Happy Christmas & New Year! Migwell is closed for the Christmas and New Year break.Online purchasing is currently on hold and will resume on Wednesday 8 January.
Price Match Guarantee PRICE MATCH GUARANTEE
30 Day Returns 30 DAY RETURNS*
Fast Delivery FAST DELIVERY
Insider Rewards TRADE & WHOLESALE WELCOME
Book A Demo BOOK A MACHINE DEMO

Security Policy

Security Policy

Migwell Pty Ltd
ABN 97 007 276 468

Last updated: 29.10.2025

1. Purpose

This Security Policy outlines how Migwell Pty Ltd (“we”, “us”, “our”) protects the confidentiality, integrity, and availability of the data and systems we manage. The goal is to safeguard customer, employee, and business information against unauthorised access, disclosure, alteration, or destruction.

2. Scope

This policy applies to:

  • All employees, contractors, and authorised third parties who handle Migwell Pty Ltd information and systems

  • All systems, networks, applications, and devices owned or managed by Migwell Pty Ltd

  • Any personal and business information collected, processed, or stored by Migwell Pty Ltd

3. Information Security Principles

We are committed to:

  • Confidentiality: Protecting information from unauthorised access or disclosure

  • Integrity: Safeguarding the accuracy and completeness of data

  • Availability: Ensuring authorised users can access information and systems when required

4. Security Measures

4.1 Data Protection

  • Personal and business data is stored securely, using encryption where appropriate

  • Access to sensitive information is restricted to authorised personnel only

  • Regular backups are performed and stored securely to prevent data loss

4.2 Network and Systems Security

  • Firewalls, intrusion detection, and anti-malware tools are used to protect systems

  • Software and systems are regularly updated with security patches

  • Remote access is secured through authentication measures (e.g., strong passwords, multi-factor authentication)

4.3 User Access Controls

  • Staff are granted access on a need-to-know basis

  • User accounts are regularly reviewed and deactivated when no longer required

  • Passwords must meet minimum complexity requirements and be updated regularly

4.4 Physical Security

  • Access to offices, workshops, and data storage facilities is restricted

  • Devices are secured against theft or unauthorised access

  • Paper records containing sensitive information are stored securely and disposed of safely

4.5 Monitoring and Logging

  • System activity is monitored to detect suspicious or unauthorised access

  • Logs are reviewed periodically to ensure compliance and identify threats

5. Incident Response

  • Security incidents are to be reported immediately to management

  • Affected systems will be isolated and investigated

  • Customers and relevant authorities will be notified in accordance with legal obligations (including the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988)

  • Lessons learned will be documented to strengthen future security measures

6. Employee Responsibilities

  • All employees and contractors must comply with this policy

  • Staff receive training on data protection and cybersecurity best practices

  • Employees are responsible for safeguarding their accounts, devices, and any customer data they handle

7. Third-Party Service Providers

  • Third-party vendors and partners with access to data must comply with equivalent security standards

  • Contracts and service agreements include confidentiality and data protection clauses

8. Review and Updates

This Security Policy will be reviewed annually or following significant changes to business operations, systems, or legal requirements.

9. Contact Us

If you have any questions or concerns about our security practices, please contact:

Migwell Pty Ltd
Email: [Insert Email Address]
Phone: [Insert Phone Number]
Address: [Insert Business Address]

Home Cart Products