Toowoomba & Surrounds $5M Public Liability Insured Call 0483 750 816
Zekta Property Services

Legal

All Zekta Terms of Service and Policies

Every term, policy and plan that governs how Zekta quotes, works, reports, communicates and protects your information.

This page contains the full suite of Zekta Property Services terms, policies and plans. Where a quote, work order, booking or client agreement incorporates a document below, that document forms part of your contract. Nothing here excludes, restricts or modifies rights that cannot lawfully be excluded, including under the Australian Consumer Law.

Document 1

Customer Service Terms and Conditions

The core contract terms for quotes, scope, variations, payment, liability and completion.

1. Parties and application

These Terms apply to services supplied by Nathanial Beer trading as Zekta Property Services to the person or organisation identified in the quote, work order, booking or invoice (Customer). By accepting a quote, requesting Zekta to commence, confirming a booking after receiving these Terms, or otherwise clearly agreeing, the Customer enters a contract with Zekta. A property manager or agent warrants that they are authorised to give instructions for the property owner or responsible client.

2. Contract documents and priority

The contract consists of the accepted quote or work order, these Terms, any service-specific schedule, an accepted variation and any written client agreement. If documents conflict, a specifically negotiated written term prevails over a standard term; an accepted variation prevails for the varied work; and the quote prevails for scope, price and timing. Marketing material is general information and does not expand an accepted scope.

3. Quotes and estimates

A quote is based on information and access reasonably available when prepared and is valid for the period stated in it, or 30 days if no period is stated. An estimate is an informed approximation, not a fixed price. Zekta will identify estimates as such and seek approval if the expected price materially changes. Obvious clerical errors may be corrected promptly, but Zekta will not proceed on a corrected price without the Customer's agreement.

4. Scope of services

Zekta will perform only the work described in the accepted scope. Ordinary services may include property maintenance, lawn and garden care, pressure cleaning, rubbish removal, cleaning, minor repairs, installations and visible-condition reporting. The exact inclusions, exclusions, service standard and deliverables are determined by the quote or work order.

5. Licensed and excluded work

Zekta will not perform electrical, plumbing, gas, asbestos-removal, structural, pest-certification, building-certification or other work requiring an occupational or contractor licence unless the work is performed by an appropriately licensed person and the required contract, approval and insurance arrangements are in place. Unlicensed handyman or building work will not exceed any lawful value or scope threshold. Zekta may stop, exclude or refer regulated work without being in breach.

6. Customer information and authority

The Customer must provide accurate contact, site, access, hazard and scope information; disclose known defects, asbestos, underground or concealed services, dangerous animals, contaminated areas and occupancy restrictions; and obtain all owner, body corporate, tenant or third-party permissions required for the work. Zekta may rely reasonably on instructions from an authorised contact.

7. Property access and preparation

The Customer must provide lawful, safe and timely access, including working keys, codes and approvals; secure animals; move vehicles and fragile or valuable items; remove or identify obstacles; and ensure children and other people remain clear of the work area. Unless included in the quote, clearing loose items, animal waste, excessive debris or unsafe obstructions is additional work and requires approval or may prevent attendance.

8. Site conditions and latent conditions

Prices assume the site conditions described or reasonably visible. Concealed damage, buried services, unstable surfaces, excessive growth, contamination, pest activity, inaccessible areas, unexpected disposal requirements or other latent conditions may require a variation, specialist referral, rescheduling or cancellation. Zekta will explain the issue and, where practicable, obtain approval before additional chargeable work.

9. Variations

A variation may change scope, price, materials or timing. Zekta will describe the variation and obtain written, electronic or clearly recorded approval before proceeding. If immediate limited action is reasonably required to prevent imminent injury or material property damage, Zekta may take only authorised or reasonably necessary protective steps and document them.

10. Materials and customer-supplied items

Materials supplied by Zekta will be reasonably suitable for the agreed purpose. Colour, texture and natural-product variations are not defects unless inconsistent with the agreed specification. If the Customer supplies an item or directs a particular product, Zekta is not responsible for an inherent defect, incompatibility or manufacturer delay that could not reasonably have been identified, but remains responsible for due care in handling and installation.

11. Deposits

A deposit may be required where Zekta must purchase materials or supplies, reserve specialist resources or incur a disclosed upfront cost. The quote will state the amount, purpose and payment deadline. Zekta will not request more than any maximum permitted by applicable law. Unless agreed otherwise, work is not scheduled and materials are not ordered until cleared deposit funds are received. Deposit treatment on cancellation is governed by the Payment Policy and must reflect actual, reasonable loss and recoverable supplier costs.

12. Scheduling and delays

Dates and arrival windows are genuine estimates unless expressly guaranteed. Zekta will use reasonable care to meet them but may be affected by weather, unsafe conditions, illness, equipment failure, supplier delay, access failure or events beyond reasonable control. Zekta will communicate a material delay and offer a reasonable revised arrangement. The Customer retains any non-excludable right where services are not supplied within the required or reasonable time.

13. Safety and stop-work rights

Zekta may decline, suspend or stop work where conditions are unsafe, unlawful, abusive, materially different from those disclosed, outside competence or licensing, or likely to damage property. Zekta will state the reason where reasonably possible. Charges are limited to completed work and reasonable committed costs, subject to the cause and applicable law.

14. Completion, reports and notification

A service is complete when the agreed work has been performed, subject to minor outstanding rectification that does not prevent reasonable use. Zekta may provide a service report with time records, work performed, photographs and observed hazards or issues. The report records conditions reasonably observed at the time and is subject to the Inspection and Report Limitations Policy.

15. Price and payment

The Customer must pay the accepted price, approved variations, disclosed materials, disposal, travel or other agreed charges. Residential payment is due immediately on completion unless the quote states otherwise. Approved accounts are due within 7 calendar days of invoice. Payment obligations, disputes and recovery are governed by the Payment Policy.

16. Cancellations

Cancellations and rescheduling are governed by the Cancellation Policy. At least 24 hours' notice ordinarily avoids a cancellation charge. A reasonable charge may apply to late cancellation, failed access or attendance where Zekta has suffered actual loss or incurred reasonable costs and the charge was disclosed.

17. Care of property and pre-existing condition

Zekta will exercise due care and skill. The Customer should identify fragile, concealed, recently repaired or unusually valuable property. Zekta is not responsible for deterioration, failure or damage caused by a pre-existing defect, ordinary wear, inaccurate customer information, hidden conditions or an event outside Zekta's control to the extent Zekta did not cause or contribute to it.

