Last updated: 18 September 2026
Who this policy covers
“Aviato Consulting”, “we”, “us” and “our” mean:
- Aviato Consulting Pty Ltd (ABN 48 659 189 429, ACN 659 189 429), Australia
- Aviato Pte. Ltd. (UEN 202506303C), Singapore
- Aviato Consulting Pvt Ltd (CIN U62013GJ2024FTC147726), India
We provide Google Cloud consulting services in Australia, New Zealand and Singapore. Our Indian entity performs internal support functions for the group and does not sell services to the Indian market.
This policy explains how we handle personal information. It applies to https://www.aviato.consulting and to the personal information we collect in the course of our business.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which set the standard we apply across the group. Where local law also applies, we comply with it: the Privacy Act 2020 in New Zealand, the Personal Data Protection Act 2012 in Singapore, and the Digital Personal Data Protection Act 2023 in India.
What we collect
We collect only the personal information we need for the purposes set out below.
Information you give us. Your name, work email address, phone number, employer, role, and anything else you choose to include when you complete a form, book a call, email us, or engage us for work.
Information about your visit. Your IP address, browser and device type, operating system, referring and exit pages, and the dates and times of your visit.
Advertising and campaign identifiers. Where you arrive from an advertisement or a campaign link, we capture the identifiers in that link (for example Google click identifiers and UTM parameters) and retain them so we can attribute the enquiry to the campaign that produced it.
Information from our engagements. Where you are a contact at a client, we hold the business contact details and correspondence needed to deliver and administer the engagement.
We do not seek sensitive information as defined in the Privacy Act, and ask that you do not send it to us unsolicited.
Anonymity and pseudonymity
You can browse this website without telling us who you are, and you can make a general enquiry under a pseudonym. We cannot deliver consulting services or enter a contract without identifying who we are dealing with.
Cookies, analytics and advertising
We use cookies and similar technologies through Google Tag Manager and Google Analytics to understand how the site is used and to measure advertising. Advertising and analytics storage are enabled by default on this site, which means Google may use this data for conversion measurement, remarketing and ad personalisation.
You can clear or block cookies through your browser settings, and you can opt out of personalised Google advertising through Google Ads Settings. Blocking cookies may affect how parts of the site work.
Why we use your information
- To respond to your enquiry and provide the services you have asked for
- To operate, secure and improve the website
- To measure which campaigns and content produce enquiries
- To send you material about our services, where you have asked for it or where it is reasonable to expect it. Every message includes an unsubscribe link
- To meet our legal, tax and record-keeping obligations
Automated decision-making
We use one automated process, and we would rather describe it than leave you to wonder.
Our customer relationship management system scores enquiries to help us prioritise follow-up. The score is calculated from the business information you give us and how you have interacted with our website and emails: the pages and content you viewed, the campaign you arrived from, your role and employer, and what you told us in a form.
The score decides the order in which our business development team works through enquiries. A person decides whether to contact you, what to say, and what to propose. The score does not determine whether you can buy our services, what you are charged, or any other decision affecting your rights or your legal position, and no offer or refusal is made automatically.
If you would like to know how your enquiry was prioritised, or you would prefer we did not score it, email privacy@aviato.consulting and we will handle it manually.
Where we build automated or AI systems for clients, we do so as a service provider on that client’s instructions. The client determines how those systems are used and remains responsible for the personal information in them. This policy does not cover that work.
Who we share it with
We share personal information with service providers who perform functions on our behalf: cloud hosting and infrastructure, website analytics, customer relationship management and marketing, scheduling, and professional advisers. They are permitted to use the information only to provide those services to us.
We also disclose personal information where the law requires or authorises it, or where it is necessary to protect someone’s safety, or our rights or property.
We do not sell personal information.
Overseas disclosure
Personal information we hold may be accessed or stored outside Australia:
- Singapore, where our Singapore entity operates
- India, where our Indian entity performs internal support functions for the group
- The United States, where our analytics, marketing and cloud providers operate
Everyone in the group handles personal information under the same standard set out in this policy, whichever country they sit in. Before disclosing personal information to a service provider overseas, we take reasonable steps to ensure they handle it in a way consistent with the Australian Privacy Principles. Where we open in a new market or add a significant provider, we will update this list.
How we protect it
We run on Google Cloud and align our controls to ISO 27001.
- Personal information is encrypted at rest, and in transit using TLS
- Access is role-based and granted only to personnel who need it, with multi-factor authentication on critical systems
- Infrastructure is continuously monitored, regularly patched, and scanned for vulnerabilities
- We maintain an incident response plan and test our restores
No online service can guarantee complete security, but we treat the information you give us as if it were our own client data.
Data breaches
We are covered by the Notifiable Data Breaches scheme. If we have reasonable grounds to suspect a breach that is likely to result in serious harm, we will assess it promptly and, where the scheme requires, notify affected individuals and the Office of the Australian Information Commissioner.
How long we keep it
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires us to. When it is no longer needed, we destroy it or de-identify it.
Accessing and correcting your information
You may ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete it. Write to privacy@aviato.consulting. We will respond within 30 days. If we cannot give you access or make a correction, we will tell you why in writing.
There is no charge for making a request.
Complaints
If you think we have mishandled your personal information, email privacy@aviato.consulting with the details. We will acknowledge your complaint within 5 business days and respond substantively within 30 days.
If you are not satisfied with our response, you can refer the complaint to the Office of the Australian Information Commissioner:
- Online: www.oaic.gov.au/privacy/privacy-complaints
- Phone: 1300 363 992
- Post: GPO Box 5288, Sydney NSW 2001
Children
Our services are sold to businesses and this website is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
Changes to this policy
We update this policy when our practices or the law change. The current version is always on this page, with the date it last changed at the top.
Contact us
Questions about this policy, or about how we handle personal information: privacy@aviato.consulting
Talk to an architect who has done this before.
Bring your current setup and the outcome you need. You will get a view on the approach, the risks and roughly what it costs.
Straight to a senior GCP architect. No SDR, no slide deck.
Not ready to talk? See how we migrated Hapana off AWS →
Or call +61 2 8359 9507 · Hello@aviato.consulting