Privacy policy

01 About this policy

Tessellant is an AI and systems consultancy based in Brisbane, Queensland. This policy explains how we handle personal information: what we collect, why we collect it, who we share it with, and how you can access or correct it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Questions about this policy go to [email protected].

02 What we collect

• When you contact us. Your name, email address, phone number, company and message, through our website form or by email.
• When we talk or work together. Information you share in calls, meetings and correspondence.
• When we work for a client. Much of our work happens inside a client's own systems and documents, which can include personal information about the client's staff, customers and others. We handle that information on the client's behalf, under our agreement with them, and the client's privacy policy covers it.
• On our website. We use Cloudflare Web Analytics for cookieless visitor counts, and we don't use advertising or tracking cookies. Our hosting keeps standard request logs, such as IP addresses, for security and troubleshooting, and our contact form uses Cloudflare's Turnstile check to tell people from automated spam.

We don't seek sensitive information, such as health information, unless a client engagement needs it and the client has agreed.

03 How we use it

We use personal information to respond to enquiries, arrange meetings, provide and improve our services, run our business (including invoicing and records), and meet our legal obligations. We don't sell or trade personal information.

04 Artificial intelligence and automated decision-making

We use artificial intelligence (AI) and automation across our business: for example, to read, summarise and draft correspondence (including enquiries you send us), to research and analyse information, and in the work we do for clients. We expect our use of these tools to grow as the technology develops, and we'll update this section as it does.

Our people remain responsible for the work these tools support and for the decisions that follow.

Decisions made by a computer program alone. We don't use computer programs to make decisions that could significantly affect a person's rights or interests without a person making the decision.

Decisions a computer program helps us make. We don't currently use AI or other software in a way that is a key factor in decisions that could significantly affect a person's rights or interests.

Personal information these tools use. These tools may use personal information we hold, such as names and contact details, and information in our correspondence, records and client work.

Tools we build for clients. When we build AI or automated tools for a client, the client decides how they're used, and the client's privacy policy describes them.

05 Who we share it with

• Service providers who help run our business and website, such as hosting, email, file storage, software and AI providers, to the extent they need it to provide their service.
• Professional advisers, such as our lawyers and accountants.
• Regulators and others, where the law requires it.

We don't share personal information with anyone else without your agreement.

06 Overseas processing

Some of our service providers, including our website host, our email delivery service and our AI providers, may store or process personal information outside Australia, including in the United States.

07 How long we keep it

We keep correspondence and engagement records as business records, and for at least as long as the law requires. If you'd like us to delete information about you, ask us and we will, unless the law requires us to keep it.

08 Access, correction and deletion

You can ask to see the personal information we hold about you, to correct it, or to delete it, and you can opt out of marketing emails at any time. Email [email protected] and we'll respond within 30 days.

09 Security

Our website uses encrypted connections, our systems use multi-factor authentication and access controls, and we use established service providers. If a data breach involving your information is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC).

10 Complaints

If you think we've mishandled your personal information, email [email protected]. We'll look into it and respond within 30 days. If you're not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

11 Changes to this policy

We'll update this policy as our practices change. The date at the top shows when it last changed.