Website Privacy & Vulnerability Disclosure Statement
1. Introduction
Wild Mouse Pty Ltd (“Wild Mouse”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, disclose, and safeguard personal data when you interact with our website (the “Website”).
For the purposes of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK GDPR, Wild Mouse Pty Ltd acts as the data controller.
2. Information We Collect
We may collect and process the following categories of personal data:
Information you provide directly
- Name
- Email address
- Contact details
- Any information submitted via forms or enquiries
Automatically collected information
- IP address
- Browser type and version
- Device information
- Pages visited and interaction data
- Date/time of access
- Referring URLs
This data is collected for operational, security, and performance purposes.
3. Lawful Basis for Processing
We process personal data in accordance with the following lawful bases under GDPR:
- Legitimate Interests
To operate, secure, and improve our website and services - Contractual Necessity
Where processing is required to respond to enquiries or provide requested services - Legal Obligation
Where required to comply with applicable laws or regulatory requirements - Consent (where applicable)
For specific activities such as optional communications or cookies (where required)
4. How We Use Personal Data
We use personal data to:
- Respond to enquiries and communicate with you
- Operate, maintain, and improve the Website
- Monitor usage and detect security threats or misuse
- Comply with legal, regulatory, and contractual obligations
We do not:
- Sell personal data
- Use personal data for third-party advertising
- Conduct profiling or automated decision-making that produces legal or significant effects
5. Data Sharing and Third Parties
We may share personal data with trusted third-party service providers who support:
- Website hosting and infrastructure
- Security monitoring and logging
- Analytics and performance monitoring
All third parties are contractually required to:
- Process data only on our instructions
- Implement appropriate security measures
- Maintain confidentiality
6. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA) or UK, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Transfers to jurisdictions with adequacy decisions
7. Data Retention
We retain personal data only for as long as necessary to:
- Fulfil the purposes outlined in this statement
- Meet legal, regulatory, or contractual obligations
- Support security, audit, and dispute resolution requirements
Retention periods are determined based on the nature, sensitivity, and purpose of the data.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Access controls and authentication mechanisms
- Encryption in transit and at rest where appropriate
- Centralised logging and monitoring
- Regular review of security controls
While we take reasonable steps to secure data, no system can be guaranteed to be completely secure.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access – obtain a copy of your data
- Right to rectification – correct inaccurate or incomplete data
- Right to erasure – request deletion of your data
- Right to restrict processing – limit how your data is used
- Right to data portability – receive your data in a structured format
- Right to object – object to processing based on legitimate interests
- Right to withdraw consent – where processing is based on consent
To exercise your rights, please contact us using the details below.
10. Complaints
If you believe your data has been handled improperly, you have the right to lodge a complaint with a relevant data protection authority, including:
- Your local EU supervisory authority
- The UK Information Commissioner’s Office (ICO), where applicable
11. Cookies and Tracking Technologies
Our Website may use cookies or similar technologies to:
- Ensure proper functionality
- Improve performance and user experience
- Support security monitoring
Where required, you will be presented with options to manage your cookie preferences.
12. Updates to This Statement
We may update this Privacy Statement periodically. Updates will be published on this page with a revised “Last updated” date.
13. Contact
For privacy-related enquiries or to exercise your rights:
Email: privacy@wildmouse.com
Organisation: Wild Mouse Pty Ltd
Vulnerability Disclosure Statement
1. Commitment to Security
Wild Mouse is committed to maintaining the security, integrity, and availability of our systems and services. We welcome responsible security research and encourage coordinated vulnerability disclosure.
2. Reporting a Vulnerability
If you identify a potential security vulnerability, please report it promptly:
Email: security@wildmouse.com
Please include:
- Description of the issue
- Affected system, page, or component
- Steps to reproduce (where possible)
- Potential impact
3. Responsible Disclosure Expectations
We request that researchers:
- Act in good faith and avoid privacy violations
- Do not access, modify, or delete data unnecessarily
- Do not disrupt services or degrade performance
- Do not publicly disclose vulnerabilities prior to remediation
- Avoid social engineering, automated exploitation, or data exfiltration
4. Our Response
Upon receiving a report, we will:
- Acknowledge receipt
- Assess severity and impact
- Take appropriate remediation actions
- Communicate progress where contact details are provided
5. Legal Safe Harbour
Wild Mouse will not pursue legal action against individuals who:
- Act in good faith
- Comply with this policy
- Do not exploit vulnerabilities beyond what is necessary for reporting