18. Consumer guarantees

Nothing in the contract excludes, restricts or modifies the consumer guarantees, remedies or other rights under the Australian Consumer Law or another law that cannot be excluded. Services will be supplied with due care and skill, be reasonably fit for any disclosed purpose Zekta agrees to meet, and be supplied within the agreed or a reasonable time.

19. Liability

To the extent permitted by law, each party is responsible for loss to the extent caused by its breach, negligence or unlawful act. Zekta is not liable for indirect or consequential loss that was not reasonably foreseeable, or for loss caused by the Customer's failure to meet these Terms. Any lawful limitation is subject to non-excludable consumer rights and does not apply to fraud, wilful misconduct or liability that cannot lawfully be limited.

20. Complaints and rectification

The Customer should notify Zekta promptly with the job reference, description and supporting photographs where available. Zekta may inspect and, where appropriate, rectify within a reasonable time. This process does not remove any right to an immediate remedy where the law provides one. The Complaints Policy applies.

21. Privacy, photos and communications

Zekta handles personal information under its Privacy Policy and may create service photographs, reports, call recordings or transcripts as disclosed in the applicable policies. Operational emails and SMS may be sent to administer the contract. Marketing communications require the consent or other legal basis required by law and include an opt-out mechanism where required.

22. Subcontractors

Zekta may use suitably qualified and insured workers or subcontractors and remains responsible for contracted services to the extent required by law. Regulated work will only be allocated to a person with the necessary licence or authority.

23. Ending the contract

Either party may end the contract for a serious breach not remedied within a reasonable time after notice, or immediately for serious safety, fraud, violence, unlawful conduct or insolvency risk where lawful. The Customer must pay for properly completed work and reasonable non-cancellable commitments up to termination, subject to any refund or remedy right.

24. General

If a term is invalid, it is read down or severed to the minimum extent necessary without affecting the remainder. A delay in enforcing a right is not a waiver. The contract is governed by Queensland law and the parties submit to Queensland courts and tribunals, subject to any mandatory jurisdiction. Notices may be sent to the most recent contact details provided.

Document control and contact

Questions and notices: contact@zektapropertyservices.com.au | 0483 750 816 | www.zektapropertyservices.com.au. The owner must approve amendments. The current published version applies prospectively according to its terms and applicable law.

Document 2

Payments, Deposits, Invoicing and Debt Recovery Policy

When amounts are due, how deposits work, invoice disputes and fair overdue-account steps.

1. Purpose and application

This Policy explains when amounts are due, when deposits may be requested, how disputed invoices are handled and the fair steps Zekta may take on overdue accounts. It forms part of the Customer Service Terms where incorporated into a quote, booking or agreement.

2. Prices

Prices are in Australian dollars. A quote or invoice will state whether GST applies. Zekta will not represent an amount as including GST unless entitled and required to charge it. Additional charges apply only where disclosed in advance, included in the agreed pricing method, or approved as a variation.

3. Residential payment terms

Unless otherwise stated in an accepted quote, residential invoices are due immediately when the service is completed. Zekta may provide an electronic payment link, bank details, EFTPOS or another enabled method. Cash is accepted only where confirmed and a receipt will be provided.

4. Approved accounts

A commercial, real-estate or other client may apply for an approved account. Approval is discretionary and may include a spending limit, authorised contacts and credit checks permitted by law. Approved-account invoices are due within 7 calendar days of the invoice date unless a signed agreement states another period. Account privileges may be suspended for overdue amounts or material credit risk.

5. Deposits for materials and supplies

Zekta may require a deposit when materials or supplies must be purchased for a job or another specific upfront commitment is disclosed. The quote will identify the deposit amount or calculation, what it funds, whether the relevant items are custom, special-order or non-returnable, and when payment is required. The deposit will be credited against the final invoice. Zekta will comply with any statutory deposit cap that applies to regulated building work.

6. Deposit administration

  • No material purchase or reserved commencement is required until cleared funds are received.
  • Zekta will keep reasonable purchase and allocation records.
  • A deposit is not automatically non-refundable merely because it is called a deposit.
  • If Zekta cancels without customer breach and cannot supply the agreed work, unused deposit funds will be refunded promptly, subject to any lawful alternative agreed with the Customer.
  • If the Customer cancels, Zekta may deduct only reasonable amounts for properly ordered non-returnable materials, supplier restocking or cancellation costs, completed work and other actual loss recoverable by law; the balance is refunded.
  • Where practicable, paid materials may be offered to the Customer if suitable and fully paid, subject to supplier rights, safety and collection arrangements.

7. Progress payments

Progress payments apply only if stated in the quote or agreed variation and must correspond to defined stages, delivered materials or work performed. Zekta will not structure payments to avoid a statutory deposit limit.

8. Invoices

Invoices will identify Zekta, the Customer, invoice and job references, issue date, description of services, agreed charges, payments received, balance, due date and payment instructions. The Customer must promptly report an incorrect billing contact or missing purchase-order reference.

9. Payment methods and third-party providers

Available methods may include bank transfer, EFTPOS, cash, card payment and enabled buy-now-pay-later products. Availability is not guaranteed. Third-party provider terms, eligibility checks, fees and privacy practices may apply. Zekta will not store full payment-card details unless using a compliant authorised provider and appropriate controls.

10. Invoice queries and disputes

A Customer should raise a genuine query as soon as practicable, identifying the disputed amount and reason. The undisputed portion remains payable. Zekta will pause active recovery of the genuinely disputed portion while reviewing it, request supporting information if necessary and provide an outcome. Raising a dispute does not justify withholding unrelated invoices.

11. Overdue process

  • Issue a courteous reminder after the due date.
  • Contact the Customer and attempt to resolve administrative error, hardship or genuine dispute.
  • Give a final written notice specifying the amount, basis and a reasonable payment date.
  • Suspend non-essential future services or account credit after notice where reasonable.
  • Refer the debt to a lawful collection service or commence recovery only when proportionate and justified.

12. Fees, interest and recovery costs

Zekta will charge a late fee, interest, dishonour fee or recovery cost only where it was clearly disclosed and accepted, reflects a reasonable estimate or actual cost, and is lawful. Until a specific fee schedule is published and incorporated, no automatic late fee applies. Zekta may seek reasonable external recovery costs where the contract and law permit, but will not impose punitive amounts.

13. Payment plans and hardship

Zekta may agree to a written payment plan based on circumstances. A plan does not waive the balance unless expressly stated. Zekta will communicate respectfully and will not use coercion, harassment, misleading threats or disclosure to unrelated persons.

