Privacy Policy

Overview

Arista Holdings Pty Ltd, trading as AristaTech, collects and handles information to provide IT services, respond to enquiries, protect its website and improve customer outcomes. We do not sell personal information. This notice explains the information handled through this website, the providers involved, and the choices and rights available to you.

Information we collect and why

If you contact us or submit a form, we may collect the details you provide, such as your name, business name, email address, phone number, selected service, preferred contact details and message. We use this information to respond, prepare requested advice or quotations, provide services, maintain security and business records, and meet legal obligations. Our hosting and security systems may also create limited server logs containing technical request information such as time, route, browser data and network address for security, reliability and troubleshooting.

Forms, delivery and security

Website forms use Cloudflare Turnstile as a necessary anti-abuse and security control. Successfully submitted enquiries are delivered using Resend and email to authorised AristaTech recipients. Depending on AristaTech's configured internal workflow, an authorised mailbox may create a CRM or ticket record. Form details may therefore appear in delivery records, recipient mailboxes, server logs and an authorised CRM or ticket system where configured. These systems are separate from website analytics.

Website analytics do not control necessary form delivery or security processing. No form content is sent to analytics.

Analytics and performance measurement

Google Analytics, Vercel Web Analytics and Vercel Speed Insights load when you open a page on this website. This site does not show an analytics consent banner, and these tools are not held until you accept them. The Google tag grants analytics_storage only; advertising storage, user-data and personalisation remain denied. Blocking cookies or scripts in your browser does not prevent use of the website or its forms.

• Google Analytics: receives a query-free page location, device/browser and interaction information, and bounded events used to understand site use and enquiry pathways. Custom fields are limited to normalized source path, destination class, CTA type, form type and a random single-event identifier, as applicable.
• Vercel Web Analytics: for aggregate traffic reporting, our callback returns only the event type and a normalized, query-free URL path. Vercel describes deriving a daily visitor hash for this product.
• Vercel Speed Insights: our callback returns the same fields plus an optional normalized route for performance events. It does not forward browser, network or performance timing fields from the callback input.

These limits describe our callback output, not a complete description of provider-added metadata or transport information. The Vercel SDKs register the callback and load separate provider scripts; those scripts and ordinary network requests may add technical information outside that callback. See Vercel’s privacy information below.

Analytics are used to understand aggregate site usage, improve performance and assess bounded enquiry pathways. We do not send names, email addresses, phone numbers, message text, form values, raw telephone links, confirmation tokens or query strings to these analytics products.

Provider-side retention depends on the configured service and plan. Google Analytics retention follows the property's configured retention controls. Vercel guarantees access only for the applicable plan's reporting window and may retain data longer than that reporting window, including to support a later plan upgrade; the dashboard window must not be read as a guaranteed deletion date.

Read the providers' information at Google Privacy and Vercel Privacy.

Enquiry confirmation and measurement limits

Enquiry measurement is best-effort. After our email provider accepts an enquiry, the server can issue a signed confirmation valid for ten minutes. It contains a random event identifier and form category, not form content. No Redis or other server-side replay database is used. A separate browser sessionStorage record holds up to 32 dispatched event identifiers to suppress ordinary repeats in that tab session.

Reusing a valid confirmation in another browser or tab, clearing or disabling storage, or eviction from that bounded record can allow repeat measurement before expiry. Global at-most-once or exactly-once measurement is not guaranteed, and analytics blockers or provider failures can lose events. Missing analytics or signing configuration does not prevent enquiry delivery. If signed confirmation is unavailable, we show an unverified acknowledgement rather than claim verified success or send an unsigned lead event. Provider acceptance does not guarantee mailbox receipt.

Analytics cookies

Google Analytics may store first-party cookies in this browser to recognise a returning visitor. Vercel's products may process technical usage and performance data as described above. This website does not keep a separate analytics consent record, and it does not offer a cookie-settings control to turn these tools off.

You can block or delete cookies in your browser. That limits what these providers can store on your device. It does not automatically delete information previously collected by Google or Vercel. Contact us for data-rights enquiries.

Service providers and overseas handling

Google, Vercel, Resend, Cloudflare and their subprocessors may process or store information overseas, including in the United States and other locations listed in their current service and subprocessor documentation. AristaTech also uses authorised email, hosting and business-system providers. Countries and processing locations can change as provider infrastructure changes; contact us if you need current details for a particular service.

Retention and protection

We restrict access to authorised people and providers and use reasonable technical and organisational safeguards. Enquiry and service records are retained only while needed for response, service delivery, security, legal, accounting or dispute purposes, then deleted or de-identified where reasonably practicable. Provider copies may follow contractual backup and retention periods.

Access, correction and privacy complaints

To request access to or correction of personal information, ask a question, or make a privacy complaint, email info@aristatech.com.au. Please describe the information or concern and provide enough detail for us to verify and investigate the request without sending unnecessary sensitive information.

We will acknowledge a privacy complaint or rights request within a reasonable time, investigate it with the responsible business owner, and aim to provide a substantive response within 30 days. If more time is reasonably needed, we will explain why and provide an updated timeframe. You may also contact the Office of the Australian Information Commissioner about an unresolved Australian privacy complaint.

Updates

We may update this notice when our providers, purposes, information handling or legal obligations change.