Data, Privacy & Compliance FAQs (Australia)

Below are answers to common questions about data handling, backups, recovery, privacy, and related requirements for customers operating in Australia. This information is provided for general guidance and is not legal advice. Customers are responsible for determining which laws and requirements apply to their business.

For more information about Australian privacy, marketing, and communication requirements, these official resources are a good place to start:

• Privacy Act 1988 / Australian Privacy Principles (OAIC)
  
  
• Spam Act 2003 / electronic marketing guidance (ACMA)
  
  
• Telemarketing and e-marketing guidance (ACMA)
  
  
• Do Not Call Register

Do Australian phone numbers require a Regulatory Bundle?

Yes. Australian telecommunications providers are subject to identity and phone-number management requirements, including customer identity verification rules published by the Australian Communications and Media Authority (ACMA). In HighLevel, these requirements are handled through an approved Regulatory Bundle for Australian local numbers.

To learn more, see: How to Create and Link a Regulatory Bundle for Australian Local Numbers.

How is customer data protected?

Personal data at rest is encrypted using AES-256-CBC encryption, and data in transit is protected using TLS 1.2 or higher, as outlined in the HighLevel Data Processing Agreement.

Where are backups stored?

Data is backed up daily to the local region. HighLevel also maintains seven days of database backups and monitors backups for successful execution.

For more details, see: HighLevel Security and Compliance Overview.

How quickly are customers notified of a data breach?

The notification timeframe for applicable personal data breaches is 72 hours, as outlined in HighLevel's Data Processing Agreement. Customers may have additional notification or reporting obligations depending on the laws that apply to their business.

What is the Recovery Point Objective (RPO) and Recovery Time Objective (RTO)?

The RPO is 30 Minutes and the RTO is 1 Hour.