Privacy Policy

Effective date: 23 September 2026

Last updated: 23 September 2026

1. About this policy

This Privacy Policy explains how ISO 9001 Consultants Pty Ltd ABN 17 664 022 468 ("ISO 9001 Consultants", "we", "us", "our"), collects, holds, uses and discloses personal information. It applies to information collected through our website at www.iso9001consultants.com.au, our advertising, our phone and email communications, and our consulting services.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or submitting your details to us, you acknowledge that your information will be handled as described in this policy.

2. Personal information we collect

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. The kinds of personal information we collect depend on how you deal with us and may include:

  • your name, job title and the name of your organisation;
  • your contact details, including email address, phone number and business address;
  • details about your business that you provide to us, such as industry, number of employees, locations, current management systems and certification goals;
  • information contained in enquiries, quote requests, forms, emails, phone calls and meeting notes, including call recordings where you have been notified that a call is recorded;
  • billing and payment details needed to invoice and receive payment for our services;
  • information about your use of our website, such as IP address, device and browser type, pages viewed, referring website, the advertisement or search term that brought you to our site, and the date and time of your visit; and
  • any other information you choose to give us.

We do not intentionally collect sensitive information (such as health information, racial or ethnic origin, or political opinions). If you provide sensitive information to us, we will only handle it with your consent and where it is reasonably necessary for our services.

You may deal with us anonymously or using a pseudonym where it is lawful and practicable, for example when making a general enquiry. However, we will usually need your name and contact details to provide a quote or deliver our services.

3. How we collect personal information

We collect personal information:

  • directly from you, when you complete a form on our website, request a quote, call or email us, book a meeting, or engage us for services;
  • automatically, through cookies, pixels, tags and similar technologies when you visit our website or interact with our advertisements (see sections 5 and 6);
  • from marketing and lead generation partners who contact prospective clients on our behalf, where you have provided your details in response to one of our advertisements; and
  • from publicly available sources, such as business directories, company websites and the Australian Business Register.

If we receive personal information about you that we did not ask for, we will decide whether we could have collected it lawfully. If not, we will destroy or de-identify it where lawful and reasonable to do so.

4. Why we collect, use and disclose personal information

We collect, use and disclose personal information for the following purposes:

  • to respond to your enquiry and provide quotes, proposals and information about our services;
  • to deliver ISO 9001 and related management system consulting, gap analyses, documentation, training and certification support;
  • to coordinate with certification bodies and auditors engaged for your certification;
  • to issue invoices, receive payments and manage our client accounts;
  • to send you service communications, and marketing communications where permitted (see section 7);
  • to measure the effectiveness of our advertising, including Google Ads campaigns, and to show relevant advertisements to people who have visited our website;
  • to operate, secure, maintain and improve our website and services; and
  • to comply with our legal obligations and to resolve disputes.

We will only use or disclose your personal information for another purpose if you consent, if you would reasonably expect it and the purpose is related to the purpose of collection, or if the use or disclosure is otherwise required or permitted by law.

5. Cookies and similar technologies

Our website uses cookies and similar technologies, such as pixels, tags and local storage. Cookies are small files stored on your device that help a website remember information about your visit. We use:

  • essential cookies, which are needed for the website and its forms to work;
  • analytics cookies, such as Google Analytics, which help us understand how visitors use our website so we can improve it; and
  • advertising cookies, which help us measure the results of our advertising and show our advertisements to people who have previously visited our website.

You can set your browser to refuse or delete cookies. Where our website displays a cookie consent banner, you can also choose which non-essential cookies to accept. If you block cookies, some parts of our website may not work as intended.

6. Google Ads, remarketing and Google Analytics

We advertise using Google Ads and use Google Analytics. This section explains how data is collected and used in connection with these services.

Remarketing and personalised advertising

We use remarketing features of Google Ads to show our advertisements to people who have previously visited our website. Third party vendors, including Google, use cookies to serve ads based on your prior visits to our website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our website and other websites on the internet. As a result, you may see our advertisements on Google Search, YouTube and websites in the Google Display Network.

