Privacy Policy

Last updated: 21 September 2026

This Privacy Policy explains how Andreas Consulting Pty Ltd,
ABN 44 669 449 692
(“we”, “us” or “our”), collects, holds, uses and discloses personal information.

This Privacy Policy applies to our website, applications, social media pages, messaging services, products and other services that link to or refer to this Privacy Policy.

We aim to handle personal information in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy laws.

1. Personal Information We Collect

The types of personal information we may collect include:

  • Your name, telephone number, email address and other contact details.
  • Account registration information, usernames and account preferences.
  • Information you provide when completing forms, making enquiries, requesting support, entering promotions or communicating with us.
  • Transaction, order, billing and payment-related information. Payment card details may be processed directly by our payment providers and may not be stored by us.
  • Messages, attachments and other content sent through email, SMS, WhatsApp, Messenger, Instagram, Facebook or other communication channels.
  • Social media profile information made available to us when you interact with our accounts, advertisements or applications.
  • Technical information, such as your IP address, browser type, device type, operating system, approximate location, referring website, pages viewed and dates and times of access.
  • Advertising and analytics information, such as advertisement interactions, cookie identifiers, conversion events and campaign attribution information.
  • Records of your consent, marketing preferences, opt-outs and privacy requests.
  • Any other information you voluntarily provide to us.

We generally do not seek to collect sensitive information unless it is reasonably necessary for our activities and we have your consent, or collection is otherwise permitted or required by law.

2. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you use our services, contact us, complete a form, make a purchase or create an account.
  • When you communicate with us through WhatsApp, Messenger, Instagram, Facebook, SMS, email or another messaging service.
  • Automatically through cookies, pixels, software development kits, server logs and similar technologies.
  • From our service providers, advertising platforms, analytics providers, payment processors and business partners.
  • From publicly available sources, where lawful and appropriate.
  • From third parties where you have authorised the disclosure or where it is otherwise permitted by law.

If you provide personal information about another person, you should ensure that you are authorised to provide it and that the person understands how we may handle their information.

3. How We Use Personal Information

We may collect, hold, use and disclose personal information to:

  • Provide, operate, maintain and improve our products and services.
  • Create and manage accounts, orders, subscriptions and transactions.
  • Respond to enquiries, messages, complaints and support requests.
  • Communicate with you through email, telephone, SMS, WhatsApp, Messenger or other channels you use to contact us.
  • Personalise your experience and remember your preferences.
  • Measure website, application, advertising and campaign performance.
  • Deliver and improve advertising, including personalised advertising where permitted.
  • Perform attribution and determine whether an advertisement or campaign resulted in an enquiry, registration, purchase or other action.
  • Send marketing communications where you have consented or where otherwise permitted by law.
  • Prevent fraud, misuse, security incidents and unlawful activity.
  • Enforce our terms, protect our legal rights and manage disputes.
  • Comply with legal, taxation, accounting, regulatory and reporting obligations.
  • Facilitate a merger, acquisition, financing, restructuring or sale of all or part of our business or assets.

We may also use information in an aggregated or de-identified form for analytics, research, reporting and service improvement where the information can no longer reasonably identify you.

4. Meta, Facebook, Instagram and WhatsApp Services

We may use services and applications provided by Meta Platforms, Inc. and its related companies, including Facebook, Instagram, Messenger, the WhatsApp Business Platform, Meta Pixel, Conversions API and Meta advertising tools.

When you communicate with us through WhatsApp or another Meta service, we may receive and process information including:

  • Your telephone number, profile name and available profile information.
  • The content of messages, enquiries, attachments and responses.
  • The date, time and delivery status of communications.
  • Technical, device and interaction information supplied through the relevant platform.
  • Information necessary to respond to your enquiry, provide customer support or deliver a requested service.

We may use automated tools, artificial intelligence, chat assistants or integrations to organise messages, translate communications, prepare or send responses, answer common questions, collect information and route conversations. Where appropriate, conversations may be reviewed or handled by a person.

We may share limited event and customer information with Meta for advertising measurement, audience creation, campaign optimisation, security and attribution. Where supported, information may be hashed or otherwise protected before transmission. Meta may process this information in accordance with its own terms and privacy policies.

Your use of Facebook, Instagram, Messenger and WhatsApp is also governed by the privacy policies and terms of those services. We do not control how Meta independently collects, uses or retains information through its platforms.

5. Cookies, Pixels and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage and similar technologies to:

  • Enable essential website functionality.
  • Remember preferences and maintain sessions.
  • Understand how visitors use our website and services.
  • Measure traffic, conversions and campaign performance.
  • Prevent fraud and improve security.
  • Deliver and personalise advertising.

These technologies may be provided by third parties such as Google, Meta and other advertising or analytics providers. These providers may combine information collected through our services with information they receive from other websites and services.

You can control cookies through your browser settings and, where available, through our cookie consent controls. Blocking certain cookies may affect the operation of some website features.

You can also manage advertising preferences through:

6. Analytics

We may use analytics services, including Google Analytics and similar tools, to understand how people use our website and services. These tools may collect information such as your IP address, device information, browser information, pages visited, interactions and approximate location.

