Privacy Policy

Who we are

This Privacy Policy is issued by Performeta Pty Ltd (ABN 56 609 903 746) of Suite 60/10-20 Gwynne Street, Cremorne VIC 3121 (“Performeta”, “we”, “us”, or “our”). Our website address is https://performeta.com.

As a provider of AI governance and compliance consulting services, Performeta holds itself to the same standards it recommends to its clients. We voluntarily adopt the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) as the framework governing how we handle personal information, and we commit to maintaining this standard as the business grows.

Privacy enquiries can be directed to our contact form on this website, or by post to the address above. We aim to respond to all privacy enquiries within 30 days.

Why we collect your information

We collect personal information for the following purposes:
(a) to respond to your enquiries, requests for proposal, and expressions of interest in our services;
(b) to provide AI governance consulting, advisory, and training services to clients;
(c) to manage our client relationships and engagement records;
(d) to send you information about our services and insights where you have consented or where we are otherwise permitted to do so; and
(e) to comply with applicable legal and regulatory obligations.

We collect only the information that is reasonably necessary for these purposes.

Enquiries

When you submit an enquiry through our website form, we collect your name, email address, organisation (optional) and the content of your message.

To help detect spam, we also collect a one-way hash of your IP address (we do not store the address itself), your browser user agent, the page the form was sent from, and a spam score. Enquiries that our automated checks flag as likely spam are held for review instead of being sent to us.

We will make clear at the point of collection what personal information is being collected and how it will be used.

Cookies

Our website uses cookies and similar technologies: small files or entries stored on your device when you visit our site. We use the following types:

Essential: Spam protection on our forms (Cloudflare Turnstile) and remembering your cookie choice. These cannot be disabled.

Analytics: Google Analytics, to understand how visitors use our website, such as which pages are viewed and how people arrive. The data is pseudonymous and is used to improve the site.

Advertising: The LinkedIn Insight Tag, to measure how our LinkedIn marketing performs and to understand visitors who arrive from LinkedIn.

Your choice depends on where you are. In the European Economic Area, the United Kingdom, Switzerland, Brazil and South Korea, analytics and advertising cookies stay off unless you accept them. In Australia, the United States and other regions, they load unless you opt out using the cookie banner. In all regions we honour the Global Privacy Control signal from your browser.

You can change your choice at any time using “Cookie settings” in the footer of any page. You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Enquiries submitted through our website are stored in our website database, hosted by Cloudflare, and sent to us by email through Resend. If you consent (or do not opt out, depending on where you are), Google Analytics and the LinkedIn Insight Tag also receive information about your visit. We do not sell personal information.

We take reasonable steps to ensure that any service providers who handle personal information on our behalf do so in a manner consistent with our privacy commitments.

We may also disclose personal information to: (a) our professional advisers, including lawyers and accountants, where reasonably required; (b) regulatory or law enforcement authorities where required by law; and (c) a successor entity in the event of a business sale, merger, or restructure, on the condition that the recipient handles your information consistently with this policy.

Direct marketing

We may use your contact details to send you information about our services, insights, and events where you have consented to receive such communications or where we are otherwise permitted to do so under the Spam Act 2003 (Cth).

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email we send you, or by contacting us through our contact form. We will action all opt-out requests promptly.

Artificial intelligence and automated tools

Performeta uses AI tools and automated software in some aspects of our internal operations and service delivery. Where these tools involve the processing of personal information — for example, in reviewing and responding to enquiries, preparing proposals, or conducting research — we apply appropriate governance controls to ensure personal information is handled responsibly.

We do not use automated processes to make decisions about individuals that would produce a legal or similarly significant effect without appropriate human review.

We are monitoring developments in Australian privacy law, including the automated decision-making disclosure obligations under APPs 1.7–1.9 (Privacy and Other Legislation Amendment Act 2024 (Cth)), which commence on 10 December 2026. We will update this section to reflect any applicable obligations ahead of that date.

How long we retain your data

We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, or as required by law.

Enquiry and contact form data: Retained for 12 months from the date of submission or last contact, after which it is securely deleted or de-identified, unless an active client engagement has commenced.

Client engagement records: Retained for 7 years from the end of the engagement, consistent with our legal and professional obligations.

Marketing opt-out records: Retained indefinitely to ensure your preference is honoured and not used for any other purpose.

Your rights

Performeta voluntarily commits to the following rights in relation to personal information we hold about you, consistent with the Australian Privacy Principles:

Access: You may request access to the personal information we hold about you. We will respond within 30 days. In limited circumstances, we may be unable to provide access and will explain why.

Correction: You may request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond within 30 days.

Deletion: Where we no longer have a purpose for retaining your information, you may request that we delete or de-identify it. We will do so unless we are required to retain it for legal or administrative reasons.

Complaints: If you have a concern about how we have handled your personal information, please contact us first through our contact form. We will investigate and respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au — noting that the OAIC’s formal jurisdiction applies to entities covered by the Privacy Act 1988 (Cth).

Data breaches

Although Performeta is not currently required to do so under the Notifiable Data Breach scheme in the Privacy Act 1988 (Cth), in the event of a data breach that is likely to result in serious harm to affected individuals, we will notify affected individuals promptly and will voluntarily report the incident to the Office of the Australian Information Commissioner (OAIC).

Where your data is sent

Our service providers, including Cloudflare (hosting, database and spam protection), Resend (email delivery), Google (analytics) and LinkedIn (advertising measurement), may process or store personal information outside Australia, including in the United States and Europe. We take reasonable steps to ensure those providers handle it consistently with our privacy commitments.