14. Allocation, receipts and refunds

Payments may be allocated to the invoice nominated by the Customer, or otherwise to the oldest undisputed due balance. Receipts are available. Approved refunds will ordinarily be returned to the original payment method within a reasonable processing period, subject to provider timeframes.

15. Records and privacy

Financial records are retained for taxation, accounting, dispute and legal purposes and protected under the Privacy Policy. Payment information is disclosed only as reasonably necessary to banks, payment providers, accountants, insurers, professional advisers or lawful recovery services.

Document 3

Cancellation, Rescheduling and Property Access Policy

Notice periods, failed access, weather rescheduling and recurring service changes.

1. Purpose

This Policy provides a fair approach to changes, failed attendance, access problems and weather-affected services. It applies where incorporated into a booking or contract.

2. Customer cancellations

A Customer may cancel or reschedule without a cancellation charge by giving at least 24 hours' notice before the scheduled arrival window. Notice should be given by phone or another cancellation method stated in the booking confirmation. A message is effective when received through the designated channel.

3. Late cancellation

Where less than 24 hours' notice is given, Zekta may charge a reasonable disclosed amount reflecting lost productive time, travel, administration, non-cancellable supplier commitments or other actual loss. Zekta will consider whether the slot was filled and the reason for cancellation. The charge will not exceed what is reasonably necessary to protect Zekta's legitimate interests.

4. Failed access or attendance

A failed-access charge may apply where Zekta attends as arranged but cannot lawfully or safely enter, a required person is absent, keys or codes do not work, animals are unsecured, or the site is not reasonably ready. Zekta will attempt reasonable contact before leaving where safe and practicable. Any fee must have been disclosed and reflect reasonable attendance costs.

5. Deposits and ordered materials

Cancellation does not automatically forfeit a deposit. Zekta may retain or recover reasonable amounts for completed work, properly ordered non-returnable materials, supplier restocking or cancellation charges and other actual loss recoverable by law. Any remaining deposit is refunded. Custom or special-order materials should be identified before purchase.

6. Weather and environmental conditions

Outdoor work may be delayed by rain, storms, extreme heat, high winds, saturated ground, fire risk, water restrictions or conditions that make work unsafe or likely to cause damage. A weather reschedule is not treated as customer cancellation. Zekta will offer the next reasonably available time and communicate material changes.

7. Zekta cancellations

Zekta may reschedule because of safety, illness, equipment failure, supplier delay, emergency demand or circumstances beyond reasonable control. Zekta will give as much notice as practicable. If Zekta cannot provide prepaid work within the agreed or a reasonable time, the Customer may have cancellation or refund rights under the Australian Consumer Law.

8. Unsafe or materially different sites

Zekta may stop or decline work where undisclosed hazards, contamination, aggressive behaviour, dangerous animals, unlawful instructions, excessive obstacles or conditions outside the agreed scope are identified. The parties may agree to remedial preparation, a variation or specialist referral. Charges depend on work performed and reasonable costs, not an automatic penalty.

9. Recurring services

A recurring service may be paused or ended with the notice stated in the recurring-service agreement, or 24 hours before the next visit if no longer period was agreed. Ending future visits does not remove liability for work already performed or specific non-cancellable commitments.

10. Exceptional circumstances

Zekta may waive or reduce a fee for genuine emergency, hospitalisation, bereavement, sudden access restriction or another exceptional circumstance. Customers should provide only information reasonably necessary; sensitive evidence will not ordinarily be required.

11. Disputes

A Customer may ask for a cancellation or access charge to be reviewed. Zekta will explain the basis, relevant attendance or purchasing records and outcome. Australian Consumer Law rights are preserved.

Document 4

Privacy and Personal Information Policy

What we collect, why, who we share it with, security, retention, access and correction.

1. Commitment and scope

Nathanial Beer trading as Zekta Property Services respects privacy and protects personal information used in enquiries, quotes, bookings, property services, the real-estate portal, service reports, payments and communications. This Policy applies to customers, occupants, property owners, agents, suppliers, workers, contractors and website or portal users.

2. Legal position

Zekta will follow privacy obligations that apply to it, including the Privacy Act 1988 (Cth) and Australian Privacy Principles if Zekta is an APP entity. Even where a small-business exemption applies, Zekta adopts the practical protections in this Policy as its operating standard. Other laws, contractual confidentiality duties and recording restrictions may also apply.

3. Information collected

  • Identity and contact details, including name, organisation, role, phone and email.
  • Property address, access instructions, ownership or agency authority and occupant information.
  • Enquiry, quote, booking, invoice, payment and account records.
  • Service scope, work history, property observations, hazards and maintenance information.
  • Photographs, video, audio, call recordings, transcripts and service reports where disclosed.
  • Portal credentials, activity logs, device, browser, security and diagnostic information.
  • Communications, complaints, consent and policy-acceptance records.
  • Worker, contractor, supplier, insurance and licensing information.
  • Any sensitive information voluntarily provided where reasonably necessary, which Zekta will minimise.

4. How information is collected

Information may be collected directly by phone, form, email, SMS, website, portal, quote acceptance, site attendance or payment; from an authorised property manager, owner, tenant, referrer or representative; from service providers; and from public or lawful sources where reasonably necessary. Zekta will not covertly collect information in a place where privacy is reasonably expected.

5. Purposes

  • Responding to enquiries and preparing quotes.
  • Scheduling, performing, documenting and improving services.
  • Managing property access, safety, hazards and emergencies.
  • Producing and delivering service reports, photographs and invoices.
  • Operating and securing the portal and business systems.
  • Verifying authority, identity, licences, insurance and account status.
  • Processing payments and recovering lawful debts.
  • Handling complaints, incidents, insurance and legal obligations.
  • Sending operational notifications and, with the required consent, marketing.
  • Analytics, quality assurance and business administration using minimised information.

6. Collection notices and consent

Zekta will give a collection notice where required or reasonably appropriate, explaining the purpose, usual disclosures and relevant consequences of not providing information. Consent will be obtained where required, including for optional marketing or public marketing use of identifiable property imagery. Consent may be withdrawn for future optional use, but not where continued processing is required to perform a contract, retain legal records or protect legitimate rights.

7. Disclosure

Zekta may disclose information to authorised owners, property managers and client contacts; workers and suitably bound subcontractors; payment, hosting, communications, software and storage providers; accountants, insurers, advisers, auditors and debt-recovery providers; emergency services, regulators or law enforcement where authorised or required; and another party with consent. Zekta will limit disclosure to what is reasonably necessary.

8. Overseas and cloud services

Some technology providers may store or process information outside Australia. Where applicable, Zekta will assess providers, use reasonable contractual and security protections, and disclose likely countries where required and reasonably ascertainable. Provider locations may change and should be maintained in Zekta's internal vendor register.

