Privacy Policy

1. Information we collect

Information you give us. Your name, email address, phone number, organisation and role, and anything you share when you email or call us, book a meeting, attend a workshop or work with us. For clients, we also hold the details we need to invoice and manage the engagement.

Information collected automatically. When you visit our website, we collect limited technical information such as device and browser type, pages visited, the site that referred you and your general location, using analytics tools and cookies.

Information from others. We may receive your details through a referral, from a client we're working with, or from publicly available professional sources such as LinkedIn.

We don't ask for sensitive information (such as health information) about you. If we receive it without asking and don't need it, we delete it.

2. Client information we handle for our clients

When we deliver strategy, marketing, technology and advisory services, we may access personal information held in our clients' systems, such as CRMs, email marketing platforms, website forms and analytics. Some of our clients work in health, disability, aged care and community services, so this can include sensitive information.

We access only what we need for the agreed work, follow our client's instructions, and are bound by confidentiality and privacy obligations in our client agreements. We never use client data for our own marketing or any other purpose. Our client remains responsible for that information and their privacy policy applies to it. If you have a question about it, contact the organisation directly and we'll help them respond.

3. How we use your information

• To respond to enquiries and arrange meetings
• To deliver, manage and improve our services
• To issue invoices and manage accounts
• To send insights, event invitations and updates you've asked for or that relate to services you use
• To understand how our website is used and improve it
• To meet our legal, tax and accounting obligations

Every marketing email includes an unsubscribe link, and you can opt out at any time by contacting us. We don't sell personal information, and we don't use it for unrelated purposes without your consent.

4. Contractors, service providers and AI tools

Contractors. We work with a small bench of trusted specialists, including developers, designers and communications professionals. They are bound by confidentiality obligations and only access the information they need for their part of the work.

Service providers. We use reputable providers to run our business, including website hosting, Google Workspace (email, documents and storage), Calendly (meeting bookings), Google Analytics, an email marketing platform and accounting software.

AI tools. We use artificial intelligence tools to support research, analysis, drafting and operational work. We use business versions of these tools, set so that our inputs are not used to train the provider's models. We don't enter personal or confidential client information into AI tools unless it's needed for the agreed work and the client has approved it. We don't use AI or other automated systems to make decisions that significantly affect people's rights or interests.

We may also disclose personal information where the law requires it.

5. Overseas storage and disclosure

Some of our service providers store or process data outside Australia, mainly in the United States, and may use data centres in other countries where they operate. We choose providers with strong security practices and contractual privacy commitments, and we take reasonable steps to ensure they handle personal information consistently with the APPs.

6. Cookies and analytics

Our website uses Google Analytics to understand how visitors use it. Google Analytics uses cookies and reports on visits in aggregate; we don't use it to identify you. We don't currently use advertising pixels or retargeting. You can block or delete cookies in your browser settings, or install Google's Analytics opt-out browser add-on. Some site features may not work as expected if cookies are blocked.

7. Security and retention

We store information in secure cloud systems protected by multi-factor authentication and access controls, and we take reasonable steps to protect it from misuse, loss and unauthorised access, modification or disclosure.

We keep personal information only as long as we need it for the purposes above or as the law requires. Business and financial records are generally kept for five to seven years to meet tax obligations. After that, we securely delete or de-identify them. When an engagement ends, we remove our access to client systems and return or delete client data as agreed.

If a data breach is likely to cause serious harm to anyone, we will notify the affected people promptly and tell them what steps they can take.

8. Dealing with us anonymously

You can make a general enquiry without giving your name or by using a pseudonym. We will need your contact details to respond to you or to work with you.

9. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us. There is no charge. We'll respond within 30 days. If we can't give you access or make a correction, we'll explain why in writing.

10. Making a complaint

If you have a concern about how we've handled your personal information, please contact us in writing with the details. We will:

• acknowledge your complaint within five business days
• look into it fairly and confidentially
• give you a written response, including what we'll do to fix any problem, within 30 days

If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

11. Contact us

Sonja Ceri, Privacy Contact
Ceri & Co Pty Ltd
Email: sonja@ceriand.co
Phone: 0416 234 016

12. Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.