Privacy Policy
Kairo Analytics ("we", "us", "our") provides inventory-optimisation consulting to FMCG, retail and wholesale businesses. This policy explains what information we collect, how we use it, and your rights under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and — for visitors in the EU, UK and EEA — the General Data Protection Regulation (GDPR). If you have any questions, you can reveal our email address to get in touch.
Information we collect
We collect information in a few ways:
- Contact details you provide directly — for example, your name, email address, company, and phone number, when you email us or book a discovery call.
- Inventory and business data you share with us during a consulting engagement, such as SKU-level stock, sales, and margin data. This is treated as strictly confidential and covered by a non-disclosure agreement, and is used solely to deliver the agreed engagement.
- Basic technical and analytics data generated by visiting this website — such as pages viewed and general device/browser information — used to understand site usage and keep it running well.
How we use your information
We use the information we collect to respond to enquiries, schedule and deliver consulting services, and improve this website. We do not sell, rent, or trade personal information to any third party, for any purpose.
Third parties we use
We rely on a small number of trusted service providers to run this website and our business. Each may process limited data on our behalf, in line with their own privacy policies:
- Netlify — hosts this website.
- Google Fonts — delivers the typefaces used on this site.
- Calendly — powers our discovery-call booking widget.
We do not control how these providers handle data beyond what is described in their own policies, which we encourage you to review.
Cookies
This site itself does not set marketing or tracking cookies. If you open the Calendly booking widget to schedule a call, Calendly may set its own cookies to manage that booking — this only happens if you interact with the widget.
Data security and retention
Client data shared during an engagement is held only for as long as necessary to deliver that engagement, after which it is returned to the client and/or securely deleted. We take reasonable technical and organisational measures to protect information from misuse, loss, or unauthorised access.
Your rights
Under the Australian Privacy Principles, you have the right to access the personal information we hold about you and to request corrections. If you'd like to do either, or have a concern about how we've handled your information, contact us first — reveal our email address — we'll aim to resolve it directly. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Visitors in the EU, UK and EEA (GDPR)
If you are located in the European Union, United Kingdom or European Economic Area, the General Data Protection Regulation gives you additional rights, and this section applies to you. For the purposes of the GDPR, Kairo Analytics is the data controller of the personal information described in this policy. You can reach us using the contact details at the end of this page.
Lawful bases. We process your personal information on the following bases: your consent (for example, when you email us or book a call); our legitimate interests in responding to enquiries and running our business, balanced against your rights; and the performance of a contract when we deliver an agreed consulting engagement.
Your GDPR rights. You have the right to access, correct, or erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time without affecting processing already carried out. To exercise any of these, contact us using the details below and we will respond within the timeframes the GDPR requires.
International transfers. Kairo Analytics operates from Australia, and the service providers listed above may process data outside the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or an adequacy decision — to protect it.
Complaints. If you believe we have handled your personal data unlawfully, you may lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EU, your national data protection authority.
Changes to this policy
We may update this policy from time to time as our services or obligations change. The "Last updated" date at the top of this page reflects the most recent revision.