Legal
Privacy policy
This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access or correct it. It applies to our website, our events, our marketing, and our client engagements.
We are a small advisory firm. We do not sell personal information, we do not run advertising networks, and we do not trade in data.
Who we are and how to contact us
StratumCore Pty Ltd is a Brisbane-based finance and cost advisory practice serving mining operators and asset-intensive businesses.
StratumCore Pty Ltd has elected to comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth) in handling personal information, whether or not it is required to do so.
Privacy enquiries: Wen Khong, wen@stratumcore.com.au.
What we collect
Contact and enquiry information. Your name, email address, phone number, job title and organisation, when you give them to us through our website, at an event, by email, or in the course of an engagement.
Event information. If you attend one of our events, including The Commercial Edge series, we collect your RSVP details, dietary requirements where you provide them, and a record of your attendance.
Engagement information. When we work with a client organisation, we handle information about that organisation’s staff, contractors and suppliers as part of the work. This is covered in more detail under “Client information” below.
Business contact information from public sources. We identify potential clients and referral partners using publicly available sources such as company websites, professional networking sites, business registers and industry directories. The information we collect this way is business contact information: name, role, organisation and business contact details. If you would prefer we did not hold your details, tell us and we will delete them.
Website information. Our website collects standard technical information including IP address, browser type, pages visited and referral source. We use this to understand how the site is used. Where we run a campaign, we may record which link or QR code brought you to a page.
We do not collect sensitive information as defined in the Privacy Act, and we ask that you do not send it to us.
Why we collect it
- To send you material you have asked for, such as a case study, template or toolkit.
- To respond to your enquiry and arrange meetings.
- To run our events and follow up with people who attended.
- To deliver our services under an engagement.
- To tell you about our services and events where you have consented or would reasonably expect it, and always with a way to opt out.
- To meet our legal, professional and record-keeping obligations.
Marketing and how to stop it
If you give us your email to receive a document, we send you that document and nothing else automatically.
Any further contact from us is a person writing to you individually. You can stop it at any time by replying and saying so, or by using the unsubscribe link in any email. We will action it promptly and we will not ask you to justify it.
Who we share it with
Our people. Our partners and subcontractors, who are bound by confidentiality obligations.
Event co-hosts. Our events are co-hosted with other firms. If you RSVP to a co-hosted event, your RSVP details are shared between the host firms so we can run the event and follow up. We tell you who the co-host is in the invitation.
Service providers. We use third-party services to run our email, calendar, website, file storage and mailing list. Our website is hosted by Vercel Inc. (United States). Our email, calendar and file storage are provided by Microsoft 365. Contact form submissions are processed by Web3Forms. These providers hold information on our behalf and are not permitted to use it for their own purposes.
Where required by law, or where you have consented.
We do not disclose your information to anyone else without your consent.
Overseas storage
Some of our service providers store information outside Australia, including in the United States and the European Union. By providing your information you consent to it being handled by those providers on our behalf. We take reasonable steps to use providers with appropriate security and privacy practices.
Client information
Information we obtain in the course of a client engagement is confidential. We treat it under the confidentiality obligations in our engagement terms and, as chartered accountants, under APES 110 Code of Ethics for Professional Accountants.
Where we publish material about our work, such as a case study, we anonymise the client and generalise figures and details, and we do not publish anything identifying a client without their agreement.
Security and how long we keep it
We hold information in access-controlled cloud services with multi-factor authentication. No system is completely secure, but we take reasonable steps to protect information from misuse, loss and unauthorised access.
We keep marketing and event contact information until you ask us to remove it or until it is no longer useful. We keep engagement records for at least seven years to meet professional and tax record-keeping obligations, and then destroy or de-identify them.
If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and, where required, the Office of the Australian Information Commissioner.
Accessing and correcting your information
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email wen@stratumcore.com.au. We will respond within 30 days. There is no charge.
Cookies
Our website uses cookies for basic functionality and to measure how the site is used. You can block or delete cookies in your browser settings, though some parts of the site may not work as well.
Complaints
If you think we have mishandled your information, email wen@stratumcore.com.au and we will respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.
Changes
We update this policy from time to time. The current version is always on this page with the date it was last updated.