Legal Disclaimer, Privacy Policy & Website Terms.

The information on this website is provided for general informational purposes only. It does not constitute legal advice, tax advice, financial advice, certification, verification, formal assurance, audit decision-making, or any other regulated professional advice.

While GLATOW & ASSOCIATES makes reasonable efforts to keep website content accurate and up to date, no representation or warranty, express or implied, is given as to the accuracy, completeness, reliability, suitability, or availability of any content on this website.

You should not rely on website content as a substitute for specific professional advice tailored to your circumstances. Any reliance on this website is at your own risk.

To the maximum extent permitted by law, GLATOW & ASSOCIATES excludes liability for any loss, damage, cost, or expense arising from or connected with the use of, or reliance on, this website or its content.

Your use of this website, or the sending of an enquiry through this website, does not by itself create a client, adviser, fiduciary, contractor, or other professional relationship with GLATOW & ASSOCIATES.

A professional engagement only arises when both parties expressly agree in writing on scope, terms, and any applicable commercial arrangements.

GLATOW & ASSOCIATES provides advisory, readiness, implementation support, training, and related consulting services.

Unless expressly stated in a separate written engagement, GLATOW & ASSOCIATES does not, through this website, offer certification, verification, formal audit decisions, regulated legal services, or any guarantee of regulatory approval, market access, customs clearance, or commercial outcomes.

Where projects involve third-party testing, inspection, certification, verification, laboratory services, or specialist technical services, those services are provided by the relevant third party under that party’s own scope, responsibility, and terms.

GLATOW & ASSOCIATES treats business enquiries with appropriate professional discretion.

However, information submitted through website forms, ordinary email, or other non-encrypted online channels should not be treated as fully secure or legally privileged. You should not send highly sensitive confidential information unless specifically requested and appropriate arrangements have been agreed in advance.

GLATOW & ASSOCIATES is committed to handling personal information responsibly.

Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to our activities, we handle personal information in accordance with those requirements. Where they do not strictly apply, we nevertheless seek to follow privacy good practice consistent with Australian regulatory guidance. OAIC notes that many small businesses with turnover of $3 million or less may be exempt unless a specific exception applies, but also explains what a privacy policy should contain where the Privacy Act applies.

Personal information we may collect

We may collect personal information that you voluntarily provide to us, including:

• your name
• organisation name
• job title
• email address
• telephone number
• country or region
• the content of your enquiry or correspondence
• any other personal information you choose to provide

How we collect personal information

We generally collect personal information directly from you when you:

• submit a contact form
• email us
• request information, a proposal, or a consultation
• communicate with us in relation to potential or actual services

We may also collect limited technical information through website hosting, security, analytics, logs, cookies, and similar technologies.

Why we collect personal information

We collect, hold, use, and disclose personal information for purposes including:

• responding to enquiries
• assessing whether our services are relevant to your request
• communicating with you
• preparing proposals or engagement documentation
• delivering services
• maintaining internal records
• improving website functionality, security, and performance
• complying with legal or regulatory obligations

If you do not provide requested personal information, we may be unable to respond properly to your enquiry or provide requested services. OAIC says this is one of the matters that should be disclosed at or before collection.

Disclosure of personal information

We may disclose personal information where reasonably necessary to:

• personnel or contractors working with GLATOW & ASSOCIATES
• professional advisers
• IT, hosting, website, email, cloud, or administrative service providers
• specialist delivery partners involved in a project
• regulators, courts, authorities, or other parties where required or authorised by law

We do not sell personal information.

Overseas disclosures

Because GLATOW & ASSOCIATES operates internationally, personal information may be stored, processed, or accessed outside Australia, including by website hosting, email, cloud, analytics, or specialist service providers.

If personal information is likely to be disclosed overseas, we aim to do so only where reasonably necessary and with appropriate safeguards. OAIC says individuals should be told whether overseas disclosures are likely and, where practicable, the countries involved.

Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Access and correction

You may request access to personal information we hold about you, and you may request correction if you believe it is inaccurate, incomplete, out of date, or misleading.

Retention

We retain personal information only for as long as reasonably necessary for business, legal, regulatory, evidentiary, or administrative purposes.

We host three online tools: a Carbon Audit Dashboard (ef.ga-advice.com), a Transport e_td Calculator + AI Advisor (iscctd.ga-advice.com), and FeedstockTrace (feedstocktrace.com). All three are provided as beta / pilot planning aids only; their outputs are not legally binding inventories or audit reports. Where you choose to use a tool, the third-party sub-processors set out below handle parts of your input on our behalf. The sub-processors differ per tool, so we list them tool by tool.

