Effective Date: 17 November 2023
Last updated: 25 October 2026

This Privacy Policy governs the manner in which Whizrock, owned by Hieros Consulting Pty Ltd ("Whizrock," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users (referred to as "you" or "your") of the Whizrock website ("Site"). This Privacy Policy applies to the Site and all products and services offered by Whizrock, including our messaging services delivered over WhatsApp.

Information We Collect

We may collect personal identification information from you in various ways, including but not limited to when you visit our Site, register on the Site, place an order, subscribe to our newsletter, respond to a survey, fill out a form, message us on WhatsApp, or interact with other activities, services, features, our customers, who provide us with Customer Data and in some cases, Payee Data, third-party services and providers, such as business partners, credit bureaus, social media tools, analytics and other publicly available sources, events we organise or take part in, and other business initiatives (including partner promotions, communications, and events) or resources we make available on our Site. The personal identification information we may collect includes, but is not limited to, your name, email address, mailing address, phone number, and payment details.

We may also collect non-personal identification information about you whenever you interact with our Site. Non-personal identification information may include the browser name, the type of computer or device, technical information about your means of connection to our Site (such as the operating system and the Internet service providers utilised), and other similar information.

How We Use Collected Information

We collect and use your personal information for the following purposes:

• To improve customer service: Information you provide helps us respond to your customer service requests and support needs more efficiently.
• To personalise user experience: We may use information in the aggregate to understand how our users as a group use the services and resources provided on our Site.
• To process payments: We may use the information you provide about yourself when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service.
• To send periodic emails: We may use the email address to send you information and updates pertaining to your order. It may also be used to respond to your inquiries, questions, and/or other requests. If you decide to opt in to our mailing list, you will receive emails that may include company news, updates, related product or service information, etc. If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.
• To communicate with you on WhatsApp: We use your phone number and the messages you send us to reply to your enquiries, provide support, and deliver the services you have asked for (see "WhatsApp and Meta Messaging" below).
• To facilitate and optimise our marketing and advertising campaigns, ad management and sales operations, and to manage and deliver advertisements for our products and Services more effectively.

WhatsApp and Meta Messaging

We communicate with customers and prospective customers using the WhatsApp Business Platform, provided by Meta Platforms, Inc. and its affiliates ("Meta"). When you message us on WhatsApp, or we message you after you have contacted us or agreed to hear from us, we handle the following information:

• your WhatsApp phone number and the name on your WhatsApp profile;
• the content of the messages, photos, documents, voice notes and other media you send us, and our replies;
• message status information (such as sent, delivered and read), and the date and time of messages; and
• any details you choose to give us in the conversation, such as your name, email address or enquiry details.

We use this information only to respond to you, provide and support our services, keep a record of our conversations, send service-related updates, and, where you have opted in, send you information about our products and services. We do not sell your WhatsApp information.

Messages sent through WhatsApp are processed by Meta and are subject to the WhatsApp Business Terms and WhatsApp Privacy Policy. Meta is responsible for its own handling of your information. We store the conversation records we keep on secure systems operated by our service providers, and access is limited to people who need it to respond to you.

You can stop us contacting you on WhatsApp at any time by replying "STOP", by blocking or deleting our number in WhatsApp, or by emailing [email protected].

How We Protect Your Information

We adopt appropriate data collection, storage, and processing practices, as well as security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal information, username, password, transaction information, and data stored on our Site.

How Long We Keep Your Information

We keep personal information, including WhatsApp conversation records, only for as long as we need it to provide our services, resolve queries, meet our legal, tax and accounting obligations, and protect our legitimate business interests. When information is no longer needed, we delete it or de-identify it.

Sharing Your Personal Information

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined above.

Legal Compliance: In exceptional circumstances, we may disclose or allow government and law enforcement officials access to your Personal Data in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations, with or without notice to you. All such disclosure requests will be reviewed by Whizrock to determine to what extent, if any, Whizrock is required to comply with such request. Whizrock will consult with its legal advisors on the request to determine if we are permitted to notify you about such requests. Such disclosure or access may occur if we believe in good faith that: (1) we are legally compelled to do so; (2) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, counter terrorist financing verification requirements, fraud, or other wrongdoing; or (3) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and Services. Unless Whizrock is prohibited from doing so by applicable laws or the applicable legal request, Whizrock may notify you before disclosing Personal Data, so you may take the necessary steps to object or seek protection from disclosure.

Service Providers: We engage selected partners, and third-party contractors to perform services complementary to our own, and to support the operation of our business. Such Service Providers or contractors include hosting and server co-location services, communications and content delivery networks (CDNs), internet service providers, operating systems and platforms, messaging platforms (including WhatsApp), data analytics services, marketing and advertising services, data and cyber security services, fraud detection and prevention services, capital providers, and correspondents, banks, financial institutions, credit bureaus, collection agencies, customer engagement services, billing and payment processing services, web analytics, e-mail and SMS distribution and monitoring services, session or activity recording services, remote access services, performance measurement, data optimisation services, social and advertising networks, content providers, support and customer relationship management systems, service providers that help us verify your identity and help us comply with our legal and regulatory obligations to screen and monitor transactions; recruiters and companies that provide background checking services; and our business, legal, tax, financial and compliance advisors (collectively, "Service Providers"). These Service Providers may have access to your Personal Data, depending on each of their specific roles and purposes in facilitating, supporting, and enhancing our Services, and may only use it for such purposes.

Third-Party Websites and Services: Our Services may include links to third-party websites, and integrations with third-party services. Such websites and third-party services, and any information you process, submit, transmit or otherwise use with such websites and third-party services, are governed by such third party's terms and privacy practices and policies, and not by this Privacy Policy. We encourage you to carefully read the terms and privacy policies of such websites and third-party services. To the extent that our Service Providers contact you in order to offer or promote our Service, they may additionally interest you in their own services. Should you decide to engage in such activities with Whizrock's Service Providers, please note that such engagement is beyond the scope of Whizrock's Terms of Use and Privacy Policy and will therefore be covered by our Service Provider's terms and privacy policy.

Sharing Data with Other Users: Payee Data and Third Party Data is typically shared with and is available to Customer Users within the relevant Customer account. Customer Data is shared with the administrator or other users of their Customer account. In such cases, sharing such data means that the administrator or other users of the account may access it on behalf of the Customer, and will be able to monitor, process and analyse the Personal Data contained therein. This includes instances where you may contact us for help in resolving an issue specific to you or to a team of which you are a member (and which is managed by the same Customer). Please note that Whizrock is not responsible for and does not control any further disclosure, use or monitoring by or on behalf of the Customer, where the Customer acts as the Data Controller of such data. Supplier Data is typically shared with other users of the Services, primarily through access to the Supplier's site in relation to the Services.

Events: Whizrock may receive from, and share with a third-party event host, Personal Data collected at events either managed by Whizrock or by a third party. For any event hosted by a third party, the collection and use of all Personal Data will be governed by the applicable third party's privacy policy, and the terms provided to individuals at the applicable event.

Cookies & Tracking Technology

Whizrock and our Service Providers use cookies and other technologies on our Sites and within our Services, for performance, tracking, analytics, personalisation purposes and in order to provide you with a better experience. We may share non-identifiable/aggregated extracts of such information with our partners for our legitimate business purposes.

Cookies are small text files that are stored through the browser on your computer or mobile device (for example, Google Chrome or Safari) when you visit a website. Some cookies are removed when you close your browser session – these are the "Session Cookies", others last for longer periods and are called "Persistent Cookies". We use both types of cookies to facilitate the use of the Services' features and tools (for example, we use Persistent Cookies to remember your login details and make it easier for you to login the next time you access the Platform).

The following describes different categories of cookies and how we might use them on our Sites and within our Services.

Required Cookies: These cookies are necessary for the functionality of our Sites, and include session cookies needed to transmit authentication and security cookies. These cookies cannot be opted out of, as they are required for website functionality.

Functional Cookies: These cookies assist us with enhancing the function and performance of our Sites, including capturing analytics of website traffic, assisting with market research, and providing non-targeted advertising.

Google Analytics: We use Google Analytics to collect information to maintain and improve the use of our Sites and Services. Google Analytics collects information such as how often users visit the Services, which pages they visit when they do so, and which other sites they used prior to coming to our Services. Google's ability to use and share information collected by Google Analytics about your visits to and use of the Services is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. Further information about your option to opt out of these analytics services is available here.

Advertising Cookies: These cookies track a user's activity across websites in order to understand a user's interests, and to direct marketing to the user. More information on how we use advertising cookies in relation to interest-based advertising is outlined below.

Interest-Based Advertising: Interest-based ads are sometimes referred to as personalised or targeted ads. We and our marketing partners may show interest-based ads to display features, products, and services that might be of interest to you. In providing interest-based ads, we follow the Self-Regulatory Principles for Online Behavioral Advertising developed by the Digital Advertising Alliance (a coalition of marketing, online advertising, and consumer advocacy organisations). Some of these companies deliver advertising and content based on your activity across websites, devices, and over time. These companies may process your information for their own purposes of operating their advertising networks in accordance with their own privacy policies.

Opting Out: You can manage your cookie preferences, including whether or not to accept them and how to remove them, through your browser settings. Please bear in mind that disabling cookies may complicate or even prevent you from using the Services. Please note that opting out of cookies may require that you first accept cookies from a provider, because your opt-out preference may be stored in the form of a cookie. Likewise, when you get a new computer, install a new browser, erase or otherwise alter your browser's cookie file (including upgrading certain browsers), you may also clear the opt-out cookies installed once you opt out, so an additional opt-out will be necessary to prevent additional tracking.

Your Rights and Data Deletion

You may ask us at any time to:

• tell you what personal information we hold about you, and give you a copy of it;
• correct information that is inaccurate or out of date; or
• delete your personal information, including your WhatsApp conversation history and phone number.

How to request deletion: Email [email protected] with the subject line "Data deletion request". Please include the phone number you use on WhatsApp (with country code) and, if relevant, the name and email address you gave us, so we can find your records. We may need to confirm your identity before we act on the request.

We will confirm that we have received your request and will delete the personal information we hold about you within 30 days, except for information we are legally required to keep (for example, for tax or accounting purposes). If we cannot delete something, we will tell you why.

Deleting a chat on your own phone does not delete it from our records, and we have no control over copies held by Meta. To remove information held by WhatsApp, please use WhatsApp's own tools and the WhatsApp Privacy Policy.

If you are not satisfied with how we handle your information, you can contact us using the details below. You may also contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes to This Privacy Policy

Whizrock has the discretion to update this Privacy Policy at any time. When we do, we will revise the updated date at the top of this page. We encourage you to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications.

Your Acceptance of These Terms

By using this Site, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use our Site. Your continued use of the Site following the posting of changes to this Privacy Policy will be deemed your acceptance of those changes.

Contacting Us

If you have any questions about this Privacy Policy, the practices of this Site, or your dealings with this Site, please contact us at:

Whizrock (A Unit of Hieros Consulting Pty Ltd)
Unit 302, 4 Footbridge Boulevard
Wentworth Point, NSW 2127, Australia
Email: [email protected]

This document was last updated on 25 October 2026.