, and strong password hashing.
• NDAA & Cyber Compliant Hardware: We partner with enterprise hardware manufacturers that comply with strict international cyber standards, preventing hidden backdoors or insecure telemetry.
• Australian Cloud Servers: Where cloud services are used for remote push alerts, servers are hosted in ISO 27001-certified Australian data centres located in Sydney and Melbourne.
• Physical Record Protection: Hardcopy job sheets and property site blueprints are stored securely within our access-controlled Malaga operational facilities.

We only disclose personal data to third parties under strictly regulated circumstances, including:

• Emergency & First Responders: The Western Australia Police Force (WAPOL), Department of Fire and Emergency Services (DFES), or St John Ambulance in verified life-safety emergency events.
• Licensed Security Patrols: Accredited mobile patrol contractors dispatched to attend your property following unconfirmed or confirmed alarm activations.
• Statutory Law Enforcement Requests: Government authorities, courts, or law enforcement bodies only upon receipt of a legally binding subpoena, search warrant, or statutory order under WA legislation.

Lawful Authority Rule: WA Central Security will never voluntarily release customer CCTV video footage, system passwords, or telemetry logs to any third party (including neighbours or private investigators) without an explicit written release from the property owner or a formal WA Police warrant.

We retain records only for as long as necessary to fulfil the operational, commercial, and legal purposes for which they were gathered:

• Local CCTV Hard Drives: Video recordings on your local NVR cycle continuously via first-in first-out (FIFO) auto-overwriting, typically retaining 14 to 60 days depending on storage capacity.
• Accounting & Tax Records: Invoices, project contracts, and payment transactions are retained for 7 years in accordance with Australian Taxation Office (ATO) requirements.
• Secure Destruction: Outdated or unrequired digital information is de-identified or permanently purged using Department of Defence standard wiping methods.

Under Australian Privacy Principles 12 and 13, you have clear statutory rights to access personal information we hold about you and request corrections if any details are inaccurate, incomplete, or out of date.

• Right to Request Access: You may submit an identity-verified written request to our Privacy Officer. We will respond within 30 calendar days.
• Right to Rectification: If you discover that your contact details, emergency keyholder lists, or billing information are incorrect, notify us immediately for swift updating.
• Exceptions: Access may be declined where permitted by law, such as where disclosure would compromise public safety, violate another individual's privacy, or impact legal proceedings.

WA Central Security adheres strictly to the Notifiable Data Breaches (NDB) scheme established under Part IIIC of the Privacy Act 1988 (Cth). In the unlikely event that an eligible data breach occurs (such as unauthorised access to or disclosure of personal information that is likely to result in serious harm), our dedicated incident response team will:

• Immediately contain the breach and assess the nature and scope of affected security systems.
• Take comprehensive remedial action to prevent further data compromise or loss.
• Notify all impacted individuals and formally report the incident to the Office of the Australian Information Commissioner (OAIC).

If you have any questions regarding this Privacy Policy, wish to exercise your rights of access, or wish to register a formal privacy inquiry, please contact our designated Privacy Compliance Officer:

If you believe your inquiry has not been addressed satisfactorily, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au or by calling 1300 363 992.