Our privacy statement

BusinessRx Pty Ltd (ABN 59 699 638 401) handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and in Victoria the Health Records Act 2001 (Vic) where health information is involved. We collect only the information we need to deliver our services: contact and business details from enquiries, proposals and engagements; employee, HR and board records our clients provide so we can deliver business, operations, HR and governance support; billing information; and basic website and analytics data. We collect information directly from our clients, referral partners or public sources. Sensitive information is collected only where reasonably necessary and with consent or where the law permits.

We use personal information to respond to enquiries, deliver and invoice our services, meet our legal obligations and, where you have agreed or have an existing relationship with us, send occasional insights you can unsubscribe from at any time. Information we handle on behalf of a client is used only for that client's engagement, kept confidential under our Terms of Agreement, and may be returned or securely destroyed at the end of the work unless the law requires us to keep it. We never sell personal information. We share it only with associates working under our direction, our professional advisers and insurers, and the technology providers we use to run the business, including HubSpot, Xero and Microsoft 365, some of which store data overseas in countries including the United States. Where that happens we take reasonable steps to ensure the information is handled consistently with the Australian Privacy Principles. We use AI tools to assist our work, but every output is reviewed by our team and no decision that significantly affects an individual is made by a computer program without human involvement. We do not allow our AI tools to use any information for their AI training purposes.

We protect personal information through secure cloud platforms, multi-factor authentication, restricted access to sensitive records and confidentiality obligations on everyone who works with us. If a data breach is likely to cause serious harm, we will notify the affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, and tell any affected client promptly. We keep information only as long as it is needed or required by law - generally seven years for financial and engagement records - and then securely destroy or de-identify it.

You can make a general enquiry without identifying yourself, and you can ask to access or correct the personal information we hold about you at no cost. To make a request or a complaint, contact our Privacy Officer at wendy@businessrx.com.au or on 0439 656 144. We will respond within 30 days, and if you are not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. We review this statement annually, and the current version is always available at businessrx.com.au/privacy.