Privacy Policy
How Consequence & Co. handles personal information, in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.
Scope
This policy covers the website at consequenceand.co, the contact form, the firm’s correspondence inbox, and the personal information we collect during engagement work. We apply the same standard to visitors and clients in any jurisdiction.
What we collect
From the contact form: your name, your email address, your organisation if you provide it, and the message you send.
Automatically when you visit the site: standard server logs (IP address, browser, page requested, timestamp); analytics events through Google Analytics 4; and, on the contact page only, bot-detection signals through Cloudflare Turnstile.
During an engagement: the information you choose to share. Business documents, technical material, names and roles of the people we will be working with, notes from conversations and meetings.
We do not ask for, and do not knowingly collect, sensitive information (health, biometric, racial, political, religious, sexual orientation, criminal record).
Why we collect it
To respond to enquiries. To deliver the work clients have engaged us for. To keep the website running and secure. To understand which pages are useful. Nothing more.
Who else handles it
Beyond Consequence & Co., personal information from this site is handled by:
- Google, for website analytics.
- Cloudflare, for the contact-form endpoint and bot defence on the contact page.
- GitHub, for hosting.
We do not sell it or share it with marketers.
Where it is stored
The providers above run servers in jurisdictions outside Australia, including the United States and the European Union. By using the site or sending us a message, you accept that your information may be processed in those jurisdictions, subject to the protections each provider operates under.
How long we keep it
Contact-form messages and engagement materials: as long as a reasonable business reason applies (an active enquiry, a current engagement, regulatory or audit obligations). After that, we delete or de-identify what we hold.
Analytics data: retained according to Google Analytics 4’s retention settings.
Cookies and similar
The site uses cookies and similar technologies for analytics (Google Analytics) and, on the contact page, for bot detection (Cloudflare Turnstile). It does not set advertising cookies.
You can disable cookies in your browser. Some functionality, in particular the contact form’s bot check, may not work if you do.
Your rights
Under the Australian Privacy Principles you can:
- ask for a copy of the personal information we hold about you;
- ask for it to be corrected;
- ask for it to be deleted, where there is no legal reason for us to keep it;
- ask us how we have handled it.
Email [email protected] with the subject line Privacy. We will respond within 30 days.
Complaints
If you are not satisfied with how we have handled a privacy concern, you can refer it to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We update this policy when our practices change. Material changes are reflected on this page.