Privacy Policy
Last updated: 7 October 2026
1Pacent (1Pacent, we, us, our) respects your privacy. This policy explains how we collect, hold, use and disclose personal information, and how you can access, correct or complain about our handling of it.
We handle personal information consistently with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Where we are not bound by the Privacy Act, we apply this policy voluntarily as a matter of good practice.
1. What we collect
We collect only what we need. That usually means:
- Contact and enquiry information you give us: first name, surname, work email address, organisation name, your role, phone number if you choose to provide it, the nature of your enquiry and anything you write in the message field.
- Engagement information you provide during an engagement: survey and assessment responses, evidence notes, documents you upload or send us, and correspondence.
- Technical information collected automatically when you visit the Website: IP address, browser type, device type, pages requested, referring page and timestamps. This is collected for security, abuse prevention and basic traffic measurement.
We do not seek sensitive information as defined in the Privacy Act, and ask that you do not send it to us. Please do not send us personal information about other people unless you are lawfully entitled to do so.
2. How we collect it
We collect personal information directly from you when you submit the enquiry form, email us, speak with us, or participate in an assessment, briefing or workshop. We may also collect information from publicly available sources such as your organisation’s website or a public professional profile, where that is reasonably necessary for a business purpose.
3. Why we collect it, and what we use it for
- to respond to your enquiry and arrange a conversation;
- to prepare proposals and deliver the services you engage us for;
- to produce assessments, reports, roadmaps and action trackers for you;
- to manage our client relationship, invoicing and records;
- to send you occasional material directly related to the services you have enquired about or purchased, where you have not opted out; and
- to meet our legal, insurance and record-keeping obligations.
If you do not provide the information we ask for, we may not be able to respond to your enquiry or deliver the services.
4. Who we disclose it to
We do not sell personal information, and we do not disclose it for any third party’s own marketing. We disclose personal information only to:
- HubSpot, our customer relationship management provider, which stores enquiry and client contact records on our behalf;
- Vercel, which hosts this Website, and our email, document storage and accounting providers;
- our professional advisers and insurers, where reasonably necessary; and
- any person where you have consented, or where we are required or authorised by law to do so.
We require our service providers to protect personal information and to use it only for the purpose for which we provided it.
5. Overseas disclosure
Some of our service providers store or process data outside Australia, including in the United States and the European Union. In particular, HubSpot and Vercel operate infrastructure overseas.
By providing your personal information to us, you acknowledge that it may be disclosed to overseas recipients in those jurisdictions. We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs, but you acknowledge that we may not be able to take such steps as are reasonable to ensure an overseas recipient does not breach the APPs, and that the recipient may not be subject to the Privacy Act. You may not be able to seek redress under the Privacy Act in respect of an overseas recipient.
6. Cookies and analytics
This Website is deliberately light. We do not use advertising cookies, we do not operate cross-site tracking, and we do not sell or share browsing data with advertising networks.
Our hosting provider sets strictly necessary cookies and records server logs for security and performance. If we introduce privacy-respecting analytics or a scheduling tool in future, we will update this policy before doing so. You can configure your browser to refuse cookies, though parts of the site may then not function as intended.
7. Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Those steps include transport encryption, access controls, keeping credentials on the server only, and limiting who can see client material.
No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.
We retain personal information only for as long as we need it for the purposes described above, or as required by law. We generally retain client engagement records for seven years after the end of the engagement, for insurance, tax and professional record-keeping reasons. Enquiries that do not become engagements are generally deleted or de-identified within 24 months.
If we suffer an eligible data breach, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act.
8. Direct marketing and opting out
We do not run a newsletter or an automated sales sequence. If we do send you material about our services, every message will include a simple way to opt out, and you can opt out at any time by emailing us. We will action an opt-out promptly and at no cost to you.
9. Accessing and correcting your information
You may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Email our contact form and we will respond within 30 days.
We may need to verify your identity before acting. If we refuse access or correction, we will tell you why in writing and explain how to complain. We do not charge for making a request, though we may charge a reasonable cost for providing access in some circumstances.
You may also ask us to delete your information, and we will do so unless we are required or entitled to keep it.
10. Complaints
If you believe we have breached the APPs or mishandled your personal information, please tell us first through our contact form. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
11. Anonymity
You may deal with us anonymously or under a pseudonym where it is lawful and practicable, for example when taking a free assessment. We cannot deliver a client engagement anonymously.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the date it was last updated. Material changes will be made clear on the Website.
13. Contact
Privacy questions and requests: our contact form, Melbourne, Victoria, Australia.
See also our Terms and Conditions and our Website Use Policy.