Scope and contact
This notice applies to the new BoxFreeIT website. For access, correction, deletion requests or a privacy concern, email cisco@vc2plus.com. Tell us which enquiry or information your request concerns, without sending identity documents unless a safe verification process has been agreed.
Planning tools
Tool entries and generated plans are processed in your browser. They are not automatically submitted to BoxFreeIT. If you choose Save, inputs are kept in local browser storage until you delete them or clear that browser’s data. Other people using the same browser profile can see saved information. Downloaded summaries remain on your device under your control. Do not enter passwords, recovery codes or sensitive credentials.
Contact enquiries
If you submit the contact form, we collect your name, email address, message, submission time, privacy acknowledgement and enquiry reference. We use these details to respond and manage the enquiry. The server stores the message before attempting to notify the team by email. Delivery attempts and administrative status are recorded. A confirmation means your message was saved, not that an email reached an inbox.
Please supply only necessary information. The form is optional and email is an alternative. We do not sell enquiry information. We do not automatically send your details to an unrelated supplier. If a referral requires that, we should agree it with you first.
Project briefs and commercial enquiries
The project request form also collects your premises type, postcode, project timing, indicative budget band, optional phone number, project description and any planning summary you deliberately include. An optional source question records how you say you found us; the source page records the internal planning page associated with the request. We do not claim that these fields provide verified advertising or AI attribution.
When you choose the tool’s review-in-enquiry action, it stores a temporary summary in this browser tab’s session storage. The form retrieves and removes that temporary draft for your review. It does not send the text until you submit. You can clear the plan. Browser settings can prevent transfer, and shared-device users may see on-screen or saved data.
The consent beside submission authorises use of the brief to respond, including handling with the related Security Wholesalers or Serious Security team where relevant. Notification is routed to the site’s configured recipient. We do not automatically distribute the request to unrelated suppliers. Any unrelated referral should be agreed separately.
Authorised administrators can record qualification, quotation and sales outcomes, financial amounts and outcome notes against a request to operate the business and assess results. These records follow the same private access and retention practices as enquiries. We do not install a third-party analytics pixel or automatic marketing subscription as part of submitting.
Technical information and cookies
The hosting environment may log IP addresses, requested URLs, times and technical errors for operation and security. The application uses a hashed IP-based key to limit repeated form and login attempts. Short-lived session cookies protect the contact form and administration. They are HttpOnly and SameSite cookies; production is configured for HTTPS. No advertising pixels, third-party analytics or tracking cookies are included in this initial build.
Search terms are sent to the server in the page URL and may appear in hosting logs. Do not enter confidential information in site search.
Storage, access and service providers
Enquiries are held in private server storage accessible to authorised administrators. The hosting and configured email providers process technical and message information as needed to operate those services. The package does not establish their location or overseas processing terms. Contact us if you need details before sending personal information. We do not promise that every service provider is located in Australia.
Retention and deletion
We aim to keep enquiries only as long as needed to respond and maintain necessary business records. The administrative retention setting flags messages older than the configured period for review; it does not automatically delete them. The initial review period is 365 days. Copies in mailboxes and backups can have separate retention schedules. We can consider deletion requests subject to relevant legal and recordkeeping requirements.
Concerns and changes
Contact us first so we can investigate a privacy concern. The Office of the Australian Information Commissioner provides information about Australian privacy rights and complaint pathways. Whether particular obligations apply depends on the organisation and circumstances. This notice describes site behaviour; it is not a statement of legal certification.
Notice reviewed 1 November 2026. We will update this page if collection practices or the commercial model change.