Privacy Policy

1. About this policy

Kreo (ABN 70 641 096 077) ("Kreo", "we", "us", "our") is an Australian sales and marketing business that designs and builds technology for other businesses, including marketing campaigns, AI voice and calling systems, AI agents, CRMs and other software, sales automation and data reporting. We operate the website kreo.com.au.

This Privacy Policy explains how we collect, hold, use and disclose personal information. We aim to handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It applies to:

• people who visit our website or contact us;
• our clients and prospective clients, and the people who work for them; and
• our clients' own customers and contacts, whose information we may handle when we deliver services (see section 9).

2. The information we collect

• Enquiries: your name, email address and anything you include in your message when you use the form on our website or email us.
• Client information: business contact details, billing details and the information you give us about your business, systems and goals so we can scope and deliver work.
• Website information: technical details such as your IP address, browser and device type, the pages you visit and the website or advertisement that referred you. Our website also remembers, for the length of your visit, the page you first arrived on (including any campaign tags in the address) so an enquiry can tell us how you found us.
• Information handled for clients: when we build or operate systems for a client, those systems may hold information about the client's customers, such as names, contact details, enquiry details, call recordings, transcripts and messages (see section 9).

We don't ask for sensitive information (such as health information) through our website. Please don't send it to us unless we have asked for it for a specific purpose.

3. How we collect it

We collect personal information directly from you when you fill in our website form, email us, speak with us or engage us. We collect website information automatically as you use the site. When we deliver services, we may receive information from our clients or collect it through the systems we run on their behalf.

4. Why we use it

• to reply to your enquiry and talk with you about our services;
• to prepare proposals, deliver our services and support our clients;
• to send invoices, manage accounts and keep business records;
• to run, secure and improve our website;
• to let clients and people who have enquired know about our services, which you can opt out of at any time (section 13); and
• to meet our legal obligations.

If you don't give us the information we ask for, we may not be able to reply or provide our services.

5. Our website form and service providers

We use trusted service providers to run our business. They may handle personal information on our behalf, only for the purpose of providing their service to us. They include:

• FormSubmit (formsubmit.co), which delivers the messages sent through our website form to our inbox;
• Cloudflare, which hosts our website and processes the technical details of each visit;
• Google Workspace, which provides our email and documents; and
• the technology providers we use to deliver client services, such as telephony, AI, CRM, messaging and data platforms (see section 9).

6. Cookies, analytics and advertising

We may use analytics and advertising tools, such as Google Analytics and the Meta Pixel, to understand how our website is used and to measure our own advertising. These tools use cookies or similar technology and collect information about your visit, which their providers may combine with other information they hold. You can block or delete cookies in your browser settings, and opt out of Google Analytics at tools.google.com/dlpage/gaoptout. Blocking cookies won't stop the website from working.

7. When we disclose information

We don't sell, rent or trade personal information. We disclose it only:

• to our service providers, as described in sections 5 and 9;
• to our professional advisers, such as accountants and lawyers;
• to our clients, where the information belongs to them or was collected for them;
• where you have agreed; or
• where the law requires or allows it, such as to a regulator or law enforcement agency.

8. Overseas disclosure

Some of our service providers store or process information outside Australia, including in the United States and other countries where they or their data centres are located. We take reasonable steps to make sure overseas providers handle personal information in a way that is consistent with the Australian Privacy Principles.

9. Information we handle for our clients

When we build or operate a system for a client, such as an AI voice agent that answers their calls, a CRM or automated messaging, we handle their customers' information on the client's behalf and according to their instructions. We use it only to provide, support and improve the services for that client, and we don't use one client's customer data for another client.

Our client remains responsible for its own privacy obligations to its customers, including its privacy policy and collection notices, telling callers when calls may be recorded or answered by AI, and having consent to send marketing messages. If you are a customer of one of our clients, please contact that business first about your information.

Where AI services from third-party providers are used, for example to transcribe or analyse calls, personal information is shared with them only as needed to deliver the service.

10. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including access controls, secure providers and limiting access to the people who need it. No method of sending or storing information is completely secure, so we can't guarantee the security of information you send us.

11. How long we keep it

We keep personal information only for as long as we need it for the purposes in this policy, or as the law requires (for example, tax records). When we no longer need it, we take reasonable steps to delete or de-identify it. Information we hold for clients is kept, returned or deleted as agreed with that client.

12. Accessing and correcting your information

You can ask for access to the personal information we hold about you, or ask us to correct it, by emailing info@kreo.com.au. We'll respond within a reasonable time, usually within 30 days. If we can't give you access or make a correction, we'll tell you why.

13. Marketing

We may send you information about our services if you are a client or have enquired with us. Every marketing email includes a way to unsubscribe, and you can also ask us to stop at any time by emailing info@kreo.com.au.

14. Complaints

If you have a concern about how we have handled your personal information, please email us at info@kreo.com.au with the details. We'll look into it and respond, usually within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

15. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date it was last updated.

16. Contact

• Business: Kreo
• ABN: 70 641 096 077
• Email: info@kreo.com.au
• Website: kreo.com.au

We handle all enquiries by email.