Privacy Policy

ATALO collects only what we need to deliver our services responsibly and securely. This Privacy Policy explains how we handle your personal information in accordance with the APP and the Privacy Act 1988.

Collection of Information

We collect information necessary to provide our advisory, operational design, and execution services. This may include:

• Identity Data: Name and contact details.
• Business Data: Organisational structure, operating workflows, and performance metrics.
• Usage Data: How you interact with our site and diagnostic tools.

We typically collect information directly from you via secure forms, workshops, and consultation sessions.

Use of Data

ATALO uses your data to:

• Deliver assessments, operating models, and implementation support.
• Communicate updates about your engagement and relevant changes.
• Improve our services, tools, and user experience.

We do not use your information for automated decisions with legal effect, and we do not sell your data.

Disclosure

We only disclose information to:

• Service providers under strict confidentiality (e.g., secure hosting, analytics).
• Regulators or authorities when required by law.

Any other disclosure requires your explicit consent.

Security

We use industry-standard measures to protect your information from unauthorised access, alteration, or disclosure, including:

• Encryption in transit for data exchanges.
• Access controls and multi-factor authentication on internal systems.
• Periodic security reviews of our infrastructure and processes.

If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner under the NDB scheme.

Questions about this policy?

If you have questions or need to access or correct your information, please contact us.