Effective Date: 22 July 2026
Last Updated: 22 July 2026

1. Introduction

Air & Power (“we,” “us,” “our,” or “Company”) is a service business based in 7 Fisher Street, Belmont, WA 6104. This Privacy Policy explains how we collect, use, store, share, and protect personal information across our website, applications, services, and platforms—including our AI-powered chat assistant.

We are committed to data minimisation: we only collect the personal information that is reasonably necessary to provide our services, respond to enquiries, and operate our AI chat assistant, and we do not collect additional information beyond what is described in this Policy.

This policy applies to:

Visitors to https://airandpower.com.au and our website
Users of our AI chat assistant and other digital platforms
Air & Power clients who engage our services
Prospects who contact us for information or consultations
Anyone who provides information through forms, apps, or communications

By accessing our website, app, or services, you agree to this Privacy Policy. If you do not agree, please do not use our services.

2. Data Categories Collected

2.1 Information You Provide Directly

Contact Forms & Inquiries

Name
Email address
Phone number
Business name and industry
Message content or inquiry description
Any other information you choose to provide

Consultation & Appointment Booking

Name, email, phone number
Preferred date and time
Business type and current challenges
Budget and timeline information
Any relevant business context

Service Engagement Data

Company information and structure
Website details and analytics
Business goals and objectives
Competitor information (if provided)
Financial information (for proposal development)
Performance metrics and historical data

Communication & Correspondence

Email messages and attachments
Phone call summaries and notes
Chat messages and conversation history
Meeting notes and feedback
Support requests and technical issues

AI Chat Assistant Interactions

Questions asked within the app
Conversation history and responses
Inquiry details submitted through app forms
Appointment booking information
Free-text messages and content submitted

2.2 Information Automatically Collected

Website & App Technical Data

IP address and geolocation data
Device type, operating system, browser version
Pages visited, time spent on each page
Links clicked and navigation patterns
Referring source and exit pages
Session information and cookies

Usage Analytics & Behavioral Data

How you interact with our website and app
Which services or content you view
Search queries and keywords used
Form submission patterns
Download and file access activity
Video or content engagement metrics

AI Chat Assistant & Processing Data

Questions submitted to the AI chatbot
Queries and prompts entered
Response selections and feedback
Conversation flow and interaction patterns
Time spent in conversation
Features used within the app

Communication Metadata

Email open rates and click-through rates
Call duration and frequency
Message delivery and read status
Device information from communications

3. Conversational Content & AI/LLM Data

3.1 AI Chat Assistant Data Collection

When you interact with our AI-powered chat assistant, we collect the questions and prompts you submit, the responses generated by the AI, conversation history and context, the time and date of interactions, and your contact information if you choose to provide it.

3.2 How Conversational Data Is Used

Your conversation data may be used to respond to your specific enquiries, to refine the assistant’s accuracy and relevance, to understand common questions across users, to tailor guidance based on the details you share, and to generate aggregate insights about enquiry trends.

3.3 Storage & Third-Party Processing

Our AI chat assistant is provided by HighLevel (HighLevel LLC / LeadConnector LLC), which processes and stores data in the United States, with support access from India. HighLevel uses its own sub-processors to deliver parts of that service, including artificial intelligence providers such as OpenAI. HighLevel publishes its current sub-processor list at gohighlevel.com/sub-processors, and that list may change from time to time.

Cloudflare Turnstile sits in front of the AI chat assistant to filter spam and automated traffic, and therefore also sees visitor traffic to it.

We retain conversations with the AI chat assistant for 12 months, to support enquiry follow-up, service quality and dispute resolution.

3.4 Who Can See Your Conversations

Conversations are visible to: Air & Power, through our own dashboard login; Studio 22, through their agency access as our chatbot developer; and Hera Digital, as the party that operates and maintains the build.

4. Usage Purposes

We collect and use your information for the following purposes:

4.1 Service Delivery

Respond to inquiries and provide information
Deliver consulting, strategy, and services
Schedule and manage appointments and meetings
Generate proposals, reports, and strategy documents
Provide ongoing support and account management

4.2 Business Operations

Maintain accurate client and prospect records
Process payments and manage billing
Manage contracts and service agreements
Track project progress and deliverables
Document communications and decisions

4.3 Marketing & Business Development

Identify potential clients based on inquiry patterns
Develop case studies and success stories (with permission)
Understand market challenges and opportunities
Refine our service offerings and positioning
Create targeted marketing campaigns
Build prospect databases and pipelines

4.4 Analytics & Improvement

Analyze website usage and user behavior
Track which content and services generate interest
Measure campaign effectiveness
Identify technical issues or usability problems
Generate aggregate insights about market trends
Improve app functionality and accuracy

4.5 Communication

Send appointment reminders and confirmations
Provide service updates and important notices
Share educational content and resources
Follow up on inquiries or proposals
Request feedback on services
Send promotional materials (with consent)

4.6 Compliance & Legal

Meet legal obligations (Australian Privacy Act, GDPR, etc.)
Enforce terms of service and contracts
Prevent fraud, abuse, or unauthorized access
Protect against security threats
Respond to lawful requests from authorities
Maintain audit trails and compliance records