9. Photographs and reports

Property photographs and reports are used for evidence of work, condition, hazards, client communication, disputes, insurance and quality assurance. Private documents, faces, number plates and personal belongings should be avoided or obscured where not necessary. Images will not be used publicly for marketing merely because they were collected for service delivery; separate permission is required for identifiable marketing use.

10. Call recording and transcription

Calls may be recorded or transcribed only in accordance with the Zek Policy and applicable Queensland law. Callers will be notified where required and as Zekta's standard practice. Access, use and disclosure are restricted to legitimate operational, quality, safety, dispute and legal purposes.

11. Security

  • Role-based access and unique user accounts.
  • Strong authentication and multi-factor authentication where supported.
  • Encryption in transit and reputable hosted services.
  • Secure device configuration, updates and malware protection.
  • Backups and recovery controls proportionate to business risk.
  • Access removal when a worker, contractor or portal user no longer requires it.
  • Incident reporting and the Data Breach Response Plan.
  • Avoiding storage of full payment-card information in ordinary business systems.

12. Retention and deletion

Zekta retains information only as long as reasonably required for the purpose collected, taxation and business records, warranties, insurance, safety, disputes and legal obligations. Retention periods are set in an internal schedule. When no longer required, information is securely deleted, destroyed or de-identified, subject to backup cycling and legal holds.

13. Access and correction

A person may request access to or correction of their personal information by contacting contact@zektapropertyservices.com.au. Zekta will verify identity and respond within a reasonable period. Access may be limited where permitted by law, including where it would unreasonably affect another person's privacy, reveal commercially sensitive evaluative material or prejudice legal rights. Reasons will be given where required.

14. Anonymity

Where lawful and practicable, a person may make a general enquiry anonymously or using a pseudonym. Zekta will usually require accurate identity, authority and property details to quote, enter a property, extend credit or perform services.

15. Direct marketing

Zekta will send commercial electronic messages only with the consent or other basis required by law, identify the sender and provide a functional unsubscribe method. Opt-out requests will be actioned within the legally required period. Operational messages about an existing booking, invoice, safety issue or account are not treated as optional marketing merely because they use email or SMS.

16. Data breaches and complaints

Privacy concerns should be sent to contact@zektapropertyservices.com.au. Zekta will investigate and respond. Suspected breaches are handled under the Data Breach Response Plan. If the Notifiable Data Breaches scheme applies, Zekta will assess suspected eligible breaches and notify affected individuals and the OAIC where required.

17. Changes

The current version will be published with its effective date. Material changes affecting existing contractual use will be communicated where appropriate and will not remove accrued rights.

Document 5

Property Photography, Recording and Service Report Policy

How job photos and recordings are captured, used, retained and never used for marketing without permission.

1. Purpose

Zekta uses proportionate photographs, video and service records to show work performed, property conditions and hazards. This Policy separates operational evidence from optional public marketing use.

2. Operational recording

Where reasonably necessary and disclosed through the quote, booking, portal or site instructions, Zekta may photograph or record the work area before, during and after a service. Operational recording may document access, scope, completion, damage, obstacles, hazards, materials, meter or asset identifiers and relevant visible conditions.

3. Privacy boundaries

  • Do not photograph bathrooms, bedrooms, private documents or personal-care areas unless directly necessary and specifically authorised.
  • Avoid identifiable occupants, children, neighbours and visitors.
  • Avoid or obscure faces, number plates, mail, keys, access codes, family photographs and sensitive documents where not necessary.
  • Do not record a person engaged in a private act or in circumstances where a reasonable person would expect privacy.
  • Stop recording if an occupant raises a reasonable concern, unless limited evidence is required for immediate safety, incident or legal reasons and recording is lawful.

4. Customer and occupant responsibilities

The Customer should tell occupants that an authorised property service may involve operational photography and should remove or secure sensitive items. A property manager must have appropriate authority to instruct Zekta and is responsible for tenant notices or entry processes that the tenancy relationship requires. Zekta remains responsible for its own lawful recording conduct.

5. Service reports

A report may include job details, arrival and completion information, scope performed, materials, photographs, observations, hazards, recommendations and outstanding actions. It records what was reasonably observed at the time; it is not a guarantee against hidden defects and is subject to the Inspection and Report Limitations Policy.

6. Accuracy and amendment

Reports should distinguish fact, customer-provided information, observation, opinion, automated suggestion and recommendation. A customer may request correction of a factual error. Zekta may preserve the original record and add a dated correction or supplementary note to protect audit integrity.

7. Recipients

Reports are provided to the contracting Customer and authorised recipients. A property manager may receive information relevant to a managed property. Tenant or occupant personal information should be excluded unless necessary and authorised. Reports must not be forwarded publicly where they contain personal, security or confidential property information.

8. Marketing use

Zekta will not use identifiable property images, addresses, occupants or customer details for advertising or social media without separate, informed permission. Marketing permission is optional and not a condition of service. Where practical, images should be de-identified even when permission exists. Permission can be withdrawn for future posts, although removal from third-party archives or prior printed material may not always be possible.

9. Ownership and licence

Zekta owns copyright in reports and images it creates, subject to the Customer's rights in underlying property and personal information. On full payment, the Customer receives a non-exclusive licence to use the report for internal property-management and recordkeeping purposes. The Customer must not alter a report in a misleading way or present it as a regulated certification.

10. Retention and security

Operational media is stored with the relevant job using access controls and retained under Zekta's retention schedule. High-risk access codes and unrelated sensitive images should be removed or redacted as soon as no longer required. A legal hold may suspend deletion for a dispute, incident or insurance matter.

11. Incidents and law enforcement

Where media records a serious safety incident, suspected offence or property damage, Zekta may preserve and disclose it where authorised or required by law, to insurers, advisers, emergency services or law enforcement. Disclosure must be limited and documented.

Document 6

Zek Virtual Receptionist and Call Recording Policy

Who Zek is, disclosure, recording basis, limits on Zek's authority and escalation to the team.

1. Who Zek is

Zek is Zekta Property Services' virtual receptionist. Zek may answer common questions, collect enquiry details, help route calls, create structured notes and transfer or escalate a caller to the team. Zek is an automated system and is not a human employee, licensed tradesperson, emergency dispatcher, lawyer, building certifier or financial adviser.

2. Disclosure

At the beginning of a Zek-handled call, the caller should be told in clear language that they are speaking with Zek, Zekta's virtual receptionist, and that the call may be recorded and transcribed. Where a caller does not wish to continue with recording or automation, Zek should offer a reasonable alternative such as leaving contact details for the team, where operationally available.

