1. Information we collect

We collect personal information that is reasonably necessary for our consulting business. Depending on how you deal with us, this may include:

• Contact details such as your name, position, organisation, email address, phone number and postal address.
• Information you provide when you contact us, request a proposal, attend a workshop or webinar, or take part in a project.
• Business and project information provided by clients and stakeholders, including names and contact details of project personnel.
• Records of our communications with you, including emails, meeting notes, and Microsoft Teams meeting invitations and recordings (where participants have been notified).
• Technical information about your use of our website, such as IP address, browser type and pages visited.

We do not intentionally collect sensitive information (as defined in the Privacy Act) unless it is necessary and you have consented.

2. How we collect it

We collect personal information directly from you (for example by email, phone, online forms, meetings and events), from your organisation when you are a client or project stakeholder, and from publicly available sources such as business websites and professional networks.

3. Why we collect and use it

We collect and use personal information for the following purposes:

• To provide, manage and improve our consulting services.
• To respond to enquiries and prepare proposals.
• To communicate with clients, collaborators, subcontractors and project stakeholders.
• To invite you to events and webinars and share updates about our work, where permitted (you can opt out at any time).
• To administer our business, including invoicing, record keeping and meeting legal obligations.

4. Disclosure of personal information

We do not sell personal information. We may disclose it to:

• Subcontractors and project collaborators who assist us in delivering services, under appropriate confidentiality obligations.
• Service providers that support our business, such as IT, cloud hosting, email, collaboration, accounting and website providers.
• Government agencies, regulators or other parties where required or authorised by law.

5. Microsoft 365 and cloud services

We use Microsoft 365 services, including Outlook, Teams, SharePoint and OneDrive, to run our business. Personal information handled through these services is processed and stored by Microsoft in accordance with its own terms and privacy commitments. Microsoft's data centres may be located in Australia or overseas. Microsoft's privacy statement is available at privacy.microsoft.com/privacystatement.

6. Overseas disclosure

Some of our service providers may store or access information outside Australia. Where this occurs, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the Australian Privacy Principles.

7. Our website, cookies and links

Our website may use cookies and similar technologies to operate correctly and to understand how visitors use the site. You can change your browser settings to refuse cookies, though some features may not work as intended. Our website may contain links to third-party sites, which have their own privacy policies and for which we are not responsible.

8. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls and secure cloud storage. We keep personal information only for as long as it is needed for the purposes described above or as required by law, and then take reasonable steps to destroy or de-identify it.

9. Access and correction

You may request access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within a reasonable time and may need to verify your identity first.

10. Complaints

If you believe we have breached the Australian Privacy Principles, please contact us and we will investigate and respond promptly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Contact us

Wave Consulting Australia
Email: rob.catchlove@waveconsulting.com.au

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page. This policy was last updated on 21 October 2026.