Privacy Policy – Hawkesbury Compliance Advisory

Hawkesbury Compliance Advisory (“HCA”, “we”, “our”, or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard information through our website (www.hawkesburycompliance.com.au) and in the course of our consulting services, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Using Our Website

By using our website, you agree to the terms outlined in this Privacy Policy. If you do not agree, please discontinue use of the site.

Cookies

We use cookies and similar technologies to operate the site, understand usage, and improve performance. Required cookies enable core functionality and cannot be switched off. Optional cookies (for example, analytics or embedded third-party media) operate only with your consent. You can control cookies via your browser settings. Accepting required cookies may result in third-party cookies being set when you use third-party features embedded on our site, such as video players or maps.

Information We Collect

We may collect personal and business information that is reasonably necessary to provide our services, including:

• Contact details (name, phone, email, address)

• Business and employee information relevant to audits, site visits, and engagements

• Records of communications and audit results (including photos where applicable)

• Payment and invoicing information

We generally collect this information directly from you or your authorised representatives during the course of our engagement.

How We Use the Information

We use the information we collect to:

• Conduct compliance audits, risk assessments, and due diligence activities

• Prepare reports, recommendations, and statements

• Communicate with clients about services and outcomes

• Maintain internal administrative records and meet legal obligations

• Improve our services and maintain quality assurance

We do not sell, rent, or trade personal information.

Data Storage and Security

All client data is securely stored using encrypted, access-controlled systems such as Microsoft 365, Google Workspace, or equivalent services with Australian-compliant data centres. Access is restricted to authorised personnel only, and we implement physical, electronic, and procedural safeguards to prevent unauthorised access, misuse, or loss of data.

Disclosure to Third Parties

We may disclose information only when necessary to deliver services or where required by law. This may include:

• Referral to licensed or accredited professionals (with your consent)

• Insurers, regulators, or auditors (where legally required)

• Subcontractors or administrative service providers under confidentiality agreements

We do not disclose personal information overseas unless required for secure data hosting in jurisdictions compliant with the APPs.

Retention and Destruction

Client information is retained for a minimum of seven (7) years after the completion of services, or as otherwise required by law. After this period, all digital records are securely deleted, and any physical documents are shredded or destroyed using secure disposal methods.

Access and Correction

You may request access to your personal information at any time, or request corrections if it is inaccurate or incomplete. Requests can be made by contacting:
privacy@hawkesburycompliance.com.au

Complaints and Enquiries

If you have a privacy-related complaint, please contact us directly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.

Legal Disclosure

We may disclose information if required or permitted by law, such as to comply with a subpoena or similar legal process, or when necessary to protect our rights, ensure safety, investigate fraud, or respond to government requests.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our operations or legislation. The latest version will always be available on this page or on request.

Document Reference: Privacy Policy – Document ID: HCA-POL-001 | Version 1.0 | Approved 16 October 2025 | Review Due 16 October 2026
Controlled Document – Uncontrolled when printed
Contact: privacy@hawkesburycompliance.com.au