3. Recording basis

Zekta records only calls to which Zekta or its authorised system is a party and handles the recording and any communication of its contents in accordance with Queensland law. Notification is Zekta's standard even where participant recording may otherwise be lawful. Recordings must not be published or disclosed beyond a lawful and legitimate purpose.

4. Purposes

  • Accurately capturing the enquiry and passing it to the team.
  • Creating booking, quote or callback requests.
  • Quality assurance and training.
  • Confirming instructions, disclosures or consent.
  • Handling safety issues, complaints and disputes.
  • System security, fraud prevention and legal compliance.

5. Information Zek may collect

Zek may request name, organisation, contact details, property address, service needed, preferred timing, access information, hazards and other details reasonably necessary to route the enquiry. Zek should not request card passwords, online-banking credentials, unrelated health information, detailed alarm codes in ordinary conversation or other information not needed for the task.

6. Limits on authority

  • Zek may provide general service information and indicative process guidance.
  • Zek must not guarantee price, attendance time, job acceptance, technical outcome or legal compliance unless the information comes from an approved fixed rule and is clearly applicable.
  • Zek must not approve variations, waive debts, settle complaints, make safety-critical diagnoses or bind Zekta to unusual contractual terms.
  • Quotes, regulated-work decisions and material commitments require authorised human review.
  • AI-generated summaries and classifications must remain open to correction.

7. Emergencies

Zekta does not offer a public 24-hour emergency-response service. If there is immediate danger, fire, serious injury, violence, suspected gas leak or another life-threatening situation, the caller must contact 000. Approved real-estate clients may receive a dedicated emergency contact under their client agreement; this does not replace emergency services and does not guarantee immediate attendance.

8. Escalation

Zek should escalate threats to life or safety, uncertainty about regulated work, serious complaints, vulnerable callers, data-access requests, suspected fraud, complex real-estate instructions and any request outside approved knowledge. If transfer is unavailable, Zek should create a clear callback record without promising an exact response time unless one has been approved.

9. Accuracy and corrections

Automated systems can misunderstand speech or provide incomplete information. The caller should confirm important details in the quote, booking confirmation or written follow-up. A caller may ask Zekta to correct a transcript or enquiry record. Zekta remains responsible for appropriately reviewing information before acting on a material instruction.

10. Access, retention and disclosure

Recordings and transcripts are restricted to authorised team members and service providers with a legitimate need. They are retained only for operational, dispute, safety, quality and legal periods under Zekta's schedule, then deleted or de-identified. Disclosure follows the Privacy Policy and applicable recording laws.

11. Complaints and opt-out

Concerns about Zek, recording or a transcript may be sent to contact@zektapropertyservices.com.au or raised by calling 0483 750 816. Zekta will review the relevant interaction, correct substantiated errors and provide an alternative contact method where reasonable.

Document 7

Complaints, Rectification, Refunds and Dispute Resolution Policy

How to complain, our response standards, rectification, refunds and external options.

1. Commitment

Zekta aims to resolve concerns promptly, respectfully and consistently. This Policy does not limit Australian Consumer Law rights or require a customer to accept rectification where the law provides another remedy.

2. Making a complaint

Complaints may be made by email to contact@zektapropertyservices.com.au or phone to 0483 750 816. Include the customer name, job or invoice reference, property, date, issue, desired outcome and relevant photographs. Zekta will accommodate a reasonable communication need and will not require unnecessary sensitive information.

3. Immediate safety or damage

If there is an immediate risk, the Customer should make the area safe, avoid further damage where reasonable, contact emergency or licensed services if required and notify Zekta promptly. Taking reasonable mitigation steps does not waive rights. The Customer should preserve relevant evidence and receipts.

4. Response standards

Zekta aims to acknowledge a complaint within 2 business days and provide an initial assessment or request for information within 5 business days. Complex, insurer-involved or expert matters may take longer; Zekta will explain the delay and provide updates. These are service targets, not a restriction on legal rights.

5. Assessment

  • Review the accepted scope, quote, variations, service report and communications.
  • Separate a service defect from pre-existing condition, hidden condition, ordinary wear or customer-supplied product failure.
  • Offer inspection where reasonably necessary and not unduly burdensome.
  • Consider urgency, safety, seriousness, recurrence, actual loss and consumer guarantee obligations.
  • Keep the customer informed and avoid conflicts of interest.

6. Rectification

For a problem that can lawfully and reasonably be remedied, Zekta may offer to inspect and rectify within a reasonable time. Zekta bears rectification cost where responsible. The Customer should provide reasonable access. Zekta will not insist on repeated repair attempts where the failure is major or the law gives the Customer a different remedy.

7. Refunds and price reductions

A refund, partial refund, price reduction, cancellation or compensation will be assessed according to the Australian Consumer Law, the contract and the circumstances. A major service failure may entitle a consumer to cancel and obtain a refund for the unused portion or seek compensation for reasonably foreseeable loss. Minor failures generally allow a reasonable opportunity to remedy. Refunds are not refused merely because services have been partly consumed where the law requires an apportioned remedy.

8. Property damage claims

Zekta will document the allegation, preserve records and notify its insurer where appropriate. The Customer must not make permanent repairs before reasonable inspection unless urgent mitigation is necessary. Zekta may request quotes or expert information proportionate to the claim. Any settlement must be recorded and cannot exclude non-waivable rights.

9. Exclusions and pre-existing matters

Zekta may decline responsibility to the extent the issue was caused by a pre-existing defect, inaccurate instruction, undisclosed hazard, customer-supplied defective product, unauthorised third-party alteration or event beyond Zekta's control, but only after considering whether Zekta failed to exercise due care or contributed to the loss.

10. Internal review and external options

If dissatisfied, the Customer may request review by the owner or a person not directly responsible for the initial decision where available. Zekta will provide a final written position. The parties may consider negotiation or mediation. Customers may also contact the Queensland Office of Fair Trading, the ACCC for information, the Queensland Civil and Administrative Tribunal where within jurisdiction, or obtain independent legal advice.

11. Conduct and privacy

Both parties should communicate respectfully. Zekta may restrict abusive, discriminatory or threatening contact while maintaining a reasonable complaint channel. Complaint information is confidential and shared only for resolution, insurance, advice or legal compliance.

12. Improvement

Substantiated complaints and recurring themes are recorded, reviewed and used to improve quoting, training, checklists, supplier selection and system controls.

Document 8

Work Health, Safety and Environmental Policy

Risk management, site assessment, equipment, PPE, hazards, incidents and stop-work authority.