Analytics information may be processed in an aggregated or pseudonymous form. However, technical identifiers may still constitute personal information under applicable privacy laws.

7. Direct Marketing

Where permitted by law, we may use your contact details to send information about our products, services, offers or updates that may be relevant to you.

You may opt out at any time by:

  • Using the unsubscribe link in an email.
  • Replying “STOP” where that option is available for SMS or messaging services.
  • Contacting us using the details in this Privacy Policy.

We may retain a limited record of your opt-out request to ensure that we respect your preferences.

8. When We Share Personal Information

We may disclose personal information to:

  • Employees, contractors and authorised representatives who require the information to perform their duties.
  • Website hosts, cloud storage providers, software providers and IT support services.
  • Meta, Google and other advertising, communications and analytics providers.
  • Payment processors, financial institutions and fraud prevention providers.
  • Customer relationship management, email, SMS, messaging and support platforms.
  • Professional advisers, including accountants, auditors, insurers and legal advisers.
  • Government agencies, regulators, law enforcement authorities or courts where required or permitted by law.
  • A prospective buyer, investor or adviser in connection with a proposed business transaction.
  • Other parties where you have authorised or requested the disclosure.

We do not sell personal information in the ordinary meaning of selling customer information for money. Some privacy laws may define certain advertising-related disclosures more broadly. Where applicable, we will provide any legally required rights or opt-out mechanisms.

9. Overseas Disclosure and Processing

Some of our service providers operate or store information outside Australia. As a result, personal information may be disclosed to or processed in countries including the United States, Singapore, countries within the European Economic Area and other locations in which our service providers operate.

The countries involved may change depending on the providers and technical infrastructure we use. Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.

10. Data Security

We take reasonable administrative, technical and physical measures to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These measures may include:

  • Access controls and authentication procedures.
  • Encryption in transit and, where appropriate, at rest.
  • Restricted access based on operational requirements.
  • Secure hosting and reputable service providers.
  • Monitoring, backups and security reviews.
  • Staff and contractor confidentiality obligations.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we will respond to suspected data breaches and comply with applicable notification obligations.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business and transaction records, resolve disputes, prevent fraud and meet legal, taxation and regulatory obligations.

Retention periods vary according to the type of information, why it was collected and applicable legal requirements. When information is no longer required, we will take reasonable steps to delete, destroy or de-identify it, subject to lawful retention requirements and the operation of backup systems.

12. Accessing and Correcting Your Information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

To protect your privacy, we may need to verify your identity before processing a request. In limited circumstances, we may refuse access or correction where permitted by law. If this occurs, we will generally explain the reason and any available complaint options.

We do not normally charge for making a request. We may charge a reasonable fee for providing access where permitted by law and will notify you before applying any charge.

13. Deleting Your Information and Meta App Data

You may request deletion of personal information associated with your use of our services, including information received through a Meta, Facebook, Instagram, Messenger or WhatsApp integration.

To request deletion:

  1. Email us at me@karlssonandreas.com.
  2. Use the subject line “Data Deletion Request”.
  3. Provide sufficient information for us to identify your records, such as your name, email address, telephone number or relevant platform username.
  4. Specify which service or application you used.

We may ask you to verify your identity. After verification, we will delete or de-identify information that is no longer required, unless we must retain it for legal, security, fraud prevention, accounting or legitimate business purposes.

Deleting information held by us does not necessarily delete information independently held by Meta or another third-party platform. You may need to submit a separate request through the relevant platform.

14. Automated Systems

We may use automated systems, artificial intelligence tools or software integrations to assist with customer communications, message translation, message classification, recommendations, fraud detection, analytics and administrative tasks.

Unless expressly disclosed otherwise, we do not use personal information to make solely automated decisions that have a legal or similarly significant effect on an individual. Where applicable law requires additional information about automated decision-making, we will provide that information and any available review rights.

15. Anonymity and Pseudonyms

Where lawful and practicable, you may interact with us anonymously or by using a pseudonym. However, we may need your correct identity or contact information to process transactions, provide certain services, verify an account, respond to a request or comply with legal obligations.

16. Children’s Privacy

Our services are not intended to collect personal information from children unless this is clearly stated and appropriate consent has been obtained.

If you believe a child has provided personal information to us without appropriate consent, please contact us so that we can investigate and, where appropriate, remove the information.

17. Third-Party Websites and Services

Our website and communications may contain links to third-party websites, applications or services. We are not responsible for the privacy, security or content practices of those third parties. We recommend reviewing their privacy policies before providing personal information.

18. Privacy Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us using the details below and provide sufficient information for us to investigate.

We will acknowledge and investigate privacy complaints within a reasonable period. We aim to provide a substantive response within 30 days, although complex matters may require additional time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:

19. Changes to This Privacy Policy

We may update this Privacy Policy when our practices, technologies, services or legal obligations change. The updated version will be published on our website with a revised “Last updated” date.

Where changes are significant, we may provide additional notice through our website, applications, email or other appropriate communication channels.

20. Contact Us

For privacy questions, access or correction requests, complaints or data deletion requests, please contact:

Andreas Consulting Pty Ltd
ABN: 44 669 449 692
Email: me@karlssonandreas.com
Website: https://andreas.consulting