Independent Info-Tech MFT Quadrant Report (2024) Once again, respected tech analysts Info-Tech have evaluated the most popular MFT software and vendors, and found that GoAnywhere is the top MFT solution. Here’s their 2024 independent report. To receive a Complimentary Copy of the Report, simply submit your email address below: First name Last name Enter your email address Phone You'll receive the 'Independent Info-Tech MFT Quadrant Report' shortly! RESOURCES Receive Report HOME

< News Companies Urged to "Assume You've Been Breached" 28 July 2026 The Australian Cyber Security Centre (CSC) - part of Australia’s top intelligence gathering agency – has urged organisations to adopt an “assumed breach mindset”. Put simply it’s advising companies to approach their cyber security on the basis that a breach has either already occurred or is imminent . Defeatist…? That’s not defeatism. It’s a practical evidence‑based shift in mindset driven by the speed, scale, and sophistication of modern cyber threats. ACSC’s rationale is straightforward. Attackers no longer rely on exotic zero‑days or elite skills. They exploit weak credentials, legacy systems, unpatched software, misconfigurations, and human behaviour - all common in organisations. Once they’ve gained access, they move quickly, quietly, and laterally. By the time a traditional perimeter‑focused security model detects them, the damage may already be done. Flipping the Traditional Mindset An assumed‑breach mindset flips the traditional corporate IT approach. Instead of asking, “How do we keep attackers out?” the ACSC encourages organisations to ask, “How do we limit what an attacker can do once they’re in?” This shift drives a different set of behaviours: continuous monitoring, rapid detection, containment, segmentation, least‑privilege access, and rigorous credential hygiene. It also forces leaders to confront uncomfortable truths about legacy technology, technical debt, and the fragility of critical business systems. The ACSC is clear that this mindset isn’t just a technical posture, it’s a governance posture. Boards and executives must treat cyber risk as a business risk rather than an IT issue. That means investing in modern platforms, reducing reliance on end‑of‑life systems, enforcing Multi-Factor Authentication (MFA), uplifting logging and monitoring, and ensuring incident response plans assume internal compromise from day one. The organisations that thrive in the current threat landscape aren’t the ones with perfect defences. They’re the ones that plan for failure, limit blast radius, and respond with speed and clarity. The Mindset and MFT Managed File Transfer (MFT) directly helps organisations adopt an assumed breach mindset by ensuring that even if an attacker infiltrates the network, data in transit and at rest remains heavily protected, tracked, and contained. Rather than relying on network perimeter security to keep data safe, MFT operates on the principle that the surrounding environment may be compromised, safeguarding the data itself. This includes: Data-Centric Encryption: MFT encrypts data while stored and while in transit. Even if an attacker has successfully breached the network and intercepts the files, the data remains unreadable and useless without the decryption keys. Tamper-Evident Auditing: Comprehensive, automated logs trace exactly who accessed, sent, or received a file. In an assumed breach scenario, these pristine audit trails are vital for forensic teams to quickly pinpoint what data was exposed. Micro-Segmentation of Data Flows: MFT removes files from vulnerable, shared network drives and places them in isolated, secure repositories. This restricts an attacker's ability to move laterally across the network to steal sensitive data. Strict Access Control: MFT platforms enforce role-based access control and MFA. If an attacker compromises a basic user account, MFT prevents them from accessing high-value file transfer workflows. Centralised Visibility: Instead of employees using unmonitored "Shadow IT" tools (such as personal cloud storage), MFT funnels all transfers through a single, monitored gateway. This enables security teams to easily spot anomalous data movements that indicate an active breach. Local Help on Hand At Generic Systems Australia, we’re Australia’s and New Zealand’s deep local experts in MFT. A top ten MFT partner for Fortra globally, we have many years of experience helping organisations from small to multinational install and leverage the world’s leading MFT, GoAnywhere . Let us know if you’d like to learn more about how GoAnywhere MFT can help you follow the ACSC’s advice. Previous Next

< News How Cybercrims Cashed in on World Cup Match Streams 20 July 2026 Cyber criminals have reportedly made nearly US$220M from the record number of viewers who streamed matches during the 2026 World Cup. The Satori Threat Intelligence team at HUMAN Security found more than 12M compromised user accounts on the dark web linked to 10 of the streaming services broadcasting World Cup matches. While many World Cup matches – including today’s final - aired free on broadcast television in the US, others required a cable or streaming subscription. That created significant demand for low-cost and illicit ways to watch the tournament. At the end of the tournament’s Group Stage, cyber criminals released a record 802,000 compromised accounts, generating an estimated $14.8 million in potential single-day black market revenue. Lindsay Kaye, VP of threat intelligence at HUMAN Security, told  Fortune that fans not wanting to the pay the $30 to $50 for a legitimate streaming account could pay as little as $5 to watch World Cup matches. Prime Targets Broadcasters and streaming platforms are prime targets for cybercriminals seeking to steal user credentials, largely because these businesses move enormous volumes of sensitive data across complex internal and partner ecosystems. They have been under growing