About this policy
This Privacy Policy explains how Grounded Business Advisory Pty Ltd trading as Grounded Business Advisory (Grounded, we, us or our) collects, holds, uses and discloses personal information.
We aim to handle personal information consistently with the Australian Privacy Principles as a matter of good practice, and we comply with the Privacy Act 1988 (Cth) where it applies to us.
What is personal information?
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. It may include a person’s name, contact details, role, correspondence or other information that can reasonably identify them.
Sensitive information is a more protected category of personal information. It may include health information, racial or ethnic origin, political opinions, religious or philosophical beliefs, professional or trade-association membership, union membership, sexual orientation, criminal record, genetic information and some biometric information.
What we collect, and how
What information may Grounded collect?
Depending on how you interact with Grounded, we may collect:
Sensitive information
Grounded does not ordinarily need sensitive information. Please avoid providing it unless we have asked for it, or it is genuinely relevant to the concern being reviewed. Where we do collect sensitive information, we will seek consent where required and only handle it as permitted by law.
How we collect personal information
We usually collect personal information directly from you when you use our website, submit an enquiry or subscribe to communications; email, telephone or meet with us; book an appointment or take part in a conversation, workshop or service; complete a Business Snapshot, Evaluation Reflection, questionnaire or other form; provide documents, correspondence or supporting information; or enter into and administer an engagement with Grounded.
We may also collect information from a person you have authorised to deal with us; your business, team members, advisers or representatives where relevant and appropriate; a referral partner or professional contact; publicly available sources such as business websites, professional profiles and public registers; and service providers used to operate our website and business systems.
If you provide personal information about another person, please make sure you are authorised to do so and, where appropriate, make them aware of this Privacy Policy.
Why we collect and use it
We may collect, hold, use and disclose personal information to:
If you do not provide information we reasonably need, we may be unable to respond fully, assess fit or provide the requested service.
Evaluation and client information
Our work may involve business records and information about people who work in or advise a client’s business. We ask only for information reasonably relevant to the concerns raised and the agreed scope.
Grounded may scan information supplied and determine what requires detailed review according to its relevance to the Review discussion and material findings. Please avoid supplying unrelated personal information, and consider whether documents can be limited or redacted before they are shared.
The Grounded Evaluation Review is a business operating review. It is not a legal, financial, accounting, taxation, employment-compliance or formal audit opinion. Grounded does not independently verify every statement or document, and the Review does not replace specialist advice.
Unsolicited information
If we receive personal information we did not request, we will consider whether it is reasonably necessary for our functions or activities and whether we could lawfully have collected it. Where it is not required or appropriate to retain the information, we take reasonable steps to delete, destroy or de-identify it, subject to legal and technical requirements.
Data quality
Grounded takes reasonable steps to ensure personal information used or disclosed is accurate, up to date, complete and relevant. Please contact us if your information changes or you believe the information we hold is inaccurate.
Who we disclose it to
Who may we disclose information to?
Grounded may disclose personal information where reasonably necessary to:
We do not sell personal information.
Overseas storage and disclosure
Some technology and service providers we use may store or process information outside Australia.
The countries involved vary by provider and change as those providers change their own infrastructure, so they are not listed here. Grounded maintains a current list of its service providers and the regions in which they store or process information, available on request from privacy@groundedbusinessadvisory.com.au.
Where the Privacy Act applies, Grounded will take the reasonable steps required by law in relation to overseas disclosures. Overseas privacy protections may differ from those in Australia.
Security, retention and breaches
Security and retention
Grounded takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, multi-factor authentication, reputable service providers, secure transmission and storage practices, backups, device security and procedures for handling confidential information.
No method of electronic transmission or storage is completely secure, and Grounded cannot guarantee absolute security.
We retain personal information only for as long as reasonably required for the purpose for which it was collected and to meet legal, insurance, professional and business-record obligations. When information is no longer required, Grounded takes reasonable steps to delete, destroy or de-identify it, subject to backup, legal and technical limitations.
Data breaches
Grounded will investigate suspected data breaches and take reasonable steps to contain and address them. Where the Privacy Act and Notifiable Data Breaches scheme apply, Grounded will notify affected individuals and the Office of the Australian Information Commissioner when required.
Automated decision-making
Grounded does not currently use personal information in a solely automated process to make decisions that could reasonably be expected to significantly affect an individual’s rights or interests.
If this changes, Grounded will review and update this Privacy Policy before the relevant use begins and include any information required by law.
Access, correction and complaints
You may ask to access personal information Grounded holds about you or request that it be corrected. Contact us using the details below and describe the information concerned.
Grounded may need to verify your identity before responding. We will respond within a reasonable period and, if access or correction is refused, explain the reasons and available complaint mechanisms where required by law. We will not charge you for making a request. If the law permits a reasonable charge for providing access, we will explain the proposed charge before proceeding.
Ask us directly. We’ll answer plainly.
Please provide enough detail for us to understand and investigate the issue. Grounded will acknowledge the complaint and respond within a reasonable period.
If the Privacy Act applies to Grounded and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner. Visit oaic.gov.au for current contact and complaint information.
Changes and document control
Grounded may update this Privacy Policy when its practices, systems or legal obligations change. The current version is published on our website with its effective date. The website page is the live source of truth, and this PDF is refreshed whenever that page changes materially.