5. Data Recipients & Third-Party Sharing

5.1 Data Processors & Service Providers

We share your information with trusted partners who process data on our behalf:

Platform & Hosting

WordPress hosting and Bunny CDN (cloud hosting, content delivery and infrastructure)
Website hosting and security providers

AI & Automation

HighLevel (HighLevel LLC / LeadConnector LLC): AI chat assistant, processed in the United States with support access from India

Communication & Marketing

Analytics & Tracking

Google Analytics and Google Tag Manager (analytics platforms)
Meta/Facebook Pixel (advertising and conversion tracking)
Tracking and attribution tools

Business Operations

Accounting and payroll services
Legal and compliance advisors
Insurance providers

5.2 How Data is Shared Internally

Sales and business development teams receive inquiry information
Service delivery teams receive client data
Analytics and operations teams receive aggregated usage data
Management receives performance dashboards and insights

5.3 Data We Do NOT Share

We do not sell personal information to third parties
We do not rent or lease contact lists
We do not share data with unaffiliated marketing companies
We do not disclose data to data brokers

5.4 Sharing with Legal Authority

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to:

Comply with legal obligations
Enforce our terms of service
Protect against fraud or security threats
Protect the rights, safety, or property of Air & Power, our users, or the public

6. Data Retention

6.1 Retention Periods by Data Category

Website Visitor Data

Analytics data: 90 days (aggregated)
IP logs: 30 days
Cookie data: Until browser cleared or cookie expires

Contact Form Submissions

Retained for 12 months from submission
Deleted after retention period unless you become a client
May be retained longer for legal compliance

Email Communications

Retained for 24 months for reference
Older emails archived securely
Business-critical emails retained per compliance requirements

AI Chat Assistant Conversations

12 months, for enquiry follow-up, service quality and dispute resolution

Appointment & Booking Data

Retained for 24 months
May be retained longer if you become a client
Deleted upon written request (subject to legal hold)

Client Data & Service Engagement

Retained for duration of service relationship
Retained for 7 years after engagement ends (per tax/legal requirements)
Longer retention may apply for ongoing legal or contractual obligations

Marketing & Prospect Data

Retained in CRM system until opt-out or 2 years of inactivity
Deleted upon request to unsubscribe

Analytics & Technical Data

Aggregated data: Retained indefinitely (anonymized)
Individual tracking data: 90 days
Deleted when no longer needed for operational purposes

6.2 Data Deletion

Upon request, we will delete your personal information within 30 days, except:

Data required for legal compliance or tax obligations
Data necessary to enforce contracts
Anonymized or aggregated data
Data already provided to third parties (where deletion requires their action)

To request deletion, contact: enquiries@airandpower.com.au

7. User Rights & Controls

7.1 Your Rights

Right to Access
You may request a copy of your personal information. We will provide it within 30 days in a readable format.

Right to Correct
You may request correction of inaccurate or incomplete information. We will update within 30 days.

Right to Delete
You may request deletion of your personal information. We will delete within 30 days unless legal obligations require retention.

Right to Data Portability
You may request your data in a portable, machine-readable format (CSV, JSON, etc.). We will provide within 30 days.

Right to Opt-Out

Opt out of marketing communications by clicking “unsubscribe” in emails
Opt out of analytics and tracking (some functionality may be limited)

Right to Restrict Processing
You may restrict how we use your data in certain circumstances. We will honor reasonable restrictions while maintaining core service functionality.

Right to Object
You may object to processing of your data, particularly for marketing or analytics purposes.

7.2 How to Exercise Your Rights

Email: enquiries@airandpower.com.au
Phone: (08) 9424 2800
Mailing Address: 7 Fisher Street, Belmont, WA 6104
Website: https://airandpower.com.au/contact-us/

Include:

Your full name
Email address or account ID
Specific right you’re exercising (access, correct, delete, etc.)
Description of your request

We will respond within 30 days. Complex requests may take an additional 30 days.

7.3 Account Controls

If you have a user account, you may:

Access and view your stored information
Update profile and contact information
Download or export your data
Adjust privacy and preference settings
Delete your account (see Section 6.2)
Manage communication preferences

8. Security & Data Protection

8.1 Security Measures

Air & Power implements industry-standard security practices:

Technical Security

SSL/TLS encryption for data in transit
Encrypted storage for sensitive data at rest
Firewalls and intrusion detection systems
Regular security audits and penetration testing
Secure API endpoints and authentication

Administrative Security

Access controls limiting data to authorized personnel
Employee confidentiality agreements
Privacy and data handling training for all staff
Role-based access control
Audit logs and monitoring

Physical Security

Secure data centers with restricted access
Backup systems and disaster recovery protocols
Secure handling of physical documents

8.2 Limitations

While we take security seriously, no system is 100% secure. We cannot guarantee absolute protection. Use the app and services at your own risk.