pressure from event organisers and rights managers to protect customer accounts and quickly shut down unauthorised live streams. One invaluable protection is a Managed File Transfer (MFT) solution. MFT shuts down common attack paths by replacing ad‑hoc data movement with a single, governed, policy‑driven transfer layer. By enforcing encryption, endpoint verification, MFA, and strict workflow controls, MFT ensures that even if attackers compromise an employee account, they cannot quietly extract subscriber information or authentication data. Credential theft often succeeds because internal teams rely on risky operational shortcuts - exporting user lists, sharing logs, or transferring authentication data through unsecured scripts and legacy SFTP servers. MFT eliminates these weak points by automating transfers, removing human error, and blocking any data movement that isn’t explicitly approved. This prevents attackers from intercepting or exfiltrating user credentials, and it also protects the systems that store them, such as CRMs, billing platforms, and identity providers, by ensuring all inter‑system data flows are encrypted, authenticated, and auditable. Quick Reflexes During times of peak risk - such as major sporting events – when cybercriminals attempt credential scraping or account‑takeover activity, MFT provides the forensic visibility broadcasters and streamers need to respond quickly. Immutable audit logs, real‑time alerts, and detailed transfer metadata allow security teams to detect suspicious behaviour early and contain incidents before they escalate. MFT doesn’t just secure files, it provides organisations a hardened, controlled backbone for all sensitive data movement, dramatically reducing the impact of credential theft and strengthening the overall resilience of their digital platforms. Local MFT Experts At Generic Systems Australia, we have decades of experience helping Australian and New Zealand organisations take advantage of the security and efficiency that MFT provides. Let us know if we can help you do the same. Previous Next

< News MFT Lends Small IT Teams a Big Hand! 29 Sept 2025 Small and medium-sized organisations face the same escalating cyber threats as large corporations. However, they need to deal with those threats with much smaller IT teams and resources. Installing a Managed File Transfer (MFT) solution can help lift a heavy load from your stretched IT team, freeing them up to focus on other business needs. Your Davids vs The Cyber Goliaths Hackers are increasingly forming large, decentralised syndicates to attack and exploit vulnerabilities worldwide. This enables them to attempt phishing, malware deployment and credential theft across a vast number of organisations simultaneously. What makes these syndicates especially dangerous is their resilience: even if parts of their network are shut out, others remain active to reconfigure and attempt a different attack. By further leveraging automation and remote access tools, hackers can scale their operations with minimal effort, making their networks a formidable threat to organisations of all sizes. Small IT teams need powerful IT allies. And one such ally is an MFT solution, such as GoAnywhere MFT." MFT in a nutshell Managed File Transfer is a secure, automated solution for exchanging data—internally and externally—across systems, employees and partners. Unlike traditional file transfer methods (like FTP or email attachments), MFT offers encryption, access controls, audit trails, and automation, all within a centralised platform. MFT offers both effectiveness and efficiency boosts to small IT teams. Tough Encryption MFT encrypts files both in transit and at rest, reducing the risk of interception and unauthorised access. Sensitive data—financial records, customer information, intellectual property—remains protected even when transferred across public networks. Automate Repetitive Tasks With limited manpower, automation is key. MFT enables IT teams to schedule and monitor file transfers without manual intervention. This reduces human error and frees up time for strategic tasks like threat monitoring and system updates. Access & Authentication MFT offers granular user permissions and multi-factor authentication, ensuring only authorised personnel can access or send files. This minimises insider threats and accidental data exposure. Audit Trails & Compliance MFT logs every file transfer, creating a detailed audit trail that supports compliance with regulations like GDPR, HIPAA, and ISO 27001. For small teams, this built-in reporting saves hours of manual tracking and simplifies audits. Centralised Management Instead of juggling multiple file-sharing tools, MFT consolidates transfers into a single dashboard. This streamlines oversight, reduces shadow IT activity, and makes it easier to spot anomalies or unauthorised activity. Scalable Security Support MFT doesn’t just protect data—it empowers small IT teams to enforce enterprise-grade security without needing enterprise-sized resources. By automating secure transfers, reducing manual errors, and centralising control, MFT acts as a force multiplier for your IT Team’s cybersecurity efforts. And for small IT teams, it’s not just a tool—it’s a strategic upgrade to their cyber resilience. Local Help on Hand At Generic Systems Australia we’re Australia’s and NZ’s experts in deploying Managed File Transfer solutions. We’ve assisted businesses of all sizes to protect their customer data and secure their file transfers, while keeping their operations running smoothly. If you’d like to discuss how we can help you, please feel welcome to contact me . I’m always happy to have an obligation-free chat and explain how simply we can help you maintain your customers’ trust. Previous Next

