Who this notice covers
This website is operated under the trading style T/A Otello Intelligence (Ortello, we, us). We are based in Australia.
This notice covers the public website at ortello.ai, its access-request form and related correspondence. The handling of data within an enterprise deployment is governed by the applicable customer contract and data-processing terms.
Information we collect and why
- Enquiries: your name, company and work email, plus a telephone number if you provide one. We use these details to respond to your request, discuss enterprise access and manage the resulting business conversation. Information you send in follow-up correspondence is used for that conversation.
- Website delivery and security: our hosting provider receives technical request information, such as IP addresses, requested URLs, browser information and timestamps, to deliver the site and protect it against abuse.
- Optional analytics: only after you allow analytics, Google Analytics receives information about page visits, browser/device characteristics and interactions such as selecting an agreement example or sending an access request. Our custom events contain fixed interface labels, not form field values. We strip query strings and fragments from the page address we configure for analytics.
- Privacy preferences: a record in your browser stores your analytics choice, the notice version and when the choice was made and expires. It is not sent to Google while analytics is off.
You can browse without providing contact details or allowing analytics. The form needs a name, company and work email so we can handle your enquiry. Telephone is optional. Please do not submit sensitive personal information, passwords or customer datasets through this form.
Sending an access request does not subscribe you to a newsletter. Any separate marketing activity must have its own applicable permission and opt-out arrangements.
When consent and other legal grounds apply
Where the GDPR applies, our basis for optional analytics is your consent. Our legitimate interests in answering business enquiries, administering business relationships and keeping this website secure support the corresponding processing. Where you personally request steps towards a contract, those steps may instead provide the contractual basis. We may also retain or disclose records to meet legal obligations.
You can withdraw analytics consent through Cookie preferences. Withdrawal stops future analytics collection; it does not reverse processing that occurred before withdrawal. This website does not use the information to make solely automated decisions with legal or similarly significant effects.
Service providers and overseas processing
Netlify hosts the site and stores access-request submissions. Submission notifications are sent to our business email inbox, where the email service provider also processes the correspondence. Google provides Google Tag Manager and Google Analytics when you opt in. Tag Manager loads and configures the analytics tags after permission is given. These providers process information for the services they supply; their own infrastructure may involve subprocessors.
Information may be processed in Australia, the United States and other countries where these providers operate. This site does not offer Australia-only data storage. Netlify’s data-processing agreement and Google’s data-processing terms describe their contractual safeguards, including transfer provisions where applicable. Contact us for information about safeguards relevant to your information.
We may also disclose information where required by law, to respond to a lawful request, or where reasonably necessary to protect legal rights or website security. This website does not load advertising tags or enable Google advertising personalisation. The public data-use policy grants no permission to use contact details or other personal information submitted through the form.
How long information is kept
Enquiries and correspondence are kept while needed to respond, manage the business relationship or maintain records for legal obligations and claims. The relevant factors include whether the enquiry remains active, whether a contract results, and applicable record-keeping or limitation periods. Records should be deleted or de-identified when those purposes end, subject to required retention and backup cycles.
The analytics preference lasts up to 180 days in this browser. The GA cookies set by this site are capped at the remaining consent period. Our GA4 property was configured for 14-month user/event data retention; this does not set the lifespan of every aggregate report. See Cookies for the distinction between browser storage and analytics records.
Your rights and privacy choices
Use the website enquiry form to request a response from our team about a privacy matter. When we reply, you can request access to or correction of your information, ask about its use, or make a complaint. Depending on the law that applies, you may also request deletion, restriction or a portable copy, or object to certain processing. We may need proportionate information to verify your identity and locate the records. Please do not send identity documents unless we ask for them securely.
Where EU law applies, you may complain to the data-protection authority in your country of residence, work or the alleged infringement. In Australia, you may contact the Office of the Australian Information Commissioner where the Privacy Act applies, generally after raising the matter with us. We will handle requests within the applicable legal timeframe and explain any permitted refusal or extension.
Where a US state privacy law applies, the rights available can include access, correction, deletion, portability, an authorised-agent request, and opting out of sale, sharing, targeted advertising or certain profiling. If your law provides an appeal, reply to our decision asking for a review. We will not penalise you for exercising applicable privacy rights.
This site responds to Global Privacy Control (GPC) and Do Not Track signals by keeping optional analytics off, including when an earlier stored choice allowed it. You can also reject analytics yourself. These choices apply to this browser and do not stop technical processing needed to deliver the website or handle a form you submit.
Children, external links and updates
Ortello’s enterprise website is intended for business users, not children. If you believe a child has provided personal information through it, please contact us. External websites have their own privacy practices.
We will update this page when our practices change and show the effective date above. If the purposes requiring consent change, we will ask for a new choice before using analytics under the changed notice.