Conversion tracking and enhanced conversions

We use Google Ads conversion tracking to understand which advertisements lead to enquiries.

When you submit a form on our website after clicking one of our advertisements, we may use enhanced conversions, which securely send a hashed (one way encrypted) version of details such as your email address or phone number to Google so that the conversion can be matched to an advertisement. Google uses this data only to measure and report on advertising performance and does not use it to identify you to us.

Customer lists

Where permitted by law, we may upload hashed contact details of existing clients or enquirers to Google Ads (Customer Match) so that we can show relevant advertisements to those people, or exclude them from advertisements. You can ask us at any time to exclude your details from these lists by contacting us using the details in section 14.

Google Analytics

Google Analytics collects information such as pages visited, time spent on the website, device and browser information, approximate location and how you arrived at our website. We may use Google Analytics advertising features, including remarketing audiences and demographics and interests reporting. We use this information in aggregate to improve our website and advertising, and we do not use it to identify individual visitors.

How to opt out

You can control or opt out of personalised advertising and analytics as follows:

For more information about how Google uses data when you use our website, please visit https://policies.google.com/technologies/partner-sites. Google's own privacy policy is available at https://policies.google.com/privacy.

7. Direct marketing

We may use your contact details to send you information about our services, industry updates and offers that may interest you. We will only do this where you have consented, where you would reasonably expect it, or where otherwise permitted by the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).

Every marketing email we send includes a way to unsubscribe. You can also opt out at any time by contacting us using the details in section 14. We will process your request promptly and without charge. We do not sell your personal information.

8. Who we disclose personal information to

We may disclose personal information to:

  • certification bodies and auditors engaged in connection with your certification, with your knowledge;
  • our related bodies corporate, where needed to deliver or support our services;
  • contractors and service providers who help us operate our business, such as IT, hosting, cloud software, customer relationship management, telephony, email, payment processing, accounting and marketing providers;
  • advertising and analytics providers, including Google, as described in sections 5 and 6;
  • lead generation partners acting on our behalf, for the purpose of following up enquiries made in response to our advertising;
  • our professional advisers, such as lawyers, accountants and insurers; and
  • government agencies, regulators or other parties where required or authorised by law.

We require our service providers to handle personal information securely and only for the purpose for which it was provided.

9. Overseas disclosure

Some of our service providers store or process information outside Australia. As a result, your personal information may be disclosed to recipients located in countries including the United States and other countries where our service providers operate. Google, for example, may process data in the United States and other countries where it operates.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the Australian Privacy Principles.

10. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include access controls, password protection, encryption where appropriate, secure cloud platforms and staff confidentiality obligations.

No method of transmission over the internet is completely secure, so we cannot guarantee the security of information you send to us online.

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law, including tax and record keeping laws. When it is no longer needed, we take reasonable steps to destroy or de-identify it.

If a data breach occurs that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

11. Automated decisions

We use software to help manage enquiries, for example to route website form submissions to the right team member. We do not use computer programs to make decisions that could reasonably be expected to significantly affect your rights or interests without human involvement. If this changes, we will update this policy to describe the kinds of personal information used and the kinds of decisions made.

12. Accessing and correcting your personal information

You may ask to access the personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact us using the details in section 14. We may need to verify your identity before acting on your request.

We will respond within a reasonable period, usually within 30 days. We do not charge for making a request, although we may charge a reasonable fee for providing access in some circumstances. If we refuse your request, we will tell you why in writing, unless it would be unreasonable to do so, and explain how you can complain.

13. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us in writing using the details in section 14. We will acknowledge your complaint promptly, investigate it and aim to give you a response within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner:

14. Contact us

For any privacy question, request or complaint, please contact our Privacy Officer:

15. Other matters

Links to other websites

Our website may contain links to third party websites. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

Children

Our services are intended for businesses and are not directed at individuals under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services or how we use technology. The current version will always be available on our website, with the date it was last updated shown at the top.