< Case Studies Keeping Ahead of Competition in Commercial Real Estate Decades of experience helping Asia-Pacific customers have established Generic Systems Australia as our region’s local experts in secure managed file transfer. In this case study, we share the many ways in which an international commercial real estate firm leverages the flexibility of GoAnywhere MFT . One commercial real estate company has a mission to redefine their industry with long-term investments in people and technology that deliver actionable insights and create the best customer experience. They’ve also made it their mission to ensure any data they’re transferring is transferred securely. This corporation is an industry-leading commercial real estate company that offers a robust suite of services to its multifamily and commercial property clients. They offer services in commercial real estate investment sales, mortgage banking, and mortgage servicing. They now operate worldwide, have over 1,000 employees, and have closed billions of dollars in production volume. GoAnywhere MFT plays a key role in their success. Retiring REST A Senior Engineer provided some insight into the company’s three-year usage of GoAnywhere. Originally, when they needed to wire SFTP files to the bank, they used a homegrown tool, built internally and solely for the purpose of SFTP transfers to wire payments. However, because processes were taking too much time, they decided to look elsewhere for a better solution. What they found exceeded their original expectations. Prior to implementing GoAnywhere MFT, the process of keeping data consistent was a challenge. Stated the Senior Engineer: “Before GoAnywhere, we used the same REST call and put data in the SQL Server, but I was having a hard time with Windows vs. AWS and Azure and getting the same data repeatedly.” With GoAnywhere, Windows can grab data easily and consistently. Daily Deliveries Once the Senior Engineer learned the product, which didn’t take long, they were an expert in GoAnywhere. Now, more than 1,715 jobs are run each day. Most of the file transfers are B2B, moving from the company to a financial institution of some sort. “We wanted something that could go to a database seamlessly. We must get files to the bank in a very timely matter. Every wire file goes to the Federal Reserve and must get a Federal Reserve number before it can be funded to the bank. That all takes time. You don’t want to be at a standstill at 5:00 pm on a Friday trying to figure out why you can’t get a wire file to a bank! They’re funding loans that are $40 million!” Now the Senior Engineer can set up new transfers in just two minutes once they have all the information and can execute transfers in 10 seconds. If it clears, transfers start and stop in about one second! “Currently, we have 63 projects running in the GoAnywhere scheduler. We started with 15 and it has grown from there.” Mortgage Rate Magic Aside from the daily deliveries, the company also utilises GoAnywhere to stay one step ahead of their competition and offering the best mortgage rates possible. Mortgage rates update every minute. Because the company is committed to offering the best interest rate in the steep pool of competition, they avoid offering one single rate per day, as some of their competitors do. It’s especially important for them to pull the data in real time because even a couple of points in an interest rate change can make a big difference. GoAnywhere MFT helps the company’s competitive edge thrive and delivers an advantage by allowing real-time interest rate comparison. “We use MFT to get the latest mortgage rates available,” the Senior Engineer said. “We have several applications that use these rates. Each time you pull the rates, it costs money. Instead of having each application pull rates, we have MFT make a REST call to grab the rates and push them into a SQL Server, for all of our on-premises dotnet applications to use.” All applications that need the updated rates call the SQL Server to get the rates in real time. From there on, the rates are formatted into a JSON file and sent to AWS, where the rest of their cloud-based apps can use them. All applications have the same data source that is updated at the same time; therefore, they only need one outbound call to grab the rates. All the apps in the AWS environment can also get the necessary rates at the exact same time. It doesn’t matter which application connects; it should get the same rate. Exceeding Expectations Among transferring files securely, upgrades and updates for GoAnywhere MFT have served as an additional, yet unexpected benefit for the company. They have been easy to complete, and the Senior Engineer was able to successfully conduct their company’s annual disaster recovery (DR) test without fail. Overall, the Senior organization is very satisfied with their experience using GoAnywhere MFT. At this commercial real estate company, GoAnywhere’s flexibility is exploited for a great many time-saving projects, allowing valuable staff and system time to be directed to other areas. Although the company is typically using GoAnywhere MFT to transfer daily B2B files to financial institutions and provide competitive mortgage rates to their clients, their Senior Engineer said they often find new ways to leverage the product. “In meetings when someone has an idea, or has been doing something manually repeatedly, I know that GoAnywhere can take care of it and do what’s being requested. I always say, ‘We can do that! They can do this!’” Previous Next

< News Local Businesses most at risk of Phishing Attacks: study 9 Apr 2024 A new study has found that employees in the Asia-Pacific region are more likely than any others worldwide to unwittingly expose their organisation to cybercrime. Fortra's newly-released study found 10% of employees worldwide will open a ‘phishing’ email sent to them. In Asia-Pacific, that number climbs to 14.9% – worse than any other region. Even more concerningly, 61% of those who fall for a bogus email will go on to disclose their password. The results of the experiment demonstrate the serious ongoing threat to local organisations posed by employees who are either uneducated on cybersecurity threats, or unmotivated to mitigate those risks. If you would like a copy of Fortra's report on the study, including helpful advice on how to address your cybersecurity challenges, please let me know – I’ll be happy to send you a copy. #mft #managedfiletransfer #sft #securefiletransfer #cybersecurity Previous Next

