Privacy Policy

Your privacy matters to us. ISO Accreditation Australia (“we”, “us”, “our”) handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We help businesses meet ISO standards, including ISO/IEC 27001 for information security, so we hold our own data practices to that same bar. This page explains, in plain terms, what we collect and why.

Information we collect

We only collect personal information that we genuinely need to provide our consulting and certification services.

• Information you give us directly,such as your name, business name and role, email address, phone number, postal or site address, the standard you’re interested in, and whatever you tell us in an enquiry or conversation.
• Information we collect automatically when you visit our website, such as your IP address, browser type and version, device details, and the pages you view. We gather this through cookies and similar technologies to keep the site working and to understand how it’s used.

How we use your information

• To respond to your enquiries and provide the consulting, implementation and certification support you ask for.
• To manage our work together, including scheduling, documentation and audit preparation.
• To send you information, quotes or materials you have requested.
• With your consent, to send the occasional update about our services. You can opt out at any time.
• To improve, maintain and secure our website and services.
• To meet our legal, regulatory and contractual obligations.

We never sell your personal information, and we don’t use it to make automated decisions about you.

Cookies & analytics

Our website uses cookies and similar technologies to keep the site working, remember your preferences and help us understand how it’s used:

• Essential cookies, which the site needs to function and to help guard against fraudulent activity.
• Preference cookies, which remember choices such as your cookie-consent selection.
• Analytics cookies, which help us see aggregate site usage so we can make the site better.

You can disable or delete cookies in your browser settings, though some parts of the site may not work as intended afterwards.

Disclosing your information

We do not sell your personal information. We may share it with:

• Trusted service providers who help us operate, such as website hosting, email delivery and analytics. They’re bound by confidentiality and only get what they need.
• Professional advisers and certification bodies, where it relates to a service you’ve engaged us for.
• Government, law enforcement or regulatory bodies where the law requires or allows it.
• A successor organisation if our business is ever restructured or transferred, subject to this policy.

Some of our providers store data on servers located outside Australia. When that happens, we take reasonable steps to make sure your information is handled consistently with the APPs.

Keeping your information secure

We use administrative, technical and physical safeguards to protect your personal information from loss, misuse and unauthorised access, the same kind of practices we advise our clients to adopt. No system is ever completely secure, but we work hard to protect your information, and if the Notifiable Data Breaches scheme applies we will notify the people affected and the OAIC as required.

How long we keep it

We keep personal information only for as long as we need it for the purposes in this policy, or for as long as the law requires for accounting or reporting. After that, we securely delete or de-identify it.

Your rights

Under the Australian Privacy Principles you can ask to see the personal information we hold about you, and ask us to correct it if it’s wrong, out of date or incomplete. You can also withdraw your consent to marketing whenever you like. Just contact us using the details below and we’ll respond within a reasonable time.

If something about your privacy concerns you, please tell us first so we can put it right. If you’re not happy with how we handle it, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children’s privacy

Our services are for businesses and organisations, not children. We don’t knowingly collect personal information from anyone under 16. If you think a minor has given us their information, please contact us and we’ll delete it.

Changes to this policy

We may update this policy from time to time as our practices or legal obligations change. The current version will always live on this page, with its effective date shown below.

Contact us

For any privacy question or request, get in touch with our privacy officer by email at info@isoaccreditation.com.au or call 1800 577 060.

Last updated: 30 June 2026