Privacy Policy
Last updated: 8 January 20261. Overview
Brockwell Strategy Pty Ltd (ABN 85 675 736 259) trading as Brockwell (“we”, “us”, “our”) respects your privacy and is committed to handling personal information in a careful, lawful, and transparent way.
This Privacy Policy explains how we collect, use, store, and disclose personal information in connection with our website, services, recruitment, events, and business operations.
2. What is “personal information”?
“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
3. What personal information we collect
The personal information we collect depends on your relationship with us (client, stakeholder, job applicant, supplier, event participant, website visitor). It may include:
Identity and contact details
Name, email address, phone number, role/title, organisation, postal address.
Professional information
Employment history, qualifications, professional affiliations, referee details (for applicants).
Information relevant to client work (e.g., stakeholder context, communications history, project inputs).
Identification
Government-issued ID (e.g., driver’s licence or passport) only where reasonably necessary (for example, verification for specific engagements).
Online information
Device and browser information, IP address, pages viewed, date/time of visits, referring URLs, and similar website usage data via cookies and analytics tools.
Sensitive information
We generally avoid collecting sensitive information (e.g., political opinions, union membership, health information). If we do collect sensitive information, we will do so only where reasonably necessary and with your consent (or where otherwise permitted by law).
You can choose not to provide personal information. If you do, we may not be able to provide certain services or respond properly.
4. How we collect your information
We collect personal information in several ways, including:
Directly from you when you:
Contact us (email, phone, web forms)
Engage our services or provide services to us
Apply for a role
Attend or register for an event, briefing, or workshop
Subscribe to updates or interact with our communications
From third parties where reasonably necessary, including:
Referees (job applications)
Recruitment or background-check service providers (where used)
Professional advisers (e.g., legal/accounting), clients, or counterparties in a project context
Public sources (e.g., organisational websites, media, LinkedIn) for stakeholder and communications work
Unsolicited information
If we receive personal information we did not request, we will assess whether it is necessary for our work. If not, we will take reasonable steps to delete or de-identify it (where lawful and reasonable).
Anonymity/pseudonymity
Where lawful and practicable, you may interact with us anonymously or using a pseudonym. In many professional contexts (client services, recruitment, invoicing), this won’t be practical.
5. Why we collect your information
We collect and use personal information for purposes such as:
Providing and improving our services (strategy, communications, policy and stakeholder work)
Communicating with clients, stakeholders, suppliers, and applicants
Recruiting and managing applications
Organising and delivering events, briefings, and workshops
Managing our business operations (invoicing, payments, record-keeping, internal administration)
Protecting our systems and preventing fraud or misuse
Complying with legal and regulatory obligations
6. Disclosure of personal information
We may disclose personal information to third parties where reasonably necessary to operate our business or deliver services, including:
Trusted contractors and service providers (e.g., IT, cloud hosting, email, analytics, document management, CRM)
Recruitment partners and referees (for hiring processes)
Professional advisers (legal, accounting, insurance)
Clients or counterparties where disclosure is required to deliver agreed services (for example, in stakeholder engagement work), and where appropriate
Regulators, courts, or law enforcement where required or authorised by law
We do not sell or rent personal information.
7. Overseas disclosure and cross-border handling
We may use third-party service providers (including cloud and software providers) that store or process information outside Australia.
Where we disclose personal information overseas, we take reasonable steps to ensure appropriate privacy and security protections are in place. Because provider infrastructure can change, it is not always practicable to specify every country, but overseas locations may include (for example) the United States, Singapore, the United Kingdom, and the European Union, depending on the services used.
8. Direct marketing and communications
We may send you updates about Brockwell (e.g., insights, briefings, event invitations) where it is reasonably connected to your relationship with us, or where you have asked to receive them.
Opt out anytime by using the unsubscribe option (where provided) or emailing us. We will honour opt-out requests.
9. Cookies, analytics, and website activity
Our website may use cookies and similar technologies to:
Operate and secure the site
Understand how visitors use the site
Improve performance and content
This may involve collecting information such as IP address, device/browser type, pages visited, and time spent on pages.
You can control cookies through your browser settings (including blocking or deleting cookies). Blocking some cookies may affect site functionality.
10. Storage, security, and retention
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Measures may include access controls, account security practices, secure storage, and limiting access to those who need it.
We keep personal information only for as long as needed for the purposes set out in this policy, or as required by law. When no longer required, we take reasonable steps to delete or de-identify it.
11. Access and correction
You may request access to the personal information we hold about you and request corrections if it is inaccurate, out of date, incomplete, irrelevant, or misleading.
Please contact us to make a request. We may need to verify your identity and may refuse access in limited circumstances permitted by law (and will explain why if we do).
12. Privacy complaints
If you have a concern or complaint about how we handle personal information, please contact us with:
Your name and contact details
What happened, and any relevant dates or communications
What outcome you’re seeking
We will acknowledge your complaint and aim to respond in writing within 30 days (or sooner where possible). If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
13. Automated decision-making
We do not currently use automated decision-making (computer programs) to make decisions about individuals that could reasonably be expected to significantly affect their rights or interests. If this changes, we will update this policy and provide relevant information about that process.
14. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be available on our website and can be provided on request.
15. Contact us
Please contact us with privacy questions, requests, or complaints.