Privacy Policy

One51 Consulting Pty Ltd Privacy Policy

Effective Date: June 2026 Last Updated: August 2026

1. Our Commitment to Privacy

One51 Consulting Pty Ltd ABN 76 645 868 284 (“One51”, