Privacy Policy

1. Who We Are

This policy explains how Wizzio Pty Ltd (ABN 33 164 301 928, ACN 164 301 928), trading as Wizzio (“Wizzio”, “we”, “us”), handles personal information.

Wizzio is an engineering services business headquartered in Sydney, New South Wales. We provide network engineering and design, CAD drafting and documentation, as-built records, drone services, structural analysis, pole loading, and MEP and structural BIM, principally to other businesses.

We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Where we handle personal information relating to people outside Australia, other laws may also apply, and we comply with those where they do.

2. What This Policy Covers

This policy covers personal information we collect through this website, through direct correspondence such as email, and in the course of providing our services.

It does not cover:

• Our clients’ own data. When we deliver a project we often work inside a client’s systems and on a client’s records. Where we do that we are handling information on their behalf and under their instructions, and their privacy policy governs it, not ours.
• Other people’s websites. This site links to third-party sites, including social media profiles. We do not control them and are not responsible for how they handle your information.

3. What We Collect

3.1 Information You Give Us

If you send an inquiry through our contact form, we collect:

• your first and last name;
• your email address;
• your phone number, if you choose to give one — this field is optional;
• your company name, if you choose to give one — this field is optional;
• the service and the sector you selected, if you selected them — both are optional;
• whatever you write in the message box; and
• a record that you ticked the consent box, and when.

The message box is free text. Please do not put sensitive information in it — health information, government identifiers, financial details, or anything about your background or beliefs. We do not need it, and we ask that you do not send it.

If you email or call us directly, we collect whatever you choose to tell us in that exchange.

3.2 Information We Collect Automatically

This website is hosted by our web hosting provider. Like any web server, it records a log of requests made to it, which includes your IP address, the page requested, the time, and your browser’s user-agent string. We use these logs only to keep the site running and secure.

3.3 Cookies and Analytics

We use Google Analytics 4 to understand how this website is used — which pages people read, how they arrived, and whether they found what they came for. It is the only analytics or measurement product on this site.

What that means in practice:

• It runs only if you accept. A banner asks first; until you choose “Accept”, Google Analytics is not loaded and sets no cookies. Your choice is stored in your browser, and clearing this site’s data resets it.
• It sets cookies in your browser, which record a randomly generated identifier so that two page views in the same visit can be counted as one visit rather than two.
• Your IP address is anonymized before it is stored. Google Analytics 4 does this by default and it cannot be switched off.
• We have turned off Google Signals and advertising personalization, so your activity on this site is not joined to an advertising profile, is not used to target ads to you anywhere, and is not shared with Google’s advertising products.
• We record one event beyond page views: when a contact-form inquiry is accepted, we send Google Analytics the service and sector you selected, so we can see which parts of our work people inquire about. Your name, email address, phone number, company and message are not sent to Google. They go only to us and to our CRM.

If you would rather not be counted, Google publishes a browser add-on that opts you out of Google Analytics on every site: tools.google.com/dlpage/gaoptout (opens in a new tab). Blocking cookies for this site, or using your browser’s tracking protection, has the same effect. Nothing on this site stops working if you do.

3.4 What We Do Not Do

This site does not use any of the following:

• No advertising pixels. There is no Meta pixel, no LinkedIn Insight tag, no Google Ads remarketing tag and no conversion tag of any other kind on this site.
• No session recording or heatmapping. Nothing here records your mouse movements, scrolling, keystrokes or screen.
• No cross-site tracking. We do not follow you to other websites, and we do not buy or receive profiles about you from anyone who does.
• We do not sell personal information. We have not done so and do not intend to.

If any of that changes, we will update this policy before turning it on, and record the change in the version history at the end.

4. How We Use It

We use the information you give us to:

• reply to your inquiry and answer your questions;
• scope, quote and deliver work you ask us to do;
• keep in touch about a live project or engagement;
• understand how this website is used, in aggregate, so we can improve it;
• keep our own business records, including for tax and insurance purposes; and
• meet obligations the law places on us.

We do not add inquiries to a marketing list. If we ever want to send you something that is not a reply to you or about work we are doing together, we will ask you first, and any such message will carry an unsubscribe link, as the Spam Act 2003 (Cth) requires.

5. Why We Are Allowed to Hold It

For contact-form inquiries, we rely on the consent you give by ticking the box before you submit. You can withdraw that consent at any time by emailing us — see section 14. Withdrawing it means we stop using your details to contact you, and delete them unless we are required to keep a record.

Where we hold information because we have to — tax records, for example — we rely on that legal obligation rather than on your consent, and withdrawing consent does not remove it.

6. Who We Share It With

We do not sell, rent or trade personal information. We share it only in these situations.

6.1 Service Providers Who Help Us Operate

Provider	What they do for us	What they receive
Our web hosting provider	Serves this website	Server request logs, including IP address
Google (Analytics 4)	Measures how the website is used	Page views, an anonymized IP address, and the service and sector selected on an accepted inquiry
Ripples CRM	Records and manages inquiries	Everything you submit through the contact form
Microsoft (Microsoft 365)	Runs our email	Anything in correspondence with us

These providers may only use the information to provide their service to us.

6.2 Everyone Else

• Our people. Staff and contractors see your information only where they need it to do their job, and are bound by confidentiality obligations.
• Professional advisers. Lawyers, accountants and insurers, where genuinely necessary.
• When the law requires it. To a court, regulator or law-enforcement body where we are obliged to, or where it is necessary to establish or defend a legal claim.
• A business sale. If Wizzio is sold or merged, records may transfer to the buyer, who would be bound by this policy in respect of information collected under it.

7. Sending Information Overseas

Some of the providers listed above store or process information outside Australia. Google and Microsoft both operate global infrastructure and process data in multiple countries, including the United States; neither publishes a fixed, final list of locations for the services we use, so we do not reproduce one here and present it as complete. If you need the current processing locations for a specific provider before you send us anything, ask us and we will give you what each provider has told us, in writing.

Before we disclose personal information to an overseas recipient we take reasonable steps, as APP 8 requires, to ensure they handle it consistently with the Australian Privacy Principles — normally through the contract we hold with them.

7.1 Our Dual-Shore Delivery Model

We deliver engineering design through onshore and offshore teams working a planned overlap. That means material you send us for a project — drawings, models, survey data, site records, and any personal information those contain, such as the names and contact details of your staff — may be accessed by Wizzio personnel outside Australia in the course of the work.

Where it happens, it happens under the same obligations as the rest of this policy: the same contractual terms, the same access controls, and the same APP 8 reasonable-steps requirement that applies to any overseas disclosure. Project material is held in the environment agreed with you — in many engagements that is your own document control system rather than ours, in which case your handling rules govern it.

Our information security management system is certified to ISO/IEC 27001. Ask us for the certificate and its scope statement — the scope statement is the document that says which parts of the business the certification covers, and it is the one to read if where your project data is handled matters to you. We will send both.

If your engagement needs specific data-handling terms — a named jurisdiction, access restricted to a named team, or delivery entirely within your own environment — tell us before work starts and we will agree them in the contract.

8. How Long We Keep It

We keep personal information only as long as we have a reason to, and then delete it.

What	How long	Why
Inquiries that do not become work	24 months from your last contact with us	So we recognize you if you come back to us
Client and project records	At least 7 years after the engagement ends	Contractual, tax, insurance and professional-liability obligations
Web server logs	30 days	Security and troubleshooting
Google Analytics records	14 months	Year-on-year comparison; this is the retention period set on the property

You can ask us to delete your inquiry sooner than any of this, and unless we are required to keep it, we will — see section 10.

9. How We Protect It

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorized access, modification or disclosure. Those steps include:

• maintaining an information security management system certified to ISO/IEC 27001 by Citation Certification, which means an external auditor examines how we handle information and returns to check it again rather than taking our word for it;
• encrypting traffic to and from this website using HTTPS, which is enforced for every visitor by HTTP Strict Transport Security — a browser that has visited once will refuse to connect over plain HTTP afterwards;
• restricting access to inquiry records to the people who need it;
• requiring multi-factor authentication on the business accounts that hold or can reach personal information;
• choosing service providers who maintain recognized security practices; and
• agreeing project-specific handling and access terms in the contract where an engagement calls for them.

No system is perfectly secure and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will assess it and notify affected individuals and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

10. Seeing and Correcting Your Information

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct it if it is wrong, out of date or incomplete; or
• delete it, where we are not required to keep it.

Email info@wizzio.com and tell us what you need. We will usually respond within 30 days. We may need to verify your identity first, to protect your information from disclosure to anyone else.

We do not charge for making a request. If a request takes substantial work we may charge a reasonable cost for giving access, and we will tell you before doing anything that costs money. If we refuse a request, we will tell you in writing why, and how to complain about it.

11. If You Want to Complain

If you think we have mishandled your personal information, please contact us first, so we can try to resolve it directly. Email info@wizzio.com with “Privacy complaint” in the subject line, addressed to our Privacy Officer.

We will acknowledge your complaint within 5 business days, investigate it, and write to you with the outcome, normally within 30 days.

If you are not satisfied with how we handle it, you can take the complaint to the Office of the Australian Information Commissioner:

• Web: oaic.gov.au/privacy/privacy-complaints (opens in a new tab)
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

12. Children

This site and our services are aimed at businesses, and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, tell us and we will delete it.

13. Changes to This Policy

We may update this policy as our business or the law changes. The current version and its effective date are shown at the top of this page, and every change is listed at the bottom. Where a change materially affects how we handle information we already hold, we will take reasonable steps to tell affected people directly rather than relying on this page.

14. How to Contact Us

Wizzio Pty Ltd
ABN 33 164 301 928
Attention: Privacy Officer
Suite 410/12 Century Circuit
Norwest NSW 2153, Australia
Email: info@wizzio.com
Phone: +61 2 7234 0066

Our website terms of use sit alongside this policy and govern your use of this site.

Version History

Version	Date	What changed
1.2	11 October 2026	Section 1 updated to the current list of services. Plain-language edits to the introduction and sections 3.4, 10 and 11. No change to how personal information is collected, used or shared.
1.1	9 October 2026	Added the ISO/IEC 27001 certification to section 9, and a pointer in section 7.1 to the certificate and its scope statement.
1.0	9 October 2026	First published. Replaces the summary page carried during the site redesign, and the previous policy published at /privacy-policy/.