Privacy Policy

1. Our commitment under the Australian Privacy Principles

As an Australian organisation, we handle personal information in accordance with the thirteen Australian Privacy Principles set out in Schedule 1 of the Privacy Act 1988 (Cth). These principles govern the open and transparent management of personal information (APP 1), anonymity and pseudonymity (APP 2), the collection of solicited personal information (APP 3), dealing with unsolicited personal information (APP 4), notification of the collection of personal information (APP 5), use and disclosure of personal information (APP 6), direct marketing (APP 7), cross-border disclosure (APP 8), adoption and use of government related identifiers (APP 9), the quality of personal information (APP 10), the security of personal information (APP 11), access to personal information (APP 12) and the correction of personal information (APP 13).

2. The kinds of personal information we collect

The personal information we collect and hold depends on the nature of our engagement with you. It may include:

• Your name, job title, business name and position within an organisation.
• Contact details such as your email address, postal address and business location.
• Information you provide when you request a quote, enquire about our services or engage us to provide business and consulting services.
• Correspondence between you and our team, including notes of meetings and telephone or email exchanges.
• Billing and payment information necessary to issue invoices and administer accounts.
• Information contained in documents you provide to us for the purpose of performing our services.

We do not ordinarily collect sensitive information (such as health information or information about racial or ethnic origin, political opinions or religious beliefs). If it is ever necessary to collect sensitive information, we will only do so with your consent or where the law otherwise permits or requires us to do so.

3. How we collect personal information

We collect personal information in a number of ways, including:

• Directly from you, when you complete a form on our website, send us an email or otherwise contact us.
• During consultations, meetings and the ordinary course of providing our professional services.
• From third parties you authorise to provide information to us, such as your accountants, advisers or other representatives.
• From publicly available sources where it is unreasonable or impracticable to obtain the information directly from you.

Where reasonable and practicable, we collect personal information directly from you. If we receive personal information about you from a third party, we will handle it in accordance with the Australian Privacy Principles.

4. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information so that we can:

• Provide professional business and consulting services to our clients.
• Respond to enquiries and prepare quotes for prospective clients.
• Manage our client relationships, including billing, invoicing and record keeping.
• Meet our legal, regulatory and taxation obligations in Australia.
• Improve our services, website and the way we communicate with clients.

We will not use or disclose personal information for a purpose other than the primary purpose of collection unless you have consented to the secondary use or disclosure, or an exception under the Australian Privacy Principles applies.

5. Direct marketing

We may use personal information to let you know about our services where you would reasonably expect us to do so and it is permitted by law. Every marketing communication we send will include a simple way for you to request that we no longer send you marketing material. You may also opt out at any time by contacting us at ceo@acn703430700.online.

6. Disclosure of personal information

We do not sell or rent personal information. We may disclose personal information to:

• Professional advisers and service providers who assist us to operate our business, such as IT support, secure data storage and cloud service providers, subject to confidentiality obligations.
• Our own professional advisers, including auditors and legal advisers.
• Government agencies, regulators or law enforcement bodies where we are required or authorised by law to do so.

Where we engage third-party service providers, we take reasonable steps to ensure they handle personal information in a manner consistent with this policy and the Australian Privacy Principles.

7. Overseas disclosure

Some of our service providers, including cloud hosting and software providers, may store or process personal information outside Australia. Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles, or we obtain your informed consent to the disclosure where that is the appropriate course under APP 8.

8. Security of personal information

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include password protection of our systems, restricted access to client records, secure storage of physical documents and the use of reputable information technology providers.

We will take reasonable steps to destroy or permanently de-identify personal information once it is no longer needed for any purpose for which it may be lawfully used or disclosed, subject to any record retention obligations that apply to our business.

9. Cookies and website analytics

Our website may use cookies and similar technologies to improve your browsing experience and to understand how visitors use our site. Cookies are small files stored on your device. You can configure your browser to refuse cookies or to alert you when cookies are being used; however, some parts of the website may not function fully without them. Analytics data collected through our website is used in a way that does not attempt to identify individual visitors.

10. Access to and correction of your personal information

Under APP 12 and APP 13, you have a right to request access to the personal information we hold about you and to request the correction of information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond to access and correction requests within a reasonable period. In some circumstances, and as permitted by the Australian Privacy Principles, we may decline a request, in which case we will provide you with a written explanation and information about how you may complain.

11. Notifiable Data Breaches scheme

We maintain practices aimed at identifying and responding to data breaches. Where a data breach is likely to result in serious harm to any individual whose personal information is involved, we will assess the breach promptly and, where required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth), notify the Office of the Australian Information Commissioner and affected individuals as soon as practicable.

12. Anonymity and pseudonymity

Where it is lawful and practicable, you have the option of dealing with us anonymously or using a pseudonym, for example when making a general enquiry about our services. However, we generally need identification information to provide professional services, prepare quotes and comply with our legal obligations.

13. Making a privacy complaint

If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, please contact us using the details below. We will acknowledge your complaint, investigate it fairly and promptly, and respond to you in writing. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be published on this page. This policy was last updated in January 2025.