Carbon Audit Dashboard — ef.ga-advice.com

Co-issued by GLATOW & ASSOCIATES and TVA — Technical Verification Alliance. Where you choose to use the dashboard, the following third-party sub-processors handle parts of your input on our behalf.

AI activity extraction

When you submit a description in the "AI Assistant" field, the free-text you typed is transmitted to Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (operating the DeepSeek API, infrastructure hosted in the People’s Republic of China) for natural-language activity extraction. We transmit only the text you enter; no account data, name, email or contact information is sent. Under the DeepSeek API commercial terms, inputs submitted via the API are not used for model training.

GHG factor database and emissions calculation

Once activities are extracted (or entered manually), the resulting numeric parameters (origin and destination country codes, weight, transport mode, fuel type, kWh consumption, etc.) are sent to the emissions.dev API (operated by emissions.dev, third-party emission-factor provider; infrastructure hosted in the European Union and the United States). The response contains CO₂e values, source dataset references and, for transport activities, route geometry. No personally identifying information is sent.

Map rendering

Route maps shown after a transport calculation are rendered using OpenStreetMap tiles, served by the OpenStreetMap Foundation (United Kingdom). Your browser fetches map tiles directly from openstreetmap.org; we do not transmit your input to OpenStreetMap.

Quota tracking and bot protection

We record the timestamp, calculation category and a hashed form of your IP address on our own server in order to enforce a daily quota for the free tier and detect automated abuse. These records are retained for up to seven days for audit purposes and are not used for any other purpose. Your unhashed IP address is not stored.

Local browser storage

Your "Session Ledger" (the running list of calculations performed in a browsing session) is stored in your browser’s sessionStorage. It is tab-scoped, never transmitted to us, and clears automatically when you close the browser tab. The dashboard sets one PHP session cookie (HttpOnly, Secure, SameSite=Strict) to remember tier authentication and bot-prevention state during your visit.

Cross-border transfers

Using the AI Assistant feature involves a transfer of your input text to the People’s Republic of China (DeepSeek). Using any feature involves a transfer of activity parameters to the European Union and/or the United States (emissions.dev). By using the dashboard, you acknowledge these transfers. If you do not wish your input to be transferred outside Australia, please use the "Manual Entry" mode (which avoids the AI extractor) and consider whether the use case is appropriate for your jurisdiction.

Transport e_td Calculator + AI Advisor — iscctd.ga-advice.com

The calculator itself runs in your browser; the figures you enter stay on your device unless you choose to export them. The tool includes a scoped AI advisor. When you ask the advisor a question, the question text together with retrieved passages of regulatory reference material is transmitted to Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (DeepSeek API, infrastructure in the People’s Republic of China) to generate an answer. We transmit only your question and the retrieved reference text; no account data, name or email is sent. Inputs submitted via the DeepSeek API are not used for model training. Access requires a code issued by email; we record session-level metadata (rate limits, a hashed IP) to prevent abuse and do not log your calculation inputs.

FeedstockTrace — feedstocktrace.com

FeedstockTrace is a logged-in operational application for waste & residue collection. Operational records you enter or capture — collection-point master data, pickup quantities, GPS coordinates, container photos and handover signatures (which may include the name and role of a collection-point representative) — are stored on our server infrastructure to provide the service and to generate audit and UDB exports.

Two third-party sub-processors may handle parts of your data: (1) Google Maps Platform / Routes API (Google Ireland Ltd. / Google LLC) computes road distances and route geometry for planned tours — address and coordinate data for the relevant collection points is transmitted to Google; (2) the built-in AI Compliance Advisor transmits your question text and retrieved regulatory reference passages to DeepSeek (People’s Republic of China), as described above. Transactional emails (for example account and notification messages) are sent via our email/SMTP provider.

Because FeedstockTrace processes operational and, in places, personal data on a logged-in basis, the specific processing terms are set out in the pilot or customer agreement for each deployment.

Updates to this list

We will update this section if we change sub-processors. This policy was last revised on 12 June 2026.

If you have a privacy question, access request, correction request, or complaint, please contact:

Please include sufficient detail so we can understand and respond to your request. If a privacy complaint is made, we will review it and respond within a reasonable period.

This website may use cookies, analytics tools, server logs, and similar technologies to support functionality, performance, security, and traffic analysis.

These technologies may collect technical data such as browser type, device information, referring pages, IP-related information, usage patterns, and similar metadata.