Legal
Privacy Policy
Effective 15 October 2026
Who we are
This policy explains how Pilot Light (“we”, “us”) collects, uses, shares and protects your personal information on pilotlight.au and when you apply for or take part in a Founder Working Session.
Pilot Light Pty Ltd ABN 82 674 835 904 is a product strategy consultancy based in Queensland, Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
Information you give us. When you apply for a Founder Working Session, contact us or email us, we collect what you provide. This typically includes your name, email address, phone number, company or venture name, your role, and details about your product idea, such as stage, goals, timing and budget.
Information collected automatically. When you visit the website we and our service providers collect your IP address (which gives an approximate location), device and browser type, the pages you view, the date and time, and the site or advertisement that referred you. If you arrive from a Google ad, we also record the Google click identifier and the page you landed on, so we can tell which ads lead to applications.
Please don’t include sensitive information, such as health or financial account details, in your application. We don’t ask for it.
How we use your information
We use your information to:
respond to your enquiry or application and decide whether a Founder Working Session is a good fit
schedule and run sessions, and provide our services if we work together
operate, secure and improve the website
measure and improve our marketing, including which pages and ads lead to applications
send you information about our services, but only where you have asked for it or consented, and you can opt out at any time
meet legal, tax and accounting obligations
We don’t sell your personal information.
Cookies, analytics and advertising
Our website uses cookies and similar technologies, including pixels and tags. We use:
Google Tag Manager to manage the tags on our site
Google Analytics 4 to understand how visitors use the site, such as which pages they view and where they come from
Google Ads to measure which of our ads lead to applications
Meta (Facebook and Instagram) pixel to measure the same for Meta ads and to show our ads to people who have visited the site
These tools set cookies or identifiers in your browser and send information such as your IP address, device details and the pages you view to Google and Meta. When you submit an application, the website tells Google and Meta that a submission happened. It doesn’t send the content of your application.
Your choices. You can block or delete cookies in your browser settings, though parts of the site may not work as well. You can also opt out directly:
Google Analytics: browser opt-out add-on
Google ad personalisation: Google Ads Settings
Meta ad personalisation: Meta ad preferences
Who we share information with
We share personal information only with service providers who help us run the website and our business, and only as needed for that purpose. These include:
website hosting and form tools
analytics and advertising providers
email, scheduling, CRM and project tools
professional advisers such as accountants and lawyers
We may also disclose information where the law requires or permits it.
Overseas disclosure. Many of these providers store or process information outside Australia, including in the United States. We take reasonable steps to choose providers with sound security practices, but their handling of your information is also governed by their own privacy policies.
Storage, security and retention
We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including access controls and strong authentication on the systems we use. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.
We keep application details for as long as we need them to assess your application and provide our services. If an application doesn’t lead to an engagement, we delete or de-identify it after 24 months. We keep client and financial records for as long as the law requires, typically seven years.
If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.
Your rights and complaints
You can ask to see the personal information we hold about you, or ask us to correct it, by emailing us at the address below. We’ll respond within 30 days. We may need to confirm your identity first, and in limited cases the law lets us refuse access, in which case we’ll explain why.
You can opt out of marketing emails at any time using the unsubscribe link or by emailing us.
If you have a concern about how we’ve handled your personal information, contact us first and we’ll investigate and reply promptly. If you aren’t satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes and contact
We may update this policy from time to time. The current version is always at pilotlight.au/privacy. This version is effective from 15th of October 2026.