1.   Personal Information We Collect

We collect personal information that you voluntarily provide when submitting a form on this website. The two forms on this website collect the following:

• Contact form — your name, email address, phone number, and message.
• Join Us (expression of interest) form — your name, email address, phone number, the type of role you are seeking, the GKS service area relevant to your background, a cover message, and a written summary of your career and experience (CV Summary).

We do not collect sensitive information (including health information, racial or ethnic origin, criminal record, or biometric data) through this website.

Please do not include sensitive information in your CV Summary. Any sensitive information you choose to volunteer will be handled in accordance with this policy and deleted where not relevant.

We do not use cookies to track you, and we do not collect personal information passively through your visit to the website.

2.   Why We Collect Your Information

We collect personal information for the following purposes:

• To respond to general enquiries submitted through the Contact form.
• To assess expressions of interest in joining GKS Consulting Group and to follow up with candidates.
• To communicate with you about our services, engagements, or consulting opportunities.
• To maintain records of our interactions with prospective candidates and contacts.

We collect only the personal information that is reasonably necessary for these purposes.

3.   How We Use and Disclose Your Information

We use your personal information only for the purposes for which it was collected (see Section 2), or for a directly related secondary purpose that you would reasonably expect.

We do not sell, trade, rent, or share your personal information with third parties for marketing purposes.

We may disclose your information to:

• GKS Consulting Group members — authorised members who are involved in reviewing your expression of interest or responding to your enquiry.
• Our hosting provider — GoDaddy Inc. (USA), which provides the web hosting, database, and email infrastructure that operates this website. GoDaddy processes information on our behalf to enable the operation of the website.

4.   Overseas Disclosure

This website is hosted by GoDaddy Inc., which operates servers located in the United States of America. As a result, personal information submitted through this website is stored and processed on servers outside Australia.

We take reasonable steps to ensure that GoDaddy handles personal information in a manner consistent with the Australian Privacy Principles. GoDaddy maintains internationally recognised data security practices and is subject to applicable US privacy and data protection laws.

By submitting your personal information through this website, you acknowledge that it may be stored on servers outside Australia.

5.   Storage and Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Measures include:

• Submission data is stored in a secured database accessible only to authorised GKS members.
• The administration portal is password-protected and uses session-based authentication.
• Passwords are stored as secure cryptographic hashes and are never stored in plain text.
• Access to submission data is logged for accountability purposes.
• In the event of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC under the Notifiable Data Breaches scheme.

• We do not currently use cookies to track you, and we do not collect personal information passively through your visit to the website. If we introduce website analytics in the future, this policy will be updated to describe what is collected and how it is used before any such tool is enabled.

Expression-of-interest submissions are retained for no more than 12 months, then securely deleted.

6.   Access and Correction

You have the right to request access to personal information that we hold about you, and to request correction of any information that is inaccurate, incomplete, or out of date.

To make an access or correction request, please contact us using the details in Section 8. We will respond within a reasonable time and at no charge for the request itself.

We may decline an access or correction request in circumstances permitted under the Privacy Act 1988 (Cth), and we will provide reasons if we do so.

7.   Complaints

If you have a concern about how we have handled your personal information, please contact us in the first instance (see Section 8). We will acknowledge your complaint promptly and aim to respond fully within 30 days.

8.   Contact Us

For privacy enquiries, access or correction requests, or complaints, please contact:

9.   Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available at this page. We encourage you to review it periodically. The effective date at the top of this page indicates when it was last revised.