Last updated 5 October 2026.

Purpose and scope

This Acceptable Use Policy (AUP) protects customers, users and systems. It applies to anyone using a website, hosting account, email, network, cloud service, remote-access tool, device, portal or other service supplied or managed by WaTo Consulting Pty Ltd. Customers must ensure their users and anyone they authorise also comply.

Lawful and respectful use

You must not use a service to break the law, facilitate unlawful activity, infringe another person's rights, mislead or defraud, threaten or harass, distribute unlawful or seriously harmful material, or breach a court order or regulatory requirement.

You must not upload, publish or distribute content unless you have the necessary rights and permissions. You remain responsible for your content and activity conducted through your accounts.

Security and system integrity

You must not:

• gain or attempt unauthorised access to an account, device, network, data or service;
• probe, scan or test a vulnerability without written authority and an agreed scope;
• introduce malware, ransomware, destructive code or a hidden access method;
• intercept traffic or credentials without lawful authority;
• disable, evade or interfere with authentication, logging, rate limits or security controls;
• run an attack, denial-of-service activity, botnet, cryptomining or abusive automation; or
• use a compromised service or allow it to remain compromised after notice.

Security research requires our prior written approval. Approval may set boundaries, timing, reporting and safe-harbour conditions.

Email, messaging and communications

You must not send spam, use harvested or purchased lists without valid consent, disguise a sender, operate an open relay, conduct phishing, or send messages that breach the Spam Act 2003 (Cth) or other applicable law. Commercial electronic messages must have the required consent, sender identification and functional unsubscribe process.

Fair use and shared resources

You must not use shared services in a way that unreasonably degrades security, performance or availability for others. This includes excessive storage, bandwidth, compute, automated requests or email volumes outside the purchased service. Where use is unusually high, we will normally contact the customer to agree remediation, an upgrade or a reasonable limit before restricting service, unless urgent action is needed.

Credentials and account responsibility

Keep credentials confidential, use multi-factor authentication where offered, maintain current authorised users, and promptly report suspected compromise. Do not share personal accounts where named-user access is required. Activity using an account may be treated as authorised until we are told or have reason to suspect otherwise.

Monitoring and privacy

We may use proportionate technical measures to operate, secure and troubleshoot services, including logs, malware scanning, traffic analysis and resource monitoring. We do not routinely inspect content except where reasonably necessary to provide a service, investigate a credible issue, comply with law or protect people and systems. Personal information is handled under our Privacy Policy.

Responding to a breach

We may investigate a suspected breach and ask for information or remediation. Our response will be proportionate to the risk and may include warning, rate limiting, content removal, isolation, temporary suspension or termination under the service agreement. Where practicable, we will give notice and a reasonable opportunity to remedy. We may act immediately where delay could create material harm, illegality, compromise, service disruption or third-party liability.

We will restore service when the risk is reasonably addressed, subject to the agreement. The customer is responsible for reasonable costs of responding to misuse caused by its breach, to the extent permitted by law and reasonably evidenced.

Reports and complaints

Report suspected abuse or compromise to info@wato.com.au or call (08) 7123 0805. Include relevant dates, addresses, logs or message headers where safe to do so. Do not send passwords or harmful files by ordinary email.

Changes

We may update this AUP to address new threats, laws or service types. Material changes affecting an existing contracted service will be notified as required by the agreement and will not remove rights that cannot lawfully be excluded.