Privacy Policy
1. Introduction
Welcome to the website of Impactworks ("we," "us," or "our"). Impactworks is an Australian-based professional consulting firm operating globally. We are committed to protecting your privacy and safeguarding the personal information you share with us.
This Privacy Policy explains how we collect, use, disclose, and store your personal information when you visit our website, interact with us, or use our consulting services.
As an Australian entity with a global client base, we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where applicable, we also strive to comply with global privacy regulations, including the European Union's General Data Protection Regulation (GDPR) and other regional privacy standards.
2. Personal Information We Collect
We may collect personal information that can identify you directly or indirectly. The types of information we collect depend on how you interact with us:
- Identity Data: First name, last name, job title, and company name.
- Contact Data: Email address, phone number, billing address, and physical/postal address.
- Professional Data: Professional background, industry, business challenges, and any details you provide in inquiry forms or resumes.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
3. How We Collect Your Personal Information
We collect information through various methods, including:
- Direct Interaction: When you fill out contact forms, subscribe to our publications, request consulting services, or communicate with us via email, phone, or post.
- Automated Technologies: As you interact with our website, we may automatically collect Technical Data using cookies, server logs, and similar technologies. (See our Cookie Policy for more details).
- Third Parties: We may receive personal data about you from public databases, joint marketing partners, or social media platforms (e.g., LinkedIn) when you interact with our brand.
4. How We Use Your Personal Information
We will only use your personal information when the law allows us to. Most commonly, we use it for the following purposes:
| Purpose / Activity | Type of Data | Lawful Basis for Processing (incl. GDPR) |
|---|---|---|
| To register you as a client and deliver consulting services | Identity, Contact, Professional | Performance of a contract |
| To manage our relationship with you (e.g., updates, billing) | Identity, Contact, Transactional | Performance of a contract; Legitimate interests |
| To respond to inquiries and provide support | Identity, Contact, Professional | Consent; Legitimate interests |
| To improve our website, services, and user experience | Technical, Usage | Legitimate interests (to keep our website updated and relevant) |
| To send marketing communications or newsletters | Identity, Contact, Marketing | Consent (where required); Legitimate interests |
5. Disclosure of Your Personal Information
We do not sell your personal information. To deliver our services globally, we may share your personal information with:
- Service Providers: Third-party vendors who provide IT, system administration, hosting, billing, and marketing services.
- Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy, legal, insurance, and accounting services.
- Regulatory & Legal Authorities: Courts, regulatory bodies, and law enforcement agencies if required by law.
- Cross-Border Transfers: As a global consulting firm, your information may be transferred to, and processed in, countries outside of Australia. When we transfer personal data internationally, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or ensuring the country has adequate privacy protections).
6. Data Security
We implement appropriate technical and organizational security measures to prevent your personal information from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted to employees, contractors, and agents who have a business need to know.
7. Data Retention
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
8. Your Legal Rights
Depending on your location (e.g., Australia, China, EU, UK, California), you may have the following rights regarding your personal information:
- Access: The right to request copies of your personal information.
- Rectification: The right to request that we correct inaccurate or incomplete information.
- Erasure ("Right to be Forgotten"): The right to request that we erase your personal data under certain conditions.
- Restriction: The right to request that we restrict the processing of your personal data.
- Data Portability: The right to request the transfer of your data to another organization.
- Objection: The right to object to our processing of your personal data.
- Withdraw Consent: The right to withdraw consent at any time where we rely on consent to process your data.
To exercise any of these rights, please contact us using the details below.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:
- Email: privacy@impactworks.au / hello@impactworks.au
- Address: Perth, Western Australia, Australia