1. Commitment

Zekta is committed to eliminating risks to health and safety so far as reasonably practicable and, where elimination is not reasonably practicable, minimising them using the hierarchy of controls. Safety takes priority over schedule, price pressure and customer convenience.

2. Scope and responsibilities

This Policy applies to the owner, workers, contractors, subcontractors, visitors and work influenced or directed by Zekta. The owner provides safe systems, equipment, information, training, consultation and incident management. Every worker must take reasonable care, follow instructions, use controls and report hazards. Customers must disclose known site hazards and follow reasonable exclusion and access instructions.

3. Risk management

  • Identify hazards before accepting and again before starting work.
  • Assess who may be harmed and the likelihood and consequence.
  • Eliminate the risk where reasonably practicable.
  • Otherwise use substitution, isolation and engineering controls before relying on administration and PPE.
  • Record controls proportionate to risk and review them when conditions change or after an incident.

4. Pre-start site assessment

  • Access, traffic, pedestrians, children, animals and neighbours.
  • Ground condition, slopes, edges, holes, overhead and underground services.
  • Electrical sources, water, gas, asbestos indicators and structural instability.
  • Needles, sharps, faeces, mould, chemicals, pests and contaminated waste.
  • Weather, heat, UV, wind, storm, fire and visibility.
  • Manual handling, noise, vibration, dust and projectiles.
  • Working alone, communication and emergency access.
  • Required licences, competencies, permits and exclusion zones.

5. Plant and equipment

Equipment must be suitable, maintained, guarded and inspected before use. Only trained and authorised people may operate mowers, chainsaws, pressure cleaners, orbital scrubbers, powered cutting tools or other hazardous equipment. Defective equipment is isolated and tagged out. Manufacturer instructions and applicable safety standards are followed.

6. PPE

PPE is selected from the risk assessment and may include safety footwear, eye and hearing protection, gloves, high-visibility clothing, respiratory protection, sun protection and leg protection. PPE is a supporting control, not a substitute for eliminating or isolating hazards, and must fit, be maintained and be used correctly.

7. Chemicals and hazardous substances

Maintain a current safety data sheet and chemical register where required. Use labelled containers, follow dilution and application instructions, prevent incompatible mixing, protect occupants and the environment, and provide ventilation and spill controls. Chemicals must not be left accessible to children or unauthorised persons.

8. Biological and sharp hazards

Animal waste, human waste, sharps, blood, mould and unknown substances require specific assessment. Workers must not handle suspected asbestos, drug paraphernalia or hazardous waste outside their training, PPE, equipment and lawful disposal arrangements. A service may be stopped and a specialist engaged.

9. Electrical, plumbing and regulated hazards

Workers must not perform electrical, plumbing, gas, asbestos or other regulated work without the required licence and controls. Leads and electrical equipment used outdoors or near water must be protected, inspected and used in accordance with electrical safety requirements. Suspected live or leaking services require isolation and escalation.

10. Lawn, chainsaw and pressure-cleaning controls

  • Inspect for stones, wire, toys, hidden objects and unstable surfaces.
  • Establish exclusion zones for projectiles, high-pressure spray and cutting operations.
  • Never direct high-pressure water at people, animals, electrical equipment or unsuitable substrates.
  • Use chainsaws only within competence, with required PPE, escape planning and no work aloft unless properly trained, equipped and authorised.
  • Control noise, runoff, overspray, debris and public access.

11. Manual handling and fatigue

Plan lifting, use mechanical aids or team lifts, reduce awkward loads and rotate repetitive tasks. Workers must be fit for work and manage fatigue, hydration, heat and recovery. No person may work while impaired by alcohol, illicit drugs, medication effects or fatigue that creates unacceptable risk.

12. Lone work and communication

Higher-risk lone tasks require a check-in plan, charged phone, known location, escalation time and emergency contact. Tasks requiring assistance, rescue capability or direct supervision must not be performed alone.

13. Violence, aggression and animals

Workers may withdraw from threats, harassment, violence or uncontrolled animals. Do not enter where personal safety is uncertain. Contact police or emergency services where necessary. Incidents are recorded and future service conditions reviewed.

14. Incidents and emergencies

Provide first aid and call 000 when required, preserve life, prevent further harm and secure the area. Notify the owner promptly. Notifiable incidents must be preserved and reported to the regulator as required. Maintain an injury and near-miss register and cooperate with insurer and regulator processes.

15. Environmental controls

Prevent unlawful discharge, excessive dust, chemical runoff, damage to vegetation and unnecessary waste. Follow water restrictions, disposal rules and product labels. Separate recyclable or reusable material where practicable and never dump waste unlawfully.

16. Consultation, training and records

Consult workers and relevant duty holders when identifying hazards, changing systems or responding to incidents. Keep evidence of inductions, competency, licences, inspections, maintenance, risk assessments, incidents and corrective actions.

17. Stop-work authority

Every worker has authority and a duty to stop and seek guidance where work is unsafe, unlawful, outside competence or materially different from the assessed task. No person will be disadvantaged for a good-faith safety stop.

Document 9

Inspection, Observation and Report Limitations Policy

What a Zekta visual report is, what it is not, and how it should be relied upon.

1. Purpose

This Policy defines the nature and limits of Zekta service reports, maintenance observations and visual inspections so recipients can use them appropriately.

2. Nature of service

Unless the accepted scope expressly states otherwise and an appropriately qualified person is engaged, a Zekta inspection is a non-invasive visual observation of reasonably accessible areas at the time of attendance. It supports maintenance triage and service records; it is not a comprehensive technical investigation or statutory certification.

3. Excluded professional reports

A standard Zekta report is not a structural engineering report, building and pest inspection, electrical or plumbing safety certificate, asbestos survey, fire compliance inspection, smoke-alarm certification, pool safety certificate, valuation, quantity survey, security risk assessment, environmental audit or legal compliance certificate.

4. Access limitations

The report is limited by locked or occupied areas, furniture, stored goods, vegetation, height, unsafe access, weather, lighting, services that are off, concealed construction and any instruction not to disturb property. Zekta will record material access restrictions where practicable but cannot report conditions that were not reasonably observable.

5. Non-invasive approach

Zekta does not ordinarily lift flooring, move heavy furniture, open sealed assemblies, excavate, enter confined spaces, climb onto unsafe roofs, dismantle equipment, energise unsafe systems or perform destructive testing. Moisture meters, cameras or AI tools do not make the assessment invasive or conclusive.

6. Time-specific evidence

Conditions may change after attendance. A report speaks only to the date, time, weather, access and visible state recorded. Photographs are illustrative and may not show scale, depth or every affected area.

