Privacy Policy.
This policy explains, in plain English, what personal information Adeo collects, how it is used, and how it is kept safe. Adeo (the trading name of Adeo Partners Pty Ltd, ABN 50 698 595 523) complies with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs).
What we collect
When you email us, we receive your name, email address, and any information you choose to include in your message. If you engage us for paid work, we also collect business details relevant to the engagement (organisation name, ABN, billing address) and the IT-configuration evidence required to deliver the engagement.
How we use it
Contact details are used to reply to your enquiry, confirm meetings, and send deliverables you have asked for. Engagement data is used only to deliver the work you have engaged us for. We do not use personal information for targeted advertising, profiling, or training third-party models.
How we store it
Email correspondence is stored in our Microsoft Exchange environment (data centres in Australia). Engagement data is stored in isolated, encrypted workspaces, one per client, accessible only to the Adeo practitioner delivering the engagement. Data is retained for the period required by Australian record-keeping obligations (generally seven years for financial records) and then destroyed.
Who sees it
Your enquiry and any engagement data stay within Adeo’s control, handled only by us and the sub-processors listed below, who process it on our instructions. We do not sell personal information, and we do not disclose the personal information you send us except in the cases below: to the service providers listed under Sub-processors, who handle it on our instructions and for no purpose of their own; where we are legally compelled (a court order, a regulator’s formal request); or where you have given explicit written consent (for example, a co-delivery arrangement with a named partner). Separately, visiting this website discloses your visit data to our analytics provider, Google, as described under Cookies and analytics and Overseas disclosure.
Cookies and analytics
Fonts, stylesheets, and images are all self-hosted. We use Google Analytics to understand, in aggregate, how visitors find and use this site: it sets first-party analytics cookies, which assign a pseudonymous identifier to your browser. Advertising signals, ad personalisation, and profiling are switched off. You can opt out with the Google Analytics browser add-on. We also keep standard web-server logs — the page requested, IP address, device type — for security.
Sub-processors
We use a small set of service providers to run the firm — email and document storage, accounting, and the infrastructure that supports engagement delivery. Every provider that touches engagement data stores it in Australian data centres, and none is permitted to use client data for its own purposes, including the training of AI models. Where a provider processes data outside Australia, it does so on our instructions and under the safeguards described under Overseas disclosure. Clients, and prospective clients running vendor due diligence, can request the current provider list at any time.
Overseas disclosure
Engagement data, client content, and correspondence are stored in Australian data centres. Some processing may take place outside Australia: the infrastructure and AI providers that support engagement delivery operate globally, and where offshore processing occurs it happens with your consent under the engagement terms, on our instructions, and under contractual safeguards that bar the provider from using client data for any purpose of its own.
Website analytics is the exception, and we would rather say so than leave it to be inferred. Google Analytics is operated by Google LLC in the United States, on infrastructure Google runs globally, and it is not available with an Australian data-residency guarantee. When you visit this site, the data described under Cookies and analytics — your IP address, device and browser, the pages you request, and a pseudonymous identifier — is disclosed to Google and may be processed in the United States and other countries in which Google operates. Google is contractually restricted to processing that data for our analytics. Advertising signals, ad personalisation, and profiling are switched off. If you would rather not have your visit measured, the Google Analytics browser add-on blocks it, and no engagement or client data is involved either way.
Contacting us
The contact page opens your own email client addressed to contact@adeo.au. Nothing you type is captured by this website; the email arrives in our Microsoft Exchange mailbox when you send it.
Your rights
You can ask us, at any time, what personal information we hold about you, and you can ask us to correct or delete it, subject to any record we are legally required to keep. Send requests to contact@adeo.au. We respond within ten business days.
Notifiable breaches
If a data breach occurs that is likely to result in serious harm, Adeo will notify affected individuals and the Office of the Australian Information Commissioner within the timeframes required by the Notifiable Data Breaches scheme.
Questions
Write to contact@adeo.au. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
This policy applies from the version date above. Any material update will be posted here and notified to clients under active engagement.
Audit appliance data handling
Some engagements involve placing a hardened audit appliance on your network for the duration. It is sealed and tamper-evident, holds engagement-scoped credentials in an encrypted vault, and is strictly read-only, with no ability to write to your systems. It communicates with our Australian access-controlled infrastructure over an encrypted tunnel, kept separate from every other system we run. At the end of the engagement it is cryptographically erased, and you receive a signed certificate of decommission.
The evidence it collects is held against your engagement record for up to seven years, consistent with Australian record-keeping obligations and our professional-indemnity requirements. You can ask us to erase it at any time at contact@adeo.au, subject to any overriding legal obligation.
We never use your evidence to train AI models, and we do not share it except where the law requires. Where AI tooling helps summarise evidence, that processing runs under Adeo’s control and the provider is contractually barred from training on your data; as set out under Overseas disclosure, some of that processing may take place outside Australia under the same safeguards.