8.3 Data Breach Notification

If we discover a breach affecting your personal information, we will:

Notify you without undue delay (within 30 days)
Provide details of the breach and affected data
Suggest steps to protect yourself
Notify relevant authorities where required by law

9. Children’s Privacy

The App and services are not intended for users under 13 years old. We do not knowingly collect information from children under 13. If we become aware that a child under 13 has submitted information, we will delete it as soon as practicable and, where relevant, request age verification. Users aged 13–17 should review this Policy with a parent or guardian before using the App.

10. International Data Transfers

Air & Power is based in Western Australia, Australia. Your information may be transferred to, stored in, and processed in Western Australia, Australia or countries where our service providers operate. In particular, our AI chat assistant is provided by HighLevel, which processes and stores data in the United States, with support access from India.

For EU/EEA Users:
When information is transferred outside the EU/EEA, we implement Standard Contractual Clauses (SCCs) or other legal mechanisms to ensure adequate GDPR protection.

By using our services, you consent to data transfers to countries that may not have the same data protection level as your home country.

11. Cookies & Tracking Technologies

11.1 Cookie Types

Essential Cookies (Required)

Session management
Security and fraud prevention
Basic functionality

Performance Cookies (Optional)

Analytics and usage tracking (e.g. Google Analytics / Google Tag Manager)
Performance monitoring
User experience improvement

Marketing Cookies (Optional)

Personalized content and ads
Retargeting and remarketing (e.g. Meta/Facebook Pixel)
Social media integration

11.2 Cookie Management

You can control cookies through your browser settings. Disabling cookies may limit functionality.

11.3 Third-Party Tracking

Third parties may set their own cookies and tracking pixels. Review their privacy policies for details.

11.4 Do Not Track

We honor “Do Not Track” signals where technically feasible, though not all tracking can be disabled.

12. Compliance & Legal

12.1 Australian Privacy Act

Air & Power complies with the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), including:

Lawful and fair collection
Limited use and disclosure
Data quality and security
User access and correction rights
Openness and complaint handling

12.2 GDPR (EU/EEA)

For users in the European Union and European Economic Area, we comply with GDPR:

Legal bases for processing (consent, contract, legitimate interests)
Data subject rights (access, correction, deletion, portability, etc.)
Data protection by design
Data breach notification (72 hours)
Data Processing Agreements with processors

12.3 CCPA/CPRA (California)

For California residents, we honor California Consumer Privacy Act rights:

Right to know what data we collect
Right to delete personal information
Right to correct inaccurate data
Right to opt-out of data sales/sharing (we don’t sell data)
Right to limit use of sensitive personal information

13. Third-Party Links & Services

Our website and app may contain links to third-party websites and services. We are not responsible for their privacy practices. Review their privacy policies independently.

14. Updates to This Policy

We may update this Privacy Policy to reflect legal changes, new features, or business practices. We will:

Post updates here with a new “Last Updated” date
Notify users of material changes via email or prominent notice
Request consent if required by law

Your continued use of our services constitutes acceptance of updated policies.

15. Complaints & Dispute Resolution

15.1 Contact Us First

If you have privacy concerns:

Air & Power Privacy Team

Email: enquiries@airandpower.com.au
Phone: (08) 9424 2800
Address: 7 Fisher Street, Belmont, WA 6104

We will investigate and respond within 30 days.

15.2 Regulatory Authorities

If dissatisfied with our response:

Australia (OAIC)

Office of the Australian Information Commissioner
Website: oaic.gov.au
Phone: 1300 363 992

EU/EEA (Data Protection Authority)

Contact your local DPA
European Data Protection Board: edpb.europa.eu

California (CCPA)

California Attorney General or California Privacy Protection Agency

16. AI Chat Assistant Data Processing

Our AI chat assistant is provided by HighLevel (HighLevel LLC / LeadConnector LLC), which uses its own sub-processors to deliver the service, including artificial intelligence providers such as OpenAI. See Section 3 above for how your conversation data is collected, used and retained. HighLevel publishes its current sub-processor list at gohighlevel.com/sub-processors.

16.2 Data Minimisation

We limit the personal information collected through the AI chat assistant to what is reasonably necessary to answer your query, process a booking or enquiry, or improve the assistant’s accuracy. We do not request sensitive personal information (such as health or financial account details) through the assistant.

17. Limitations & Disclaimers

This policy is for informational purposes. It is not a substitute for legal advice.

We Make No Warranties: This policy is provided “as-is” without warranties. Air & Power is not liable for unauthorized access, data loss, or breaches beyond our control.

Consult an Attorney: For specific legal guidance, consult a qualified privacy attorney regarding your situation.

18. Contact Information

Air & Power Privacy & Compliance

Email: enquiries@airandpower.com.au
Phone: (08) 9424 2800
Mailing Address: 7 Fisher Street, Belmont, WA 6104
Website: https://airandpower.com.au

19. Acknowledgment

By using Air & Power’s website, app, services, or platforms, you acknowledge that you have read, understood, and agree to this Privacy Policy and our collection and use of your information as described.

End of Privacy Policy

Air & Power Privacy Policy