7. Observations and recommendations

An observation describes a visible condition; it does not necessarily identify cause, responsibility, urgency or compliance. Recommendations are maintenance suggestions or referrals, not guarantees. Suspected defects should be assessed by the appropriate licensed trade or professional before costly or safety-critical decisions.

8. Hazards and urgent issues

If Zekta observes an apparent serious hazard, it will use reasonable efforts to notify the authorised contact and may recommend isolation or emergency assessment. Zekta does not warrant that every hazard will be identified. Immediate danger must be reported to 000 or the appropriate emergency utility or authority.

9. AI-assisted observations

Software may assist with image description, categorisation, drafting or pattern recognition. AI output is not proof of cause or compliance and may be wrong. Material findings must be reviewed by an authorised person before release, and safety-critical or regulated advice must be referred to a suitably qualified professional. Reports should label material AI-generated suggestions where their automated origin affects interpretation.

10. Reliance and recipients

The report is prepared for the named Client and stated purpose. A third party should not rely on it for purchase, sale, insurance, legal proceedings, capital works or compliance without Zekta's written agreement and appropriate professional review. Authorised property managers may use it for maintenance triage and owner communication within the stated limits.

11. Errors and follow-up

Recipients should promptly identify factual errors or missing agreed areas. Zekta may correct, supplement or recommend a targeted reinspection. The original may be preserved for audit purposes. Nothing limits consumer remedies for failure to provide the agreed reporting service with due care and skill.

Document 10

Website Terms of Use

Terms governing use of this website, its content, forms and intellectual property.

1. Acceptance

These Terms govern use of www.zektapropertyservices.com.au and related public web pages operated by Nathanial Beer trading as Zekta Property Services. By using the website, a visitor agrees to these Terms. Separate Customer Service Terms apply to quotes, bookings and paid services.

2. General information

Website content is general information and may not reflect a property's conditions or a final service scope. Service descriptions, examples, indicative prices and availability are not binding offers unless confirmed in an accepted quote or work order.

3. No professional advice

Content is not legal, financial, engineering, building-certification, electrical, plumbing, pest, asbestos or emergency advice. Users should obtain advice from an appropriately qualified professional for their circumstances.

4. Enquiries and bookings

Submitting a form does not guarantee acceptance, price or attendance. Users must provide accurate information and not submit unlawful, threatening, misleading or malicious content. Zekta may contact the user to clarify the request under the Privacy Policy.

5. Intellectual property

Unless stated otherwise, website text, branding, graphics, reports, layouts and software are owned or licensed by Zekta. Users may view and make a reasonable personal or internal-business copy but must not reproduce, alter, sell, scrape or create misleading derivative content without permission.

6. Acceptable use

  • Do not interfere with the site or attempt unauthorised access.
  • Do not introduce malware or automated excessive traffic.
  • Do not impersonate another person or submit another person's information without authority.
  • Do not use content unlawfully, misleadingly or to infringe privacy or intellectual property.
  • Do not rely on public content as confirmation of emergency attendance.

7. Links and third parties

Links to third-party sites are provided for convenience and do not imply control or endorsement. Third-party payment, finance, map, review and social platforms have their own terms and privacy practices.

8. Availability and accuracy

Zekta takes reasonable care but does not guarantee that the website is uninterrupted, error-free or always current. Zekta may update or withdraw content. Any disclaimer is subject to rights that cannot lawfully be excluded.

9. Privacy and cookies

Personal information is handled under the Privacy Policy. Essential cookies and similar technology may be used for security and operation. Non-essential analytics or advertising technology should be disclosed and managed with any consent required by law.

10. Liability

To the extent permitted by law, Zekta is not responsible for loss caused solely by unauthorised reliance on general website information, third-party systems or events outside reasonable control. This does not exclude liability for Zekta's negligence or statutory obligations where it cannot be excluded.

11. Governing law and contact

Queensland law governs these Terms. Questions may be sent to contact@zektapropertyservices.com.au.

Document 11

Communications, Notifications and Marketing Policy

Operational messages, marketing consent, unsubscribe handling, reviews and social media.

1. Purpose

This Policy governs operational messages, marketing consent, sender identification, opt-outs, reviews and communication records.

2. Operational communications

Zekta may send emails, SMS, portal notifications or calls reasonably necessary to respond to an enquiry, arrange access, confirm or change a booking, provide a quote or report, issue an invoice, manage safety, recover an account or administer an existing contract. Operational messages should be factual and proportionate.

3. Marketing consent

Marketing email or SMS will be sent only where the recipient has given express consent or Zekta has another lawful basis for inferred consent. A one-off enquiry will not automatically be treated as blanket consent for ongoing promotions. Consent records should identify the source, date, scope and wording shown.

4. Message requirements

Commercial electronic messages must accurately identify Zekta, provide valid contact information and include a clear, functional and low-cost unsubscribe method where required. Unsubscribe facilities must remain functional for the legally required period and requests must be actioned within 5 working days or sooner where practicable.

5. Opt-out effect

An opt-out stops optional marketing through the nominated channel but does not prevent necessary transactional, safety, legal or account messages. Zekta will maintain a suppression record so the person is not accidentally re-added without fresh consent.

6. Sender IDs and replies

A branded sender ID may prevent direct SMS replies. Where used, the message must give a clear alternative contact or cancellation method. Booking notices should not mislead recipients into thinking a reply was received where the channel cannot accept replies.

7. Reviews and testimonials

Zekta may invite genuine feedback but will not buy positive reviews, suppress legitimate negative reviews through threats, fabricate endorsements or publish identifiable testimonial details without permission. Incentives, if any, must not depend on the sentiment and must be disclosed where required.

8. Social media

Workers must not disclose customer addresses, access information, disputes, occupants or identifiable job media without authority. Responses should remain professional and must not admit liability, disclose confidential information or argue publicly about a complaint. Complaints should be moved to a private resolution channel.

9. Records

Important instructions, approvals, variations, complaints and opt-outs must be recorded in the relevant job or customer record. Informal messages should be summarised where necessary for an accurate audit trail.

10. Frequency and vulnerable recipients

Marketing frequency should be reasonable and not exploit urgency, fear, age, disability, financial hardship or a recent emergency. Zekta will avoid pressure selling and misleading scarcity claims.

Document 12

Work, Contractor and Subcontractor Code of Conduct

Conduct standards binding every person representing Zekta on site.

1. Application

This Code applies to every employee, contractor and subcontractor representing Zekta. Compliance is a condition of engagement, alongside the contract, WHS Policy and lawful instructions.

