How we handle your information

Our commitment

We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). In this policy, “we”, “us” and “our” mean MSP Advisory Pty Ltd, and “personal information” means information that identifies you, or could reasonably be used to identify you.

What we collect

We collect what we need for the purpose at hand. Depending on how you deal with us, that can include:

• Enquiries: your name, company, role, email address and phone number, your business’s revenue band, the topic you’re interested in, and anything you write in your message.
• Email updates: your name and email address, and which of our emails you open and which links you click, so we can tell what’s useful.
• The STP Readiness Check: your answers and scores, optional details about your business (team size, revenue band, markets and locations) and, if you choose to share them, your name, email address, company, role and what your business is known for.
• Engagements: contact details for the people we work with, and the business information you give us during an engagement. That can include information about your staff, contractors or customers, such as names, roles and contract records.
• Working with us: if you apply to join us as a consultant or employee, your CV and the details you send us.
• Website use: technical information such as your IP address, browser and device type, and the pages you visit, collected through cookies and similar tools.

We don’t ask for sensitive information, such as health information or details of your political or religious views. Please leave it out of messages and forms.

How we collect it

Most of what we hold comes straight from you: through our website forms, by email, on calls and in meetings. During an engagement your organisation may also give us information about its people and customers. From time to time we collect business contact details from public sources, such as LinkedIn, company websites and the ASIC register, or from someone who has referred you to us.

If we receive personal information we didn’t ask for, we keep it only if we could have collected it in the normal course of our work. Otherwise we destroy or de-identify it.

Why we use it

• To reply to your enquiry and arrange conversations.
• To prepare proposals, deliver our services and invoice for them.
• To produce your STP Readiness Check results and, if you ask, email you a copy.
• To send you insights and updates, where you’ve agreed to receive them.
• To understand how our website is used and improve it.
• To protect our website and forms from spam and misuse.
• To meet our legal, tax and insurance obligations.

We use your information for another purpose only if you would reasonably expect it, you agree, or the law requires or allows it.

Email updates

We send marketing emails to people who have opted in, or where the Spam Act 2003 (Cth) otherwise allows it. Every email has an unsubscribe link, and you can also email info@mspadvisory.com.au to stop them. Some sign-ups ask you to confirm your email address before we add you. We never sell or rent our mailing list.

The STP Readiness Check

Your results are produced automatically. Each answer carries a score, and fixed rules turn those scores into your profile and priorities. We make no decisions about you from the results. They’re there to help you think about your business, and one of our consultants sees them only if you share your details.

If you stay anonymous, we keep your dimension scores and any optional business details, without your name, email address or company, and we don’t keep your individual answers. If you share your details, we keep your answers and results so we can prepare for any conversation you ask for, and we let our team know you’ve completed the check. We delete check submissions after 24 months.

While you work through the check, your browser holds your answers in session storage so a refresh doesn’t lose your progress. It holds answers only, and it clears when you finish or close the tab.

Cookies and analytics

Cookies are small files a website stores in your browser. We use them to make the site work, to protect our forms from spam, and to understand how the site is used. We may use analytics tools, such as Google Analytics, which tell us things like which pages are visited and how people find the site. If you subscribe to our emails, our email platform may also record which pages of our site you visit.

You can block or delete cookies in your browser settings. The site will still work, although some features may not. Google offers a browser add-on to opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

Who we share it with

We never sell personal information. We share it only with:

• our consultants and contractors working on your enquiry or engagement, all of whom are bound by confidentiality
• service providers who help us run the business, such as our website host, email and document services, email delivery, our newsletter platform (MailPoet), spam protection (CleanTalk), analytics and AI-assisted tools
• our professional advisers, such as accountants, lawyers and insurers
• a buyer or successor if all or part of our business is sold, under confidentiality terms
• government bodies or others where the law requires or allows it.

Our service providers may use your information only to provide their services to us. We use AI tools only where their terms prevent the provider from using the information we give them to train its models.

Information stored overseas

Some of our service providers store or process information outside Australia, including in the United States, the European Union and the United Kingdom. Spam checks on our website forms, for example, run on CleanTalk’s servers overseas. Before we use a provider, we take reasonable steps to make sure it protects personal information to a standard consistent with the APPs.

Keeping it secure

We keep information in secure, access-controlled systems protected by multi-factor authentication, and information travelling to and from our website is encrypted. Only the people who need it for their work can see it. When we no longer need personal information and the law doesn’t require us to keep it, we delete or de-identify it.

If a data breach involving your information is likely to cause you serious harm, we’ll tell you as soon as we can, explain what we’re doing about it and what you can do, and notify the Office of the Australian Information Commissioner (OAIC) where required.

Seeing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by emailing info@mspadvisory.com.au. We’ll confirm who you are, respond within 30 days, and won’t charge you for the request. If we can’t give you access or make a correction, we’ll explain why in writing.

Questions and complaints

If you have a question or concern about how we’ve handled your information, email info@mspadvisory.com.au with the details. We’ll acknowledge it within five business days and aim to resolve it within 30 days.

If you’re unhappy with our response, you can contact the OAIC at oaic.gov.au or on 1300 363 992.

Changes to this policy

We’ll update this policy as our services and the law change. The current version is always on this page, with the date it was last updated.

Contact us

Privacy Officer, MSP Advisory Pty Ltd
Email: info@mspadvisory.com.au