Terms of Use

These terms govern your use of yarrasecure.com.au and set out the standing boundaries that apply to all services provided by Yarra Secure (ABN 30 139 311 250) of Melbourne CBD, Victoria. When you engage us, your signed engagement documents — quote or proposal, statement of work, and authorisation form — govern that engagement and prevail over this page where they differ. By using this website you accept these terms.

You may browse, read, and share links to our content, and use our free resources within your own business. You must not republish our content commercially without permission, misrepresent your identity in enquiries, or use the site for any unlawful purpose. Please do not submit passwords, credentials, identity documents, or sensitive personal information through the website — we never ask for them.

The content on this website — including guides, checklists, and resource pages — is general information for Australian small businesses. It is not legal, financial, insurance, or forensic advice, and it is not advice tailored to your situation. Acting on general content is at your own judgement; for advice specific to your business, engage us (or the relevant qualified professional) directly.

Every Yarra Secure engagement is defined in writing before work starts: what is included, what is excluded, the timeline, and the price in AUD. We do not perform unscoped work, and informal requests (a call, a text, a corridor conversation) become work only once confirmed in writing by both sides.

We perform no security testing, scanning, or access attempts against any system without the prior written authorisation of a person with authority over that system, recorded in a signed scope. There are no exceptions — not for demonstrations, not on verbal request. Requests to test systems you do not own or control will be declined and we will suggest lawful alternatives.

Equally, you must not probe, scan, test, or attempt unauthorised access to this website or our systems. Security researchers acting in good faith can report suspected vulnerabilities to contact@yarrasecure.com.au and we will respond constructively. Unlawful activity is reported to the relevant authorities.

When you authorise work on systems, you confirm that you own or control those systems or hold the authority to approve the work, and that any third-party consents (for example from a hosting provider or platform owner) have been obtained where required. We rely on these confirmations, and they form part of every engagement.

Written quotes and proposals are valid for the period stated on them (usually 30 days). Acceptance by email (“approved”) is binding once we confirm. Each engagement’s statement of work or accepted quote defines the deliverables; anything not listed is not included.

Prices are stated in Australian dollars. GST treatment is being confirmed with our accountant; until then, published prices carry a note to that effect and your written quote and invoice state the exact amount payable. We will never represent a document as a tax invoice unless we are entitled to issue one.

Unless your engagement documents say otherwise: invoices are payable within 7 days; engagements of $3,000 or more are taken with a deposit (smaller engagements are payable in full on acceptance); and we may pause work on accounts more than 14 days overdue after written notice. A security note we apply to ourselves and recommend to everyone: we will never change our bank details by email alone — if you ever receive different payment details claiming to be from us, call 0435 315 894 to verify before paying.

Changes to scope, timeline, or price are agreed in writing before the changed work is performed — protecting you from surprise invoices and us from unpaid work. If something useful but out-of-scope is discovered mid-engagement, we stop at the boundary, tell you, and proceed only with your written approval.

We provide cyber security advisory, review, training, policy, and IT setup services. We do not provide legal, accounting, taxation, insurance, audit certification, or forensic services, and our deliverables are not professional advice of those kinds. Where your situation needs one of those professionals, we say so and help you brief them.

No review, setup, training, or policy can identify every weakness or prevent every incident, and we do not guarantee the prevention, detection, or remediation of any threat. Our services aim at practical risk reduction. Findings and reports reflect the reviewed systems at the time of review, within the authorised scope, based on the information available. Be cautious of anyone in this industry who promises more.

You remain responsible for your systems and business decisions: approving and implementing recommendations, maintaining systems and backups after an engagement, the conduct of your staff and suppliers, and the accuracy of information you provide to us. Where you choose not to implement a recommendation, that is a legitimate business decision — and its consequences rest with you.

Our work often involves third-party platforms — Microsoft, Google, hosting companies, software vendors. We configure and advise on these carefully, but we do not control them and are not responsible for their availability, pricing, terms, or changes they make. Your subscriptions and licences are contracts between you and those providers, and their costs are paid by you directly.

IT setup services are practical technology configuration. They do not include licensed electrical work, new power circuits, structured cabling, or security camera/alarm installation — those require licensed trades, and where needed we help you brief one rather than performing the work ourselves. Hardware and software is set up with care, but third-party products cannot be guaranteed to perform perfectly in every combination, and hardware faults are a matter for the manufacturer’s warranty.

Yarra Secure is not an emergency service. We do not provide guaranteed incident response, 24/7 availability, or forensic investigation unless separately agreed in writing. In an emergency involving money, contact your bank immediately; cybercrime can be reported at cyber.gov.au/report, and scams at scamwatch.gov.au. We are glad to provide triage guidance and readiness planning within a written scope.

Website content, report formats, methodologies, and templates remain the property of Yarra Secure. On full payment, clients receive a non-exclusive licence to use their deliverables for internal business purposes. Our free resources may be used within your business with attribution; commercial republication requires written permission.

Everything we learn about your business, systems, and weaknesses is treated as confidential — whether or not a separate confidentiality agreement is signed. Security findings are shared only with the recipients you authorise. We do not name clients publicly, in proposals, or in marketing without written permission. This commitment survives the end of any engagement.

Personal information is handled in accordance with our Privacy Policy, which forms part of these terms.

To the maximum extent permitted by law: our total aggregate liability in connection with a service is limited to the fees paid for that service; we are not liable for indirect or consequential loss, loss of profit, loss of data, or business interruption; and we are not liable for loss arising from your use of general website content, from changes made by you or third parties after our work, or from matters outside the authorised scope. Nothing in this section limits the rights described in section 22.

Our services come with guarantees under the Australian Consumer Law that cannot be excluded — including that services be provided with due care and skill, be fit for the purpose made known, and be supplied within a reasonable time. Nothing in these terms excludes, restricts, or modifies those non-excludable rights. Where the law permits us to limit our liability for a failure to comply with a guarantee, our liability is limited to supplying the services again or paying the cost of having them supplied again.

These terms are governed by the laws of Victoria, Australia, and the courts of Victoria have jurisdiction over any dispute connected with them.

Questions about these terms: contact@yarrasecure.com.au · 0435 315 894 · Yarra Secure, Melbourne CBD, Victoria.