2. Professional conduct

  • Be punctual, identifiable, respectful and fit for work.
  • Communicate honestly and do not promise unauthorised work, prices or timeframes.
  • Protect the customer's property, privacy and security.
  • Use appropriate language and avoid harassment, discrimination, bullying or intimidation.
  • Do not solicit private side work from Zekta clients without written permission.
  • Report conflicts of interest, errors, damage, complaints and near misses promptly.

3. Authority and scope

Perform only allocated work within competence, licence, insurance and approval. Do not vary scope, incur material cost, engage another person or accept cash outside approved processes without authority. Stop and escalate regulated, unsafe or materially different work.

4. Customer property and access

Keys, codes and access devices must be logged, secured, used only for the assigned purpose and returned promptly. Never duplicate, photograph or share them without authority. Do not enter unauthorised areas, use customer property for personal purposes or allow unapproved visitors onsite.

5. Privacy and confidentiality

Access only information needed for the task. Do not save customer information to personal systems, discuss clients publicly or share job media through personal accounts. Use approved devices and channels. Confidentiality continues after engagement ends.

6. Photography and reporting

Create only necessary job evidence, follow privacy boundaries and upload promptly to the approved system. Reports must be factual, distinguish observation from opinion and disclose uncertainty. Do not manipulate photographs misleadingly or use them for personal or marketing purposes.

7. Safety

Follow risk controls, PPE and manufacturer instructions; maintain exclusion zones; report hazards; and use stop-work authority. Do not work impaired, bypass guards or perform tasks outside training. Serious incidents and injuries must be escalated immediately.

8. Licences, insurance and checks

Provide accurate, current evidence of licences, competencies, insurance and any required checks. Notify Zekta immediately of suspension, restriction, expiry, charge or condition relevant to the engagement. Never lend a licence number or misrepresent authorisation.

9. Vehicles, tools and substances

Use vehicles and equipment lawfully, securely and only as authorised. Complete inspections, report defects, protect tools from theft and keep chemicals labelled. Traffic, parking, load restraint and environmental rules apply.

10. Money, gifts and conflicts

Issue approved receipts and never divert payment. Do not accept a gift or benefit that could influence a decision. Declare relationships with suppliers, clients or competing businesses where a conflict may arise.

11. Technology and AI

Use approved systems and security controls. Do not paste confidential information into unapproved AI tools. AI output must be checked and must not be used as the sole basis for a safety-critical, regulated or defect conclusion.

12. Breaches

Zekta will assess alleged breaches fairly and proportionately. Outcomes may include coaching, corrective action, access restriction, removal from a site, termination of engagement, insurer notification or referral to authorities. Nothing prevents immediate protective action for serious risk.

Document 13

Information Security and Data Breach Response Plan

Minimum security controls, escalation triggers, incident response and notification obligations.

1. Purpose

This Plan establishes proportionate controls and a repeatable response to loss, unauthorised access, disclosure, alteration, ransomware, account compromise or service-provider incidents involving Zekta information.

2. Roles

The owner is the incident lead until another person is formally appointed. The incident lead coordinates containment, evidence, provider contact, legal and insurance advice, notifications and recovery. Every worker and contractor must report a suspected incident immediately and must not conceal, investigate destructively or communicate publicly without authority.

3. Minimum controls

  • Unique accounts and least-privilege access.
  • Multi-factor authentication for email, portal, payments, cloud storage and administration where available.
  • Password manager and no credential reuse.
  • Supported devices, automatic updates, endpoint protection and screen locks.
  • Encrypted connections and secure backups with tested recovery.
  • Prompt offboarding and periodic access review.
  • Vendor assessment and contract review for material data processors.
  • No full card details, passwords or unnecessary access codes in ordinary notes.
  • Retention schedule, secure disposal and protected legal holds.
  • Staff awareness of phishing, invoice fraud and identity verification.

4. Events requiring immediate escalation

  • Lost or stolen device containing or able to access Zekta information.
  • Suspicious login, password reset, forwarding rule or multi-factor prompt.
  • Email or invoice sent to the wrong recipient.
  • Portal user sees another client's property.
  • Ransomware, malware, extortion or unexpected encryption.
  • Published property photo, recording, access code or report without authority.
  • Service provider announces a breach.
  • Unauthorised change to payment details or bank account.
  • Physical loss of keys together with identifiable property information.

5. Response process

  • Protect people and stop ongoing harm.
  • Report to the incident lead and record discovery time, reporter, systems and known information.
  • Contain without destroying evidence: disable or reset accounts, revoke sessions, isolate affected devices, recall messages or restrict links.
  • Preserve logs, screenshots, emails and provider notices; record every action and time.
  • Assess what information and people are affected, sensitivity, protections, likely access and potential harm.
  • Engage technology provider, cyber insurer, legal adviser, bank, payment provider or law enforcement as appropriate.
  • Remediate vulnerabilities, restore from clean backups and monitor for recurrence.
  • Notify affected parties and regulators where required or where voluntary warning is appropriate.
  • Conduct a post-incident review and track corrective actions.

6. Notifiable Data Breaches assessment

If Zekta is subject to the Privacy Act's Notifiable Data Breaches scheme, the incident lead must promptly assess suspected unauthorised access, disclosure or loss. Consider whether a reasonable person would conclude the incident is likely to result in serious harm and whether remedial action prevents that likelihood. Obtain legal advice for uncertain or serious incidents and complete the assessment within the statutory timeframe.

7. Notification content

A notification should be accurate, timely and limited to confirmed facts: Zekta identity and contact, what happened, information involved, recommended protective steps and assistance. Do not speculate, blame or expose other affected people. Coordinate notices to the OAIC and individuals where legally required and with other affected entities where appropriate.

8. Payment diversion and fraud

For suspected invoice fraud, immediately contact the bank using verified details, attempt recall, secure email and accounting accounts, notify affected customers through a separately verified channel and preserve headers and payment records. Never rely on bank-detail changes received only by email without independent verification.

9. Communications

Only the incident lead or authorised adviser communicates externally. Prepare separate messages for affected individuals, clients, workers, providers, insurer, regulators and public enquiries. Maintain privilege where legal advice is obtained and do not promise outcomes that are not confirmed.

10. Incident register

Record incident ID, dates, reporter, systems, data, affected people, containment, assessment, notifications, recovery, root cause, cost and corrective actions. Restrict the register because it may contain sensitive and security information.

11. Testing and review

Test account recovery, backups and a realistic breach scenario at least annually and after major system changes. Review this Plan after every significant incident or near miss.

CallQuote