Privacy Policy

1. About this Policy

Asset Hosting Pty Ltd (ABN 26 780 496 081) (“Asset Hosting”, “we”, “us”, “our”) is committed to protecting the privacy of individuals whose personal information we collect or hold. This Privacy Policy explains how we handle that information.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we provide services to clients subject to additional obligations — for example under the Notifiable Data Breaches scheme, the Telecommunications Act, or sector-specific frameworks such as ISO 27001 — we operate consistently with those obligations.

2. The personal information we collect

We collect personal information that is reasonably necessary for our business functions and activities. Depending on your interaction with us, this may include:

• Identity and contact information — name, organisation, email address, phone number, postal address.
• Enquiry information — the content of messages you send us through the website, by email, or by phone.
• Engagement information — information you provide in connection with a project, contract, or service we deliver to you or your organisation.
• Technical information — IP address, browser type, device type, referring URL, pages visited, and similar data automatically logged when you use this website or services we host.
• Marketing preferences — communication channels you have opted into and any preferences you have expressed.

We do not knowingly collect sensitive information (as defined in the Privacy Act) through this website. If a client engagement requires us to handle sensitive information, this will be governed by a separate written agreement.

3. How we collect personal information

We collect personal information directly from you wherever practical — for example, when you:

• complete the contact form on this website;
• email us, call us, or correspond with us in writing;
• engage us to provide services;
• attend a meeting, presentation, or event we host or participate in.

We may also collect information indirectly — for example, from publicly available sources, from third parties acting on your authority (such as your employer), or from analytics and infrastructure providers we use to operate the website.

4. Why we collect, hold, use and disclose personal information

We use personal information to:

• respond to enquiries and requests;
• provide, manage, and improve our services;
• fulfil contractual obligations to clients;
• communicate about ongoing engagements and, where you have opted in, about relevant industry topics;
• protect the security and integrity of our systems and our clients’ systems;
• meet our legal, regulatory and professional obligations.

5. Disclosure of personal information

We do not sell personal information. We may disclose personal information to:

• service providers who support our business operations under appropriate confidentiality obligations — for example, our email infrastructure provider (SMTP2GO), our DNS, hosting and security platforms (including Cloudflare), and our analytics provider (Google Analytics, with IP anonymisation enabled and only when you have consented);
• professional advisors, including lawyers, accountants and auditors, where reasonably required;
• any party where you have given us consent;
• any party where we are required or authorised to do so by law.

6. Australian data residency and overseas disclosure

Asset Hosting is built around Australian data residency. The infrastructure we operate for clients keeps client data within Australian data centres unless a specific engagement explicitly agrees otherwise.

For our own corporate operations, certain service providers may process limited personal information — such as IP addresses, email metadata, or aggregated usage statistics — on infrastructure located outside Australia. Where this occurs, we take reasonable steps to ensure those providers operate in a manner consistent with the Australian Privacy Principles.

7. Storage and security

We hold personal information in electronic form on systems managed by us or by reputable service providers under contract. We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure — including encryption in transit, access controls, audit logging, regular patching, and staff training.

No system can be guaranteed to be entirely secure. If a notifiable data breach occurs, we will respond in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

8. Cookies, analytics and consent

This website uses a small number of strictly necessary cookies and storage entries to operate — for example, to record whether you have made a cookie consent choice and to support the security challenge on the contact form (Cloudflare Turnstile).

With your consent, we also use Google Analytics 4 to understand how visitors use the website so we can improve it. IP anonymisation is enabled. We do not use Google Analytics for advertising. You can withdraw your consent at any time using the controls below.

9. Direct marketing

We do not run a high-volume marketing programme. Where we send occasional updates about our services or industry insights, we do so only to people who have requested or reasonably expect such communication, and every message contains a clear way to opt out.

10. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact us using the details in section 13.

We will respond to access and correction requests within a reasonable period (typically within 30 days). In limited circumstances, we may decline a request — for example where giving access would compromise the privacy of another person, or where the law requires or authorises us to refuse. Where we decline, we will explain why in writing.

11. Retention

We retain personal information only for as long as it is needed for the purposes for which it was collected, or as required by law. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

12. Children’s privacy

This website is intended for a business audience. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can address it.

13. Contact and complaints

If you have a question, request, or complaint about how we handle personal information, please contact our Privacy Officer:

We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, our services, or the law. The most recent version is always available at assethosting.com.au/privacy. Material changes will be highlighted on this page.