Info-Tech Report MFT Quadrant Report (2022) Independent analysts Info-Tech compared MFT solutions and vendors in 2022, and found that GoAnywhere MFT was the unsurpassed leader in the field. To receive a Complimentary Copy of their Report, please submit your email address below: First name Last name Enter your email address Phone You'll receive the 'Info-Tech Report MFT Quadrant Report' shortly! RESOURCES Receive Report HOME

< News Black Friday Sales Splash Creates Data Surge 12 Nov 2024 Data transfer traffic is already surging across Australia as many online retailers jump the gun and promote Black Friday Sales early this year. Australians are set to spend a record $6.7B during the Black Friday/Cyber Monday weekend, according to Roy Morgan Research. An increase of 5.5% on last year, this level of spending will mean Black Friday has well and truly eclipsed Boxing Day as Australia’s top shopping event of the year. 50% of Australians plan to participate in the annual sales splurge, according to Future Publishing Australia’s inaugural Consumer Confidence Report. Of these, 45% plan to find their Black Friday deals online. Data Transfer Tsunami The surge in sales will in turn create a tsunami of data transfers, as businesses transact, process orders, and share a variety of e-commerce files with their supply chain partners. For some businesses – those still using outdated file sharing technologies like email and FTP – this will be a hugely stressful period. They’ll need to be hyper vigilant for lost orders, failed file transfers, and man-in-the-middle hack attacks. Other businesses - those taking advantage of modern, automated file transfer technologies such as Managed File Transfer (MFT) - will surf the data tsunami with ease. MFT will comprehensively address the risks and challenges of moving information, both within their organisation, and with external suppliers, partners and customers. Through centralised control, encryption, automation and auditing, MFT will provide the security, efficiency, reliability and scalability that FTP and email never could. “Cyber Trust” Consumer trust in retailers’ e-commerce transactions will be an even more important factor in eventual sales numbers this year. High profile hacks of consumer data over the past 12 months are leading consumers to question the security of a company’s systems before handing over credit card and other information. Companies will need to be able to provide reassurance – and proof – that transactions and personal data will be secure. Companies with MFT will be better able to provide that reassurance, keeping a clean history as responsible guardians of customer data. Shopper Shift Chris Ferguson, commercial director APAC at Future Publishing Australia, described the popularity of Black Friday in the local market as a “pivotal” change in the retail landscape. “Consumers are increasingly drawn to the prospect of early savings and the convenience of online shopping, so retailers anticipate and accept this new reality to capture their share of the market.” He said that, despite the current economic climate, his research showed Australians remained committed to their festive spending plans. 56% of Australians still plan to spend the same amount as last year on Christmas gifts, while 21% intend to spend even more. Australian Retailers’ Association CEO Paul Zahra said retailers were “pulling out all the stops to ensure they have the best product lines and gift solutions, customer service offerings and enhanced online platforms to make shopping during this peak season more seamless than ever.” He said most discretionary retailers expect to make up to 66% of their annual profit during peak season. Surf the Tsunami Generic Systems Australia are Australia’s experts in deploying Managed File Transfer and other layered defences, such as Advanced Threat Protection . We routinely help local organisations better manage their file transfers, seamlessly scaling up to meet the heightened demands of sales events like Black Friday. If you’d like to discuss how we can help you, please feel welcome to contact me . I’m always happy to have an obligation-free chat and explain how simply we can level up your file transfer approaches. I can even arrange a simple, zero-cost Proof of Concept. Previous Next

< News MFT Popularity Set to Soar in 2025 3 Feb 2025 Managed File Transfer (MFT) software continues to be a popular addition to corporate IT systems, based on the last global market research. Washington-based Market Research Intellect (MRI) valued the MFT software and services market at US$12.6B in 2024, and now projects CAGR of 9.97% to a value of US$22.3B by 2031. It attributes this growth to “the increasing need for secure, efficient, and compliant data transfers across enterprises as organisations handle larger volumes of sensitive data”. MFT solutions provide secure mechanisms for exchanging files internally and externally while ensuring regulatory compliance. The rising adoption of cloud technologies, and the integration of automation and real-time monitoring, have further propelled uptake of MFT solutions, offering greater flexibility and scalability to businesses. MRI said that industries such as finance, healthcare, and manufacturing, where data security and integrity are paramount, are increasingly relying on MFT software to mitigate risks associated with traditional file transfer methods. Additionally, the growing trend of hybrid and remote workforces is fuelling the demand for cloud-based MFT solutions. According to