Legal Disclaimer, Privacy Policy & Website Terms.

The information on this website is provided for general informational purposes only. It does not constitute legal advice, tax advice, financial advice, certification, verification, formal assurance, audit decision-making, or any other regulated professional advice.

While GLATOW & ASSOCIATES makes reasonable efforts to keep website content accurate and up to date, no representation or warranty, express or implied, is given as to the accuracy, completeness, reliability, suitability, or availability of any content on this website.

You should not rely on website content as a substitute for specific professional advice tailored to your circumstances. Any reliance on this website is at your own risk.

To the maximum extent permitted by law, GLATOW & ASSOCIATES excludes liability for any loss, damage, cost, or expense arising from or connected with the use of, or reliance on, this website or its content.

Your use of this website, or the sending of an enquiry through this website, does not by itself create a client, adviser, fiduciary, contractor, or other professional relationship with GLATOW & ASSOCIATES.

A professional engagement only arises when both parties expressly agree in writing on scope, terms, and any applicable commercial arrangements.

GLATOW & ASSOCIATES provides advisory, readiness, implementation support, training, and related consulting services.

Unless expressly stated in a separate written engagement, GLATOW & ASSOCIATES does not, through this website, offer certification, verification, formal audit decisions, regulated legal services, or any guarantee of regulatory approval, market access, customs clearance, or commercial outcomes.

Where projects involve third-party testing, inspection, certification, verification, laboratory services, or specialist technical services, those services are provided by the relevant third party under that party’s own scope, responsibility, and terms.

GLATOW & ASSOCIATES treats business enquiries with appropriate professional discretion.

However, information submitted through website forms, ordinary email, or other non-encrypted online channels should not be treated as fully secure or legally privileged. You should not send highly sensitive confidential information unless specifically requested and appropriate arrangements have been agreed in advance.

GLATOW & ASSOCIATES is committed to handling personal information responsibly.

Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to our activities, we handle personal information in accordance with those requirements. Where they do not strictly apply, we nevertheless seek to follow privacy good practice consistent with Australian regulatory guidance. OAIC notes that many small businesses with turnover of $3 million or less may be exempt unless a specific exception applies, but also explains what a privacy policy should contain where the Privacy Act applies.

Personal information we may collect

We may collect personal information that you voluntarily provide to us, including:

• your name
• organisation name
• job title
• email address
• telephone number
• country or region
• the content of your enquiry or correspondence
• any other personal information you choose to provide

How we collect personal information

We generally collect personal information directly from you when you:

• submit a contact form
• email us
• request information, a proposal, or a consultation
• communicate with us in relation to potential or actual services

We may also collect limited technical information through website hosting, security, analytics, logs, cookies, and similar technologies.

Why we collect personal information

We collect, hold, use, and disclose personal information for purposes including:

• responding to enquiries
• assessing whether our services are relevant to your request
• communicating with you
• preparing proposals or engagement documentation
• delivering services
• maintaining internal records
• improving website functionality, security, and performance
• complying with legal or regulatory obligations

If you do not provide requested personal information, we may be unable to respond properly to your enquiry or provide requested services. OAIC says this is one of the matters that should be disclosed at or before collection.

Disclosure of personal information

We may disclose personal information where reasonably necessary to:

• personnel or contractors working with GLATOW & ASSOCIATES
• professional advisers
• IT, hosting, website, email, cloud, or administrative service providers
• specialist delivery partners involved in a project
• regulators, courts, authorities, or other parties where required or authorised by law

We do not sell personal information.

Overseas disclosures

Because GLATOW & ASSOCIATES operates internationally, personal information may be stored, processed, or accessed outside Australia, including by website hosting, email, cloud, analytics, or specialist service providers.

If personal information is likely to be disclosed overseas, we aim to do so only where reasonably necessary and with appropriate safeguards. OAIC says individuals should be told whether overseas disclosures are likely and, where practicable, the countries involved.

Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Access and correction

You may request access to personal information we hold about you, and you may request correction if you believe it is inaccurate, incomplete, out of date, or misleading.

Retention

We retain personal information only for as long as reasonably necessary for business, legal, regulatory, evidentiary, or administrative purposes.

We host an online Carbon Audit Dashboard at ef.ga-advice.com, co-issued by GLATOW & ASSOCIATES and TVA — Technical Verification Alliance. The dashboard is provided in beta and as a planning aid only; results are not legally binding inventories or audit reports. Where you choose to use the dashboard, the following third-party sub-processors handle parts of your input on our behalf.

AI activity extraction

When you submit a description in the "AI Assistant" field, the free-text you typed is transmitted to Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (operating the DeepSeek API, infrastructure hosted in the People’s Republic of China) for natural-language activity extraction. We transmit only the text you enter; no account data, name, email or contact information is sent. Under the DeepSeek API commercial terms, inputs submitted via the API are not used for model training.

GHG factor database and emissions calculation

Once activities are extracted (or entered manually), the resulting numeric parameters (origin and destination country codes, weight, transport mode, fuel type, kWh consumption, etc.) are sent to the emissions.dev API (operated by emissions.dev, third-party emission-factor provider; infrastructure hosted in the European Union and the United States). The response contains CO₂e values, source dataset references and, for transport activities, route geometry. No personally identifying information is sent.

Map rendering

Route maps shown after a transport calculation are rendered using OpenStreetMap tiles, served by the OpenStreetMap Foundation (United Kingdom). Your browser fetches map tiles directly from openstreetmap.org; we do not transmit your input to OpenStreetMap.

Quota tracking and bot protection

We record the timestamp, calculation category and a hashed form of your IP address on our own server in order to enforce a daily quota for the free tier and detect automated abuse. These records are retained for up to seven days for audit purposes and are not used for any other purpose. Your unhashed IP address is not stored.

Local browser storage

Your "Session Ledger" (the running list of calculations performed in a browsing session) is stored in your browser’s sessionStorage. It is tab-scoped, never transmitted to us, and clears automatically when you close the browser tab. The dashboard sets one PHP session cookie (HttpOnly, Secure, SameSite=Strict) to remember tier authentication and bot-prevention state during your visit.

Cross-border transfers

Using the AI Assistant feature involves a transfer of your input text to the People’s Republic of China (DeepSeek). Using any feature involves a transfer of activity parameters to the European Union and/or the United States (emissions.dev). By using the dashboard, you acknowledge these transfers. If you do not wish your input to be transferred outside Australia, please use the "Manual Entry" mode (which avoids the AI extractor) and consider whether the use case is appropriate for your jurisdiction.

Updates to this list

We will update this section if we change sub-processors. The current list reflects the deployment as of the date this policy was last revised.

If you have a privacy question, access request, correction request, or complaint, please contact:

Please include sufficient detail so we can understand and respond to your request. If a privacy complaint is made, we will review it and respond within a reasonable period.

This website may use cookies, analytics tools, server logs, and similar technologies to support functionality, performance, security, and traffic analysis.

These technologies may collect technical data such as browser type, device information, referring pages, IP-related information, usage patterns, and similar metadata.