Privacy Policy
How we collect, use, disclose and protect the information you give us — including what happens when it reaches our team overseas.
1. About this policy
ORIVASO (“we”, “us”, “our”) provides remote estimating and administration support to businesses in the Australian construction industry. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access or correct it. It applies to our website, our enquiry form, and the services we provide to clients.
2. What information we collect
The information we hold depends on how you deal with us. It generally includes:
- Contact details — name, position, company, email address, phone number and website
- Business details — business type, state, approximate size, number of projects, and the size of your current administrative or estimating team
- Enquiry content — the support you are after, the software you use, hours, timing, budget range and anything else you tell us in your own words
- Correspondence — emails, phone notes and records of our conversations with you
- Engagement records — where you become a client, records needed to deliver, manage and invoice the service
- Website data — standard server logs and, where analytics is enabled, aggregated usage information
We do not seek sensitive information (as defined in the Privacy Act) and ask that you do not send it to us through the enquiry form.
3. How we collect it
We collect information directly from you in almost every case: through our enquiry form, by phone or email, during a consultation, and in the course of delivering services. Occasionally we may collect publicly available business information, such as details published on your company website.
Providing the information on our enquiry form is voluntary. Some fields are required simply because without them we cannot give you a useful answer — if you would rather not complete the form, you are welcome to contact us directly instead.
4. Why we collect and use it
- To respond to your enquiry and answer your questions
- To scope the support you need and prepare a quote
- To source, screen and put forward suitable VA candidates against your requirements
- To deliver, manage and review the services you engage us for
- For administration, invoicing and account management
- To improve our services and our website
- To meet our legal, tax and record-keeping obligations
We do not sell personal information. We do not add enquirers to a marketing list without consent, and any marketing we do send will always include a way to opt out.
5. Your project information and confidentiality
Construction work involves commercially sensitive material that is not always “personal information” but matters just as much: tender pricing, rate build-ups, drawings, contract documents, subcontractor and supplier details, and correspondence about live projects.
- Confidentiality agreements and non-disclosure procedures are in place before any placement begins, and apply to every person who works on your account
- Your VA is dedicated to your business and does not work across competing builders in the same market
- Access to your systems is granted by you, under your own licences and security settings, and can be revoked by you at any time
- We do not use your project material for any purpose other than delivering your services
6. Who we disclose it to
We may disclose personal information to:
- Our own personnel and contractors, including the Virtual Assistants assigned to your account, so they can do the work you have engaged us for
- Service providers who support our business — email, CRM, cloud hosting, scheduling and analytics providers — who are bound to use it only for the services they supply to us
- Our professional advisers, such as accountants and lawyers
- Anyone else where you have consented, or where we are required or permitted to do so by law
7. Overseas disclosure
Our Virtual Assistants are based in the Philippines. When you engage us, or when you send us an enquiry that we assign to a member of our team, your personal information and your project information will be accessed from and stored in the Philippines.
Some of the service providers we use — for example cloud hosting, email and CRM platforms — may also store information in the United States, the European Union or elsewhere.
Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including through confidentiality and data-handling obligations in our agreements with our team and our suppliers. You should be aware that overseas recipients may be subject to laws that differ from Australian privacy law, and that in some circumstances you may not be able to seek redress under the Privacy Act.
8. How we protect it
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. That includes restricting access to those who need it to do their job, using access controls on the systems we operate, and requiring confidentiality commitments from our personnel.
No method of transmission or storage is completely secure. If we became aware of a data breach likely to result in serious harm, we would respond in line with the Notifiable Data Breaches scheme.
9. Cookies and website analytics
This website does not use advertising or tracking cookies. If you switch the site between light and dark appearance, that preference is stored in your own browser and never sent to us.
Where website analytics is enabled, it is used only to understand aggregate usage — which pages are read, how visitors arrive — and not to identify individuals. You can block cookies through your browser settings; the site will continue to work.
10. How long we keep it
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as we are required to keep it by law. When it is no longer needed, we take reasonable steps to destroy it or permanently de-identify it.
11. Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong, out of date or incomplete. Contact us using the details below. We may need to verify your identity first, and we will respond within a reasonable period — normally within 30 days.
There is no charge for making a request. If we refuse access or correction, we will tell you why in writing and explain how you can complain.
12. Complaints
If you think we have mishandled your personal information, please contact us first at info@orivaso.com. We will acknowledge your complaint and aim to respond within 30 days.
If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
13. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the date it was last updated.