MRI, the MFT software and service market is being shaped by “the increasing complexity of data security requirements and the need for compliance with industry regulations. “MFT facilitates secure, automated, and efficient file transfers, addressing critical pain points such as data breaches and downtime,” they said. Notwithstanding the popularity and growth of MFT solutions, perceived challenges such as integration with legacy systems, and the usual concerns about the scalability of new solutions in large organisations, might cause some to delay their adoption of MFT technologies. That’s why, at Generic Systems Australia, we use and recommend GoAnywhere MFT , the world’s leading MFT solution. It’s renowned for its easy implementation, robust performance and extensive enterprise systems integrations. MRI categorises MFT software as “a key solution for secure file management”. So if you’d like to explore further how MFT can help protect your data and make your organisation more efficient, please feel welcome to contact me for an obligation-free chat. At Generic Systems Australia , we’re your local experts in MFT. Previous Next

Generic Systems Australia Privacy Policy Generic Systems Australia (“GSA”, “we” or “us) are committed to protecting the privacy of the BUSINESS information we collect. Our Privacy Policy describes how we collect and use your business information where we are acting as a data controller (i.e. where we decide how and why your information is used). This Policy does not apply to personal information we hold as an employer or data processor when acting on behalf of, and in accordance with the instructions of our customers through our customers’ use of GSA services and the software licenced via us. We may make changes to our Privacy Policy from time to time to take account of changes to our standard practices and procedures or where necessary to comply with new laws and regulations. If we make changes, we will update the “last updated” date in the following paragraph, and the latest version will always be available on our website. This Policy was last updated on 1 June 2024 . We encourage you to check our website from time to time to ensure that you are aware of our current Privacy Policy. Types of personal information we collect The types of personal information we collect will depend on the circumstances in which the information is collected. However, the types of personal information we collect and hold about you may include: identifying information, such as your name; contact information, such as your address, email address and telephone/mobile number; usernames and passwords that you create when registering for an account with us; your organisation and position, where your organisation has business dealing with us; information about your occupation and employer organisation; information about how you use the products or services we provide to you; records of our communications with you, such as telephone, email, SMS, online and in person communications; if you visit our offices, images of you which may be captured on CCTV; other information that you provide us during the course of business; and other information that is capable of identifying you. You are always welcome to provide us with comments, queries and feedback in relation to our products and services. We may record and monitor telephone calls and other communications between you and us for training, quality control and compliance purposes. When you communicate with us, we may collect additional information including the languages you speak, how best to manage communications with you, and information about your dealings with us. If you participate in a survey or competition, or respond to a feedback request, we will collect the information that you provide in doing so, and associated information such as when and how you submitted the response. We collect information about people who are our contractors, suppliers and business partners, or who are employed by our contractors, suppliers and business partners. When you do business with us, we may collect information about you from others, such as from others who do business with you. Our website may contain links to third party websites. We are not responsible for the privacy practices or the content of those third-party websites. The privacy practices applicable to those third-party websites may differ substantially from ours, so we advise you to read the privacy policy of those websites before using them. Log data, device and location information When using our products and services (including our website), we will collect information about you and about your use of our products and services, such as which services you use and how you use them. We will collect information such as: user name and password; device information, such as the model and ID of the device you use, operating system, telephone number and mobile phone network; server log information, such as details of how you used the products or service (including our website), IP address, hardware settings, browser type, browser language, the date and time of your use and referral URL; and your browser or your account using cookies (see below for further information about our use of cookies). Our products and services (including our website) may also detect and use your IP address or domain name for internal traffic monitoring and capacity management purposes or to otherwise administer the products and services. The patterns of usage of visitors to the online services may be tracked for the purposes of providing improved service and content based on aggregate or statistical review of user traffic patterns. How we collect personal information We may collect personal information about you in the following ways: when you order products or services from us; when you use our online services and other products and services (including our website); when you visit our sites or offices; when