Tonita Taylor Consulting Privacy Policy

1. Purpose of This Policy

Tonita Taylor Consulting is committed to protecting your privacy. This policy outlines how we collect, use, disclose and safeguard personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By engaging with us, you consent to the practices described here, subject to your rights under law.  A copy of the APPs is available from the website of The Office of the Australian Information Commissioner.

2. What is Personal Information?

The Privacy Act defines Personal Information as: “information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.”

3. Scope and Application

This Policy applies to any personal information we collect and sets out how we collect, use, store, disclose and safeguard such personal information, including sensitive, health and financial information.  This Policy applies to all business activity including consulting, facilitation and training.  It does not cover employee data.

By using our services and providing personal information to us, you consent to our collection, use, storage and disclosure of your personal information in accordance with this Privacy Policy.

4. Our Commitment to Privacy

We collect only what is necessary, use it transparently, protect it securely, and respect your rights. Our team is trained in privacy obligations and we follow relevant ethical and industry standards.

5. Types of Personal Information We Collect

We may collect:

• Contact and identity details (e.g. name, email, role).
• Professional or demographic information relevant to projects.
• Sensitive data (e.g. health or cultural background) only with consent.
• Research responses, feedback, or opinions.
• Website usage data (e.g. IP address, browser type).
• Financial details for billing or reimbursements.

We aim to collect only what’s relevant and necessary. You may interact anonymously or under a pseudonym where practical.

6. How We Collect Personal Information

We collect information:

• Directly from you (e.g. surveys, emails, interviews).
• Via our website or social media.
• From third parties (e.g. clients, public sources).
• Through cookies (see Cookies and Website Analytics).

We inform individuals when collecting data indirectly and ensure lawful handling.

7. Why We Collect and Use Personal Information

We use personal information to:

• Deliver consulting, research and evaluation services.
• Communicate with you and manage projects.
• Improve our services using de-identified data.
• Meet legal and ethical obligations.
• Investigate risks or misconduct if necessary.
• Fulfil any other purpose with your consent.

We explain the purpose at the point of collection and won’t use your data for unrelated purposes without consent.

8. Disclosure of Personal Information

We may share personal information:

• With clients or partners for project delivery (usually de-identified).
• With service providers (e.g. IT, accountants) under confidentiality.
• If required by law or to prevent harm.
• In business transfers, under protection.
• With your consent.

We do not sell or rent personal data.

9. Data Security and Storage

We protect personal data through:

• Secure physical and digital storage.
• Passwords, encryption, and access controls.
• Confidentiality agreements with associates.
• Secure disposal when no longer needed.
• Website security (HTTPS, regular updates).

If a data breach occurs that may cause serious harm, we will notify affected individuals and the OAIC as required.

10. Accessing and Correcting Your Information

You may request access to or correction of your personal information. We respond within 30 days and may charge a reasonable fee for large or complex requests. If we refuse access or correction, we’ll explain why and offer options to add a statement of your view.

11. Anonymity and Pseudonymity

You may interact anonymously or under a pseudonym where lawful and practical. However, some services (e.g. research participation, complaints) may require identification.

12. Overseas Disclosure

We generally store data in Australia. If overseas disclosure is necessary (e.g. cloud services or international partners), we ensure equivalent privacy protections or seek your consent. We will update this section if our practices change.

13. Cookies and Website Analytics

We use cookies to improve website functionality and collect usage data. Analytics tools may be used to help us understand site traffic. You can control cookies via your browser. We do not use cookies for profiling or marketing without consent.

14. How to Make a Privacy Complaint

If you believe we’ve mishandled your personal information:

• Contact us (see contact details below).
• We’ll acknowledge within 2 business days and aim to respond within 30 days.
• If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

We treat complaints seriously and confidentially, and you won’t be penalised for raising concerns.

15. Changes to This Policy

We will review and update this policy to reflect changes in law or practice. While significant changes may be communicated directly with current and/or past clients, all changes will be reflected on the website.  This Policy is current as at October 2025.

16. Contact Details

For privacy enquiries, access requests or complaints:

Privacy Officer: Tonita Taylor
Email: Web contact form
Phone: +61 0413 565 052