Privacy Policy

1. Information We Collect

The personal information we collect depends on how you deal with us. It may include your name, email address, phone number, company name, job title, and anything you choose to tell us in a message or on a call.

We collect it when you:

• Submit the contact form on our website
• Contact us by email or phone
• Request a scope call or consultation
• Engage us to deliver consulting services

We may also collect operational, financial, and performance data that you provide during a consulting engagement. This data is used solely to deliver the agreed services.

We collect personal information directly from you wherever reasonably practicable. We may also collect business contact details from publicly available sources, such as company websites and LinkedIn, from business contact databases, or from a colleague who refers you.

We do not ask for sensitive information, such as health information. Please do not send it to us.

2. How We Use Your Information

We use your information to:

• Respond to enquiries and deliver agreed services
• Send proposals, invoices, and project-related communications
• Fulfil legal and regulatory obligations, including tax and accounting requirements
• Improve our services and internal processes
• Develop anonymised case studies or testimonials, only with your explicit prior written permission

We do not sell your personal information to third parties.

3. Cookies, Analytics, and Website Tracking

Our website uses cookies and similar technologies. These may include:

• Google Analytics, which shows us how visitors use the site
• Microsoft Clarity, which records how visitors interact with our pages, such as clicks, scrolling, and page movement, so we can find where pages are hard to use
• Google reCAPTCHA, which protects our contact form from spam

You can block or delete cookies through your browser settings. Blocking cookies does not stop you using the site. We do not use cookies to collect sensitive information.

4. Data Storage and Security

Your personal information is stored using reputable cloud-based platforms, which may include Squarespace (our website and contact form), Google Workspace (email, calendar, and documents), Xero (invoicing), and similar business tools.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Where our service providers store or process data, we take reasonable steps to ensure they handle your information in accordance with the APPs.

5. Data Retention

We retain personal information for as long as necessary to deliver our services and meet our legal obligations, including tax record-keeping requirements, typically 7 years.

When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it securely.

6. Third-Party Service Providers and AI Tools

We may share your personal information with third-party service providers to the extent necessary to operate our business and deliver our services.

These providers may include website hosting, accounting and invoicing software, scheduling and calendar tools, cloud storage, email platforms, and business contact databases.

We use artificial intelligence (AI) tools to help us draft correspondence, prepare for calls, and keep our enquiry records up to date. Information you give us, such as your name, company, and the content of your enquiry, may be processed by these tools on our behalf. We do not use AI tools to make decisions that have a legal or similarly significant effect on you.

We do not authorise these providers to use your information for their own purposes beyond what is necessary to provide their services to us.

7. Disclosure Outside Australia

Some of our service providers store or process information outside Australia. Your personal information is therefore likely to be disclosed to recipients in the United States, and it may be processed in other countries where those providers or their subcontractors operate.

Where this happens, we take reasonable steps to ensure the recipient handles your information consistently with the APPs.

8. Marketing Communications

Every marketing email we send identifies us and includes a way to unsubscribe. You may unsubscribe at any time by:

• Replying with “unsubscribe” to any email
• Contacting us at admin@ridgwayresilience.com

We will action all unsubscribe requests within 5 business days. Transactional communications, such as invoices and project updates, are not affected by unsubscribing.

9. Accessing and Correcting Your Information

You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate, incomplete, or out of date.

To make a request, contact us at admin@ridgwayresilience.com. We will respond within a reasonable timeframe, generally within 30 days.

We may decline access in limited circumstances permitted by the APPs. If we do, we will explain why.

10. Data Breaches

If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and, where required, the Office of the Australian Information Commissioner (OAIC).

11. Complaints

If you believe we have handled your personal information in a way that does not comply with the Australian Privacy Principles, please contact us at admin@ridgwayresilience.com.

We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on our website with the effective date shown above.

We encourage you to review this policy periodically.