you submit a query or request to us; when you respond to a survey that we run or fill in forms on our website; by tracking your use of our products and services (including our website); from third parties who are entitled to disclose that information to us; from publicly available sources; from online sources (including social media platforms and providers like LinkedIn); suppliers of information products and services (e.g. companies that consolidate data from multiple public sources); or other lawful means. From time to time, we may use third-party online services to collect personal information such as your name and email address or telephone number to administer online competitions, customer feedback and surveys. If you provide us with personal information about someone else, you must only do so if that person has provided their permission for you to do so. Cookies We may also collect personal information about you and your use of our website, products and services using cookies. Amongst other things, we use cookies to monitor and observe your use of our website, products and services, compile aggregate data about that use, and provide you with a more effective service (which may include customising parts of our website based on your preferences and past activities on that website). How we use personal information and our legal basis for using your personal information We use personal information that we collect about you to: verify your identity when you are dealing with us; maintain our relationship with you; determine your eligibility for any of our products or services; answer your queries and requests; enable us to provide you or your organisation with our products and services; use in accordance with any request or instructions from you; make special offers related to our products or services that we think may be of interest to you; keep you informed about our activities and notify you of changes to our products or services; monitor use of our products and services (including our website); provide better products, services and information to our customers and to the community; assess, operate, maintain, upgrade and improve our products and services (including our website); maintain and update our records; carry out market analysis and research; carry out planning and forecasting activities and other internal business processes; manage and resolve any legal or commercial complaints or issues (including debt recovery); meet our obligations and perform our functions under applicable laws and agreements; comply with our legal and regulatory obligations; use as otherwise required or authorised by law or government agency. We may also use your personal information for any other purpose as authorised by you. Our legal basis for the above activities includes: consent; necessary for performance of a contract; necessary for our legitimate interests or the legitimate interests of a third party; necessary for compliance with our legal obligations. . When we have legitimate interests As set out above, in some cases we use your information where it is necessary for our legitimate interests or the legitimate interests of a third party. This includes where the use of your personal information is necessary to: administer our operations and business in an efficient and effective way including undertaking management planning and improving and developing our products and services; for our authorised third-party service providers or others to perform services on our behalf, such as payment processing and data analysis; understand and respond to queries, complaints and feedback; send direct marketing to business contacts; transfer personal information in relation to an actual or proposed sale, transfer or reorganisation of all or part of our business and the acquisition of the business; analyse and optimise our website's content by updating it in accordance with your preferences; ensure network and information security; and enforce our legal rights and manage any dispute and legal claims and take legal or other professional advice. Direct marketing and research If you have given us your consent or if we are otherwise legally entitled to do so, we may use and disclose your personal information for marketing purposes (but we will not sell your personal information to any third party) including contacting you about our products and services (including our website), the products and services of other people, or related special offers from our business partners, that we think may be of interest to you. This information may be sent to you by email, SMS or by other means. We may use your personal information to carry out consumer and market research, compile demographics and perform other research and analysis so that we can develop and implement initiatives to improve our services, improve the design, construction and operation of our products and identify people likely to be interested in our products and services. You can opt-out of receiving marketing communications from us at any time by following the “unsubscribe” link in any communication (or sending a return email with “un subscribe in the Subject line” from us or contacting us using the contact details below. Unsubscribing from marketing communications will not stop service-related communications from us, such as administrative alerts in relation to your account. De-identification We may de-identify information about you so that the information can no longer be used to identify you (anonymisation). We may use and disclose de-identified information in the course of our business (including in any promotional or marketing material). Aggregation We may aggregate information on the use of our products and services (including our website) in such a way that the information can no longer be related to identifiable individuals. We may use and disclose aggregated information in the course of our business (including in any promotional