Purpose
Calibrate Consulting Pty Ltd (Calibrate Consulting) handles personal information in the course of providing consulting, advisory, and expert services.
This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information, in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
Who we are
Calibrate Consulting Pty Ltd (ABN 92 621 803 585) is the entity responsible for personal information collected through our business. References to “we”, “us” and “our” are references to Calibrate Consulting Pty Ltd.
What personal information we collect
The personal information we collect depends on the nature of the engagement. Typically, we collect:
- Names, contact details, and professional details of clients, client representatives, witnesses, claimants, experts, and other parties involved in an engagement;
- Employment, contracting, and project information relevant to a matter on which we are engaged;
- Correspondence, file notes, and records produced in the course of an engagement; and
- Information collected through our website, including enquiry forms and email communications.
We do not generally collect sensitive information (as defined in section 6 of the Privacy Act). Where collection of sensitive information is necessary, we obtain consent unless an exception under APP 3 applies.
How we collect personal information
We collect personal information directly from individuals where reasonable and practicable, including through engagement letters, project correspondence, interviews, witness statements, and website forms.
Where direct collection is not reasonable or practicable, we collect personal information from clients, client representatives, public records, court and tribunal documents, and other lawful sources.
Why we collect, hold, use, and disclose personal information
We collect, hold, use, and disclose personal information to:
- Provide consulting, advisory, expert, and investigation services to our clients;
- Prepare reports, submissions, statements, and other deliverables connected with an engagement;
- Manage the engagement, including invoicing, project administration, and quality assurance;
- Comply with legal, regulatory, and professional obligations; and
- Communicate with individuals about our services and respond to enquiries.
We will not use or disclose personal information for any other purpose unless an exception under APP 6 applies (including consent, related secondary purpose reasonably expected, enforcement-related activity, or use required or authorised by law).
Who we disclose personal information to
We may disclose personal information to:
- Our clients and their nominated representatives;
- Lawyers, barristers, experts, and consultants engaged in connection with a matter;
- Courts, tribunals, adjudicators, mediators, and other dispute resolution bodies;
- Government agencies and regulators, where required or authorised by law; and
- Service providers who support our business operations (for example, IT, cloud hosting, professional indemnity, and accounting providers).
Cross-border disclosure
We use cloud-based platforms (including Microsoft 365 and similar productivity and storage services) that may store or process personal information outside Australia. Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure the recipient does not breach the APPs, in accordance with APP 8.
Individuals can contact the Privacy Officer for current information about the countries in which their personal information may be held.
How we hold and protect personal information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure, in accordance with APP 11. Our information security measures include:
- Multi-factor authentication on all systems containing personal information;
- Role-based access controls so staff and contractors only access information they need to perform their role;
- Encryption of devices and communications used to handle personal information;
- Vendor due diligence before adopting new platforms; and
- A documented Information Security Policy and Data Breach Response Plan.
When we no longer need personal information for any purpose permitted under the Privacy Act, and we are not required by law to retain it, we take reasonable steps to destroy or de-identify it.
Accessing and correcting your personal information
Individuals may request access to, or correction of, the personal information we hold about them. Requests should be made in writing to the Privacy Officer at mbrzeski@calibrateconsulting.com.au.
We will respond to access requests within a reasonable period (ordinarily within 30 days) and to correction requests as soon as practicable. Limited grounds to refuse access apply under APP 12.
Complaints
Individuals who believe we have breached the APPs or this Policy may complain to the Privacy Officer at mbrzeski@calibrateconsulting.com.au. We will acknowledge complaints promptly and aim to resolve them within 30 days.
If a complainant is not satisfied with our response, they may refer the matter to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.
Website, Cookies & Third-Party Services
Our website at calibrateconsulting.com.au uses the following third-party tools and technologies that may collect personal information or usage data about visitors.
Google Tag Manager & Google Analytics
We use Google Tag Manager to manage website tags, which may deploy Google Analytics and similar measurement services. Google Analytics collects anonymised data about how visitors use our website (including pages visited, session duration, and referring sources) to help us improve our online content. This data is processed by Google LLC in accordance with Google’s Privacy Policy (policies.google.com/privacy). You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
Cookies
Our website uses cookies — small text files stored on your device — to support website functionality and improve your experience. The types of cookies we use include:
- Session and functional cookies that are temporary and deleted when you close your browser;
- Preference cookies that remember your settings for up to one year; and
- Analytics cookies placed by Google Analytics to collect anonymised usage data.
You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.
Google reCAPTCHA
Our website uses Google reCAPTCHA on certain forms to protect against automated abuse. reCAPTCHA collects hardware and software information from your device and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.
Newsletter & Email Updates
If you subscribe to our Insights newsletter or email updates through our website, we collect your email address for the sole purpose of sending you that content. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly at mbrzeski@calibrateconsulting.com.au.
Our website links to our LinkedIn company page. If you interact with LinkedIn or follow our company page, LinkedIn’s own Privacy Policy applies to any data collected through that platform.
Changes to this Policy
We may update this Policy from time to time. The current version is published on calibrateconsulting.com.au. Material changes will be communicated to clients and other affected parties as appropriate.
Privacy Officer
If you wish to contact our Privacy Officer please use the following contact details:
Melanie Brzeski
Calibrate Consulting Pty Ltd
Suite 3, Level 27, 420 George Street, Sydney NSW 2000
Tel: 02 9188 7444
Email: mbrzeski@calibrateconsulting.com.au