Last updated: August 2026
Arrivau Pty Ltd (this site, arrivau.com) respects the privacy of every visitor. This page describes — in plain language — the information we collect, how we use it, where we store it, and what rights you have.
In one line
We do not require account registration, run advertising trackers, or sell visitor data. We collect information you choose to submit in an enquiry and use IP-free, first-party site analytics to understand how visitors find Arrivau, use its services, and move from AI-platform referrals to enquiries.
Information we may collect
Security and infrastructure processing
The site is delivered through Cloudflare Pages / Cloudflare CDN. Cloudflare may process IP addresses, request times, browser information and requested URLs under its own privacy policy for bot detection, DDoS protection, operational security and performance diagnostics. This infrastructure processing is separate from the Arrivau analytics database described below; our site analytics events do not store your IP address.
Anonymous site and GEO / AI source analytics
To understand whether content is discovered through AI platforms and whether visitors continue to use our services, the site creates a random anonymous visitor ID in your browser. It is automatically replaced after no more than 90 days. A separate temporary ID is used for each browser session. We collect:
- The current page pathname (for example,
/privacy/), not the full query string - The referring page hostname (for example,
chatgpt.com), not its full URL or path - Five specifically allowlisted source parameters:
utm_source,utm_medium,utm_campaign,utm_contentandutm_term; arbitrary query parameters outside this list are not stored - Current and first-source classifications: ChatGPT, Copilot, Gemini, Perplexity, Claude, other AI, search, another referral, or direct / hidden source
- Site and page language, coarse country or region code, device category and bot classification
- Optional experiment and content IDs when a page supplies them
- Event types such as page views, explicit call-to-action or partner-link clicks, form opens, chat or WeChat entry use, and successful enquiry submissions; the anonymous analytics event itself does not contain enquiry form fields or chat text
We use this information for aggregate source, page-performance and conversion-path analysis, not for advertising profiles. If the analytics script or service fails, site content remains available and a working enquiry form is not blocked by that analytics failure.
Voluntary contact information
When you reach out via ben@arrivau.com, our enquiry forms, or our official social media channels, we may collect:
- Your name or preferred name
- Contact details (email, phone, WeChat)
- Your enquiry context (e.g. loan amount, property type, visa status)
This information, together with the page-source details submitted with the form, is used only to:
- Respond to your enquiry
- Provide a free home-loan assessment or migration eligibility overview
- With your written consent, prepare loan applications or migration documents on your behalf
We will not:
- Sell your information to third parties
- Use it for unrelated commercial advertising
- Share it with any lender, institution, or government body without your explicit consent
Browser storage and cookies
The anonymous visitor ID and first-source details are stored in browser local storage; the browser-session ID is stored in session storage. Cloudflare may also set necessary security cookies for bot detection and DDoS protection. We do not use advertising cookies or run Google Ads, Facebook Pixel, or other advertising trackers.
Where your data is stored
Site code and static files are delivered through Cloudflare infrastructure. Anonymous site analytics events are stored in Cloudflare D1; this analytics database does not store IP addresses or arbitrary query parameters outside the allowlist above. Enquiry contact details, loan context and page-source details are stored in Cloudflare D1 / related services and sent to Arrivau corporate email so authorised staff can respond. These records are retained unless you request deletion.
Your rights
Under the Australian Privacy Act 1988 (Cth) and, where applicable, the GDPR, you have the right to:
- Access the information we hold about you (email request to
ben@arrivau.com) - Correct inaccurate personal details
- Delete your enquiry records and submitted documents — on written request we will remove them within 30 days (records already lodged with a lender or government body cannot be recalled once submitted)
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached your privacy
Minors
This site is written for readers aged 16 and older. We do not knowingly collect personal information from anyone under 18 without the involvement of a parent or legal guardian. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
Cross-border data transfer
Our content services are designed for an Australian and international audience. When you submit an enquiry:
- Your data is stored on Cloudflare infrastructure with primary nodes in Sydney, Australia (
ap-southeast) - If you are accessing the site from outside Australia, your data will be transferred to and processed in Australia
- Cloudflare's global CDN may cache public page content in edge nodes worldwide for performance; this cached content does not include personal data
By using this site, you acknowledge and consent to these transfers.
Updates to this policy
We may update this policy from time to time. Material changes will be announced on this page. The "Last updated" date at the top reflects the most recent revision.
Contact
- Email:
ben@arrivau.com - Company: Arrivau Pty Ltd (ABN 81 643 901 599)
- Address: 16/650 George St, Sydney NSW 2000, Australia
Arrivau Pty Ltd · ABN 81 643 901 599 · ASIC Credit Representative CRN 530978 · NSW Real Estate Licence 20253209 · MARN 1687552