or marketing material). Who we disclose personal information to We may disclose your personal information to: your representatives, advisers and others you have authorised to interact with us on your behalf; controlled entities within our corporate group; our team members and third parties including business partners, consultants, contractors, suppliers, service providers, professional advisers and agents who need the information to assist us with conducting our business activities; prospective purchasers of all or part of our business or shares in our company or a related entity; government agencies or authorities, regulators, law enforcement agencies and other parties where authorised or required by law who ask us to disclose that information and to which we are legally required to disclose your personal information; parties identified at the time of collecting your personal information or as otherwise authorised by you. How we maintain and secure your personal information Security is a priority for us when it comes to your information. We take reasonable steps to ensure that any of your personal information which we hold is accurate, complete and up to date. These steps include promptly updating personal information when we are advised that personal information has changed, checking our contact lists for accuracy, and providing individuals with a simple means to update their personal information. On rare occasions, we also keep hard copy records of this personal information in physical storage facilities. We use a range of physical and technical security processes and procedures to protect the confidentiality and security of the information that we hold, and we update these from time to time. These measures include: implementing physical and technical access and security controls to our physical and electronic databases, such as security procedures for access to our business premises; and technological security procedures including password protection, network firewalls, encryption, intrusion detection and site monitoring where practicable to do so. We also take steps to monitor access to and modification of your information by our team members and contractors, and ensure that our team members and contractors are aware of and properly trained in their obligations for managing your privacy. However, the internet is not a secure environment and no matter what physical and technical security processes and procedures are used we cannot guarantee the security of your personal information. You also play an important role in keeping your information secure by maintaining the confidentiality of any usernames and passwords you use with our products and services (including our website). How long we store your personal information for Personal information is only retained for as long as it is needed for the purpose for which it was collected or as required by law. After the expiry of this period, we will take reasonable steps to make sure its de-identified or destroyed. The criteria used to determine appropriate retention periods for personal information include: the length of time we have an ongoing business relationship with you; the amount, nature and sensitivity of the personal information; whether we have a legal obligation to retain personal information; and whether retaining the personal information is necessary to resolve legal disputes (including the establishment, exercise or defence of legal claims). Your rights Depending on where you are located, you may have a right to: request a copy of your personal information. In relation to personal data you have supplied to us, and which is held by us for the purpose of entering into a contract between us or on the basis of your consent, you may be entitled to ask us for a copy of this information in a structured, commonly used and machine readable format so that you can reuse it or share it with other organisations; object to our processing of your data and ask us to restrict the use of your information and to delete it; or correct or rectify any personal information that is out-of-date, incorrect, incomplete or misleading. Such requests should be submitted to us in writing using the contact details below. We may ask you to verify your identity before responding to your request. We will respond to your request in a timely manner and action your request in accordance with applicable data protection laws. You have a right to withdraw your consent where you have previously given us consent to use your personal information (e.g. to receive marketing communications). You can do this by contacting the Privacy Officer using the contact details below or, where the consent relates to marketing, by unsubscribing using the link in any of our communications. Complaints If you have a concern about your privacy or how we have collected or handled your personal information, please contact our Privacy Officer using the contact details below. If you wish to make a complaint, you should forward a written complaint to our Privacy Officer using the contact details below. In the complaint, please include your contact details (such as email address, name, address and telephone number) so we can contact you for further information and clearly describe the complaint. We will respond to your query or complaint within a reasonable time and in accordance with applicable data protection laws. If you are not satisfied with our response, you may contact us to discuss your concerns or may raise a complaint with your local data protection authority through their official channels. In Australia it is the Office of the Australian Information Commissioner, in New Zealand it is the Privacy Commissioner. Contact us If you require further information this Privacy Policy or Generic Systems Australia’s management of your personal information please contact us via the following contact details: Privacy Officer Phone: +61 2-9959-2239 Email: info@gensys.com.au