Privacy policy

Who I am

This website is run by Nathaniel Giabardo, a sole trader based in Melbourne, Victoria. This policy explains how I handle personal information through this website and when I work with businesses. I follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) as if they apply to me in full.

This website

This site does not use cookies, tracking pixels or advertising tools. I count visits with Vercel Web Analytics, which does not use cookies and does not identify you.

If you click a booking button, the booking calendar is provided by Calendly. Calendly may set its own cookies and collects the details you enter (such as your name, email and business name) under its own privacy policy. I receive those details so I can hold the call.

If you email me, I keep your email so I can reply.

Business data

I only access a business’s systems when it asks me to and gives me access. Access is read-only wherever the system allows it, and limited to what the work needs. I never ask for payment details.

Before any work starts, we agree in writing: what data I access, why, where it is processed and stored, who can see it, how long it is kept, and how it is deleted. Where data is processed depends on the tools agreed, so I confirm this per business rather than promise it here.

I do not sell personal information, use it for advertising, or use it to train AI models. Nothing is sent to your customers except with wording you have approved, on your behalf.

You remain responsible for your customer records. I act on your instructions and help you meet your own privacy obligations.

Keeping it secure

I collect the minimum I need, use accounts protected by strong passwords and two-factor authentication, use demo data rather than real records when testing, and delete your data when the work ends or when you ask, unless the law requires me to keep it.

If I become aware of a data breach that is likely to cause serious harm, I will tell you straight away and help you meet your obligations under the Notifiable Data Breaches scheme.

Access, correction and complaints

You can ask what personal information I hold about you, ask me to correct it, or ask me to delete it. If you are a customer of a business I work with, please contact that business first, as it controls your record; I will help it respond.

If you have a concern, contact me and I will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

Questions about privacy: nate@curotech.com.au .