Privacy Policy

Who we are

This Privacy Policy is issued by Performeta Pty Ltd (ABN 56 609 903 746) of Suite 60/10-20 Gwynne Street, Cremorne VIC 3121 (“Performeta”, “we”, “us”, or “our”). Our website address is https://performeta.com.

As a provider of AI governance and compliance consulting services, Performeta holds itself to the same standards it recommends to its clients. We voluntarily adopt the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) as the framework governing how we handle personal information, and we commit to maintaining this standard as the business grows.

Privacy enquiries can be directed to our contact form on this website, or by post to the address above. We aim to respond to all privacy enquiries within 30 days.

Why we collect your information

We collect personal information for the following purposes:
(a) to respond to your enquiries, requests for proposal, and expressions of interest in our services;
(b) to provide AI governance consulting, advisory, and training services to clients;
(c) to manage our client relationships and engagement records;
(d) to send you information about our services and insights where you have consented or where we are otherwise permitted to do so; and
(e) to comply with applicable legal and regulatory obligations.

We collect only the information that is reasonably necessary for these purposes.

Comments and Enquiries

When visitors leave comments or submit enquiries through our website forms, we collect the data shown in the form, including your name, email address, phone number, organisation details, and the content of your enquiry. We also collect your IP address and browser user agent string to assist with spam detection.

We will make clear at the point of collection what personal information is being collected and how it will be used.

Cookies

Our website uses cookies — small text files stored on your device when you visit our site. We use the following types of cookies:

Essential cookies: Required for the website to function correctly, including session management and spam detection. These cannot be disabled.

Analytics cookies: We use Google Analytics, Google Tag Manager and HotJar to understand how visitors interact with our website. These cookies collect aggregated, anonymised data about page visits and user behaviour. You can opt out via your browser settings.

Functional cookies: Used to remember your preferences and improve your browsing experience.

You can control and disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

Form enquiries and contact details are stored in HubSpot, which we use to manage our business development activities and client relationships. Data held in our CRM is not sold or disclosed to unrelated third parties.

We take reasonable steps to ensure that any service providers who handle personal information on our behalf do so in a manner consistent with our privacy commitments.

We may also disclose personal information to: (a) our professional advisers, including lawyers and accountants, where reasonably required; (b) regulatory or law enforcement authorities where required by law; and (c) a successor entity in the event of a business sale, merger, or restructure, on the condition that the recipient handles your information consistently with this policy.

Direct marketing

We may use your contact details to send you information about our services, insights, and events where you have consented to receive such communications or where we are otherwise permitted to do so under the Spam Act 2003 (Cth).

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email we send you, or by contacting us at [email]. We will action all opt-out requests promptly.

Artificial intelligence and automated tools

Performeta uses AI tools and automated software in some aspects of our internal operations and service delivery. Where these tools involve the processing of personal information — for example, in reviewing and responding to enquiries, preparing proposals, or conducting research — we apply appropriate governance controls to ensure personal information is handled responsibly.

We do not use automated processes to make decisions about individuals that would produce a legal or similarly significant effect without appropriate human review.

We are monitoring developments in Australian privacy law, including the automated decision-making disclosure obligations under APPs 1.7–1.9 (Privacy and Other Legislation Amendment Act 2024 (Cth)), which commence on 10 December 2026. We will update this section to reflect any applicable obligations ahead of that date.

How long we retain your data

We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, or as required by law.

Enquiry and contact form data: Retained for [24] months from the date of submission or last contact, after which it is securely deleted or de-identified, unless an active client engagement has commenced.

Client engagement records: Retained for [7] years from the end of the engagement, consistent with our legal and professional obligations.

Marketing opt-out records: Retained indefinitely to ensure your preference is honoured and not used for any other purpose.

For users who register on our website (if any), we store the personal information provided in their user profile. Users can view, edit, or request deletion of their personal information at any time by contacting us. Website administrators can also view and edit that information.

Your rights

Performeta voluntarily commits to the following rights in relation to personal information we hold about you, consistent with the Australian Privacy Principles:

Access: You may request access to the personal information we hold about you. We will respond within 30 days. In limited circumstances, we may be unable to provide access and will explain why.

Correction: You may request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond within 30 days.

Deletion: Where we no longer have a purpose for retaining your information, you may request that we delete or de-identify it. We will do so unless we are required to retain it for legal or administrative reasons.

Complaints: If you have a concern about how we have handled your personal information, please contact us first through our contact form. We will investigate and respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au — noting that the OAIC’s formal jurisdiction applies to entities covered by the Privacy Act 1988 (Cth).

Data breaches

Although Performeta is not currently required to do so under the Notifiable Data Breach scheme in the Privacy Act 1988 (Cth), in the event of a data breach that is likely to result in serious harm to affected individuals, we will notify affected individuals promptly and will voluntarily report the incident to the Office of the Australian Information Commissioner (OAIC).

Where your data is sent

Visitor comments and form submissions may be checked through an automated spam detection service. Where personal information is transferred to or stored by overseas service providers — including our website host, CRM provider, or analytics provider — we take reasonable steps to ensure those providers handle it consistently with our privacy commitments.

Last updated: 9th April 2026