PRIVACY POLICY

1. Introduction

AI Governance Partners (referred to in this policy as "we", "us", or "our") is committed to protecting the privacy of individuals whose personal information we collect and handle. This Privacy Policy explains how we manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024.

​

This policy applies to all personal information collected through our website, during client engagements, and in the course of operating our consulting business.

​

By engaging our services or using our website, you agree to the collection and use of your personal information as described in this policy.

 

2. Our Privacy Obligations

We are subject to the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), which regulate how we collect, use, disclose, store, and provide access to personal information.

​

Significant reforms were introduced via the Privacy and Other Legislation Amendment Act 2024, which came into effect on 10 December 2024. Key obligations that apply to us include:

• Collecting personal information only by lawful and fair means, and only information that is reasonably necessary for our functions;

• Being transparent about how and why we collect personal information;

• Maintaining reasonable technical and organisational security measures to protect personal information;

• Providing individuals with access to, and the ability to correct, their personal information;

• Not using or disclosing personal information for purposes other than the primary purpose of collection without consent​

 

Since June 2025, individuals also have a statutory right to take legal action for serious invasions of privacy under Australian law. We take this obligation seriously.

​

3. Personal Information We Collect

We collect the following categories of personal information:

​

3.1 Identity and Contact Information

• Full name

• Email address

• Phone number

• Postal or business address

• Job title and organisation

 

3.2 Financial and Payment Information

When you engage our services and payment is required, we may collect:

• Billing address

• Bank account or payment details (processed securely; we do not store full card numbers)

• Invoice and transaction records

 

3.3 Website Usage Data

When you visit our website, we may automatically collect:

• IP address and general location data

• Browser type, version, and device information

• Pages visited, time spent, and referring URLs

• Cookie identifiers and similar tracking data (see Section 8 on Cookies)

 

3.4 Engagement and Professional Information

In the course of providing consulting services, we may collect information you voluntarily provide, such as:

• Business objectives, challenges, and strategic information

• Feedback and correspondence relating to our services

 

4. How We Collect Personal Information

We collect personal information:

• Directly from you — when you submit an enquiry form, sign a service agreement, email us, or communicate with us by phone;

• Through our website — via contact forms, newsletter sign-ups, or cookies/analytics tools;

• In the course of providing services — during meetings, workshops, calls, or written correspondence;

• From publicly available sources — such as company websites or professional directories, where relevant to our engagement.

Where it is reasonably practicable, we collect personal information directly from the individual concerned.

 

5. Purposes for Which We Use Personal Information

We collect, hold, use, and disclose personal information for the following purposes:

• To deliver consulting services and fulfil our contractual obligations to clients;

• To communicate with you about your enquiry, project, or our services;

• To issue invoices, process payments, and maintain financial records;

• To improve our website, services, and client experience;

• To send you relevant updates or communications (where you have consented, or where permitted by law);

• To comply with legal, regulatory, and professional obligations;

• To protect the security and integrity of our systems and business.

We will not use or disclose your personal information for a secondary purpose without your consent, unless an exception under the Privacy Act applies (such as a legal requirement or to prevent a serious threat to health or safety).

 

6. Disclosure of Personal Information

AI Governance Partners does not sell, rent, or trade your personal information to third parties. We keep personal information internal to our business. In limited circumstances, we may be required to disclose information:

• To comply with a court order, subpoena, or legal obligation;

• To government agencies or regulators where required by law;

• To professional advisers (such as our accountants or legal counsel) who are bound by confidentiality obligations;

• With your explicit consent.

We do not currently disclose personal information to overseas recipients. If this changes, we will update this policy and take steps to ensure the overseas recipient complies with the APPs or provides equivalent protection.

 

7. Storage and Security of Personal Information

We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:

• Encrypted storage and transmission of data (including HTTPS on our website);

• Access controls limiting who within our business can access personal information;

• Secure email and document management practices;

• Regular review of our security arrangements.

No method of transmission over the internet is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When no longer required, personal information is securely deleted or de-identified.

 

8. Cookies and Website Analytics

Our website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how our website is used.

​

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences and gather usage data.

​

8.2 Types of Cookies We Use

• Essential cookies: Required for the website to function correctly (e.g. session management);

• Analytics cookies: Used to collect anonymous data on how visitors use our website (e.g. via Google Analytics or similar tools);

• Preference cookies: Used to remember your settings or preferences.

​

8.3 Managing Cookies

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. Please refer to your browser's help documentation for instructions on managing cookies. Where analytics tools collect data, they do so in a de-identified or aggregated form where possible.

 

9. Access to and Correction of Personal Information

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you;

• Request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make an access or correction request, please contact us using the details in Section 11. We will respond within a reasonable time-frame (generally within 30 days). We may need to verify your identity before providing access.

In some circumstances, we may refuse access or correction where permitted by the Privacy Act. If we refuse, we will provide written reasons and inform you of how you may complain about the decision.

 

10. Privacy Complaints

If you believe we have handled your personal information in a way that does not comply with the Privacy Act or this policy, we encourage you to contact us first so we can attempt to resolve your concern.

To make a complaint, please contact our Privacy Contact (see Section 11). We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

​

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au

• Phone: 1300 363 992

• GPO Box 5218, Sydney NSW 2001

 

You may also have the right to take legal action for serious invasions of privacy under the statutory tort that commenced in June 2025.

 

11. Contact Us

For any privacy-related enquiries, requests, or complaints, please contact:

Bruce Mullan

AI Governance Partners

Email: info@aigovernancepartners.com.au

Website: www.aigovernancepartners.com.au

​

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. The current version of this policy will always be available on our website. Material changes will be notified via our website or by email to active clients. We encourage you to review this policy periodically.