Privacy policy
Last updated 5 November 2026.
Who we are
WaTo Consulting Pty Ltd (ABN 96 626 938 663) ("WaTo", "we", "us" or "our") provides IT, digital, cyber-security, website, hosting, business and equipment services. Our address is 52-54 Howards Road, Beverley SA 5009.
This policy explains how we handle personal information. Where the Privacy Act 1988 (Cth) applies to us, we comply with the Australian Privacy Principles (APPs). We aim to follow the same practical privacy standards in our other activities.
Personal information we collect
The information we collect depends on how you deal with us and may include:
- your name, contact details, business, role and authorised contacts;
- enquiries, quotes, orders, contracts, support requests and communications;
- billing, transaction and account information;
- site addresses, asset details, serial numbers, device and system information;
- technical logs, IP addresses, browser information, diagnostic results and security events;
- credentials or access information where needed to provide an authorised service;
- information visible to us while providing remote, on-site, hosting, backup, migration, recovery or cyber-security services; and
- job applicant, contractor or supplier information where relevant.
We may encounter sensitive information in a customer's systems or in a support request. We ask customers not to provide sensitive information unless it is reasonably necessary and an appropriate, authorised method has been agreed. Where required, we collect sensitive information with consent or as otherwise permitted by law.
How we collect information
We usually collect information directly from you by website form, service request, chat, email, phone, SMS, remote-support session, meeting or in-person service. We may also receive it from your employer or another authorised contact, a referral partner, a vendor or distributor, a public source, or systems and devices that you authorise us to support.
Our website and security systems may automatically record technical information such as IP address, date and time, requested page, browser, referring address and security events.
Why we use information
We use personal information to:
- respond to enquiries and prepare quotes;
- verify identity, authority and account access;
- provide, administer, secure and improve our services;
- diagnose faults, maintain service records and communicate progress;
- manage accounts, billing, warranties, suppliers and customer relationships;
- prevent fraud, misuse and cyber-security incidents;
- meet insurance, legal, regulatory and record-keeping obligations; and
- send relevant marketing where we have consent or another lawful basis.
If you do not provide the information we need, we may be unable to verify a request, provide a quote or deliver the service safely.
We do not use computer programs to make decisions that significantly affect an individual's rights or interests without a person reviewing the decision.
Customer systems and data
When a customer gives us authorised access to systems or data, we normally handle that information to provide the requested service on the customer's instructions. The customer remains responsible for having appropriate notices, permissions and lawful authority for the information it asks us to access or process. We limit access to what is reasonably needed for the work.
Who we disclose information to
We may disclose information where reasonably necessary to our staff and authorised contractors; hosting, cloud, communications, ticketing, backup, monitoring, security and software providers; banks and payment or accounting providers; product vendors, distributors and warranty providers; professional advisers and insurers; and regulators, courts, law-enforcement bodies or other parties where authorised or required by law.
We do not sell personal information. We require service providers to handle information for the relevant purpose and with appropriate safeguards, subject to their own legal obligations.
Overseas processing
Some cloud, communications, software and support providers operate globally. Personal information may therefore be stored in or accessed from the United States and other countries in which those providers or their subprocessors operate. The countries can vary by product and customer configuration. The live chat on our website is provided by Smallchat, and chat messages may be stored overseas, including in the United States. Where APP 8 applies, we take reasonable steps required by law before disclosing personal information overseas. Contact us if you need details about providers used for a particular service.
Website cookies, chat and analytics
The website uses limited first-party cookies to remember interface choices, such as the visual character shown during a visit and whether the floating help panel was minimised. These cookies are not used for advertising.
The website includes Smallchat live chat, which may receive technical information when its service loads and any information you enter into chat.
Our own visit count. The site keeps simple daily totals of how many people visit, which pages they view, what kind of website or app sent them (for example a search engine, an AI assistant such as ChatGPT, or another website) and whether they used a phone, tablet or computer. It sets no cookies and stores nothing in your browser. To count each person once a day, the server mixes your IP address and browser type with a random key that changes every day, keeps only the result until the end of that day, then deletes it along with the key, so a visit cannot be traced back to you. We never store your IP address in this count. Daily totals are kept for up to 25 months. Visits from automated tools are left out.
Google Analytics. The site uses Google Analytics 4 to see how it is used. It sets cookies (named _ga and _ga_ followed by an id) and sends details of your visit to Google, including pages viewed, the device and browser, and roughly where you are. Google may store this information outside Australia. We use it only to see how the site is used. Advertising features are switched off, and we do not combine it with anything you send us through a form. You can read how Google uses this kind of information at How Google uses information from sites or apps that use our services. You can turn Google Analytics and Microsoft Clarity off for your browser at any time using "Cookie settings" at the bottom of any page, and both stay off if your browser sends a Global Privacy Control signal.
Microsoft Clarity. The site also uses Microsoft Clarity, which shows us where visitors click, scroll and get stuck, as heatmaps and recordings of visits. It sets cookies (named _clck and _clsk) and sends this information to Microsoft, which may store it outside Australia. Clarity does not run on any page that has a form, anything typed into the site is hidden from the recordings, and we do not use it for advertising. It does not run for visitors whose browser is set to a European time zone. You can read about how Microsoft handles this at the Microsoft privacy statement.
Server logs. Our web server keeps ordinary access logs that record each request, including the IP address and browser type. We use them to keep the site secure and to see which automated tools, such as search engines and AI assistants, are reading it. These logs are kept for up to 90 days and are not combined with anything you send us through a form.
Your choice. Your choice is saved in your browser's local storage, not in a cookie. We do not use website analytics to make significant decisions about individuals. You can also restrict cookies using your browser, although some preferences may no longer be remembered.
Direct marketing
We may send service-related messages that are necessary to manage your account or work. We send commercial electronic marketing only where permitted, identify the sender and provide a functional way to unsubscribe. You can opt out at any time; we will act on the request within the period required by law. Opting out of marketing does not stop necessary service, security, billing or contractual messages.
Storage, security and retention
We use reasonable administrative, physical and technical safeguards appropriate to the information and service. No internet transmission or storage system is completely secure, so we cannot promise absolute security.
We keep information only for as long as reasonably needed for the purposes for which it was collected, to maintain service and business records, resolve disputes, or meet legal, insurance and tax obligations. We then delete, destroy or de-identify it where reasonable and lawful. Backup copies may remain until they are overwritten under normal retention cycles.
If a data breach occurs, we investigate, contain and assess it. Where the Notifiable Data Breaches scheme or another law applies, we notify affected individuals and the relevant regulator as required.
Access and correction
You may ask to access personal information we hold about you or to have inaccurate information corrected. We may need to verify your identity and authority. We will respond within a reasonable period and, where the APPs apply, give any required reasons if access or correction is refused. We do not usually charge for a request, but may charge a reasonable cost where the law permits and we tell you in advance.
Privacy complaints
Send a privacy request or complaint to info@wato.com.au, call (08) 7123 0805, or write to WaTo Consulting Pty Ltd, 52-54 Howards Road, Beverley SA 5009. Please describe what happened and the outcome you want.
We will acknowledge and investigate a complaint and aim to respond within 30 days. If you are not satisfied and the Privacy Act applies, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Related terms
The Website Terms of Use, Service Terms, Acceptable Use Policy and any applicable SLA also apply to how we provide our website and services.
Changes to this policy
We may update this policy when our practices, providers or legal obligations change. The current version and update date will remain on this page.
