Scope and acceptance of this Policy
This Privacy Policy describes how the Company collects, uses, discloses, and
protects personal information in connection with this website. It applies to
information provided through contact methods displayed on the site and to
information generated when users browse pages about institutional investment
governance. It operates alongside the Cookie Policy, which provides more detail on
technologies used to understand site usage and maintain security. By using the site,
users acknowledge that their information may be handled in accordance with this
Privacy Policy.
Types of information collected
The Company may collect personal information such as names, roles, organisation
names, and contact details when users initiate contact. Additional information may
include preferences about governance topics or details shared in enquiries.
Technical data, such as IP address, browser type, device information, and pages
visited, may be collected automatically through logs and analytics tools to maintain
security, understand aggregate usage, and improve content structure and performance.
How the Company uses information
Personal information is used to respond to enquiries, manage potential or existing
relationships, and provide information relevant to institutional investment
governance. Technical data supports security monitoring, troubleshooting, and
analysis of how the site is accessed. The Company may use contact details to send
relevant updates or insights where this is consistent with applicable law and user
expectations, and users may request that such communications cease at any time.
Disclosure to third parties
The Company may disclose personal information to service providers who assist with
hosting, security, analytics, or communication tools, subject to appropriate
confidentiality arrangements. Information may also be shared with professional
advisers where required for governance, risk, or compliance purposes. Personal
information is otherwise not sold or traded. Disclosure may occur where required or
authorised by law, including to regulators or law enforcement agencies, in
accordance with applicable obligations.
Storage, security, and international transfers
Personal information may be stored on servers located in Australia or in other
jurisdictions, depending on the infrastructure used by service providers. The
Company selects providers that maintain reasonable security standards, but cannot
guarantee absolute security. Measures such as access controls, encryption in transit
where appropriate, and regular reviews of provider practices are used to reduce the
likelihood of unauthorised access, alteration, or loss.
Retention of personal information
The Company retains personal information for as long as needed to respond to
enquiries, manage relationships, and meet legal or regulatory requirements.
Retention periods may vary depending on the nature of the information and the
context in which it was collected. When information is no longer required,
reasonable steps are taken to destroy or de identify it, subject to any legal
obligations that require continued storage.
Access and correction rights
Subject to applicable law, individuals may request access to personal information
held about them and may ask for corrections where information is inaccurate,
incomplete, or out of date. Requests should be made using the contact details
provided on the site. The Company may need to verify identity before responding and
may be unable to provide access to certain information where legal restrictions
apply, in which case reasons will be provided where practicable.
Information relating to minors
The site is not directed at individuals under the age of eighteen, and the Company
does not knowingly collect personal information from minors. Where it becomes aware
that personal information relating to a minor has been collected inadvertently,
reasonable steps will be taken to delete or de identify that information, subject to
legal requirements. Users responsible for organisational accounts should ensure
appropriate internal approvals before sharing others’ details.
Questions, concerns, and complaints
Any concerns or complaints about how personal information is handled can be raised
with the Company using the contact details provided. The Company will acknowledge
receipt, investigate the issue, and respond within a reasonable period. If the user
is not satisfied with the response, they may have the right to contact the relevant
privacy regulator in Australia or another applicable jurisdiction for further
guidance or to lodge a complaint.
Changes to this Privacy Policy
The Company may update this Privacy Policy to reflect changes in law, technology, or
internal practices. The date at the top of the page indicates the most recent
revision. Continued use of the website after an update constitutes acknowledgement
of the revised Policy. Users are encouraged to review this page periodically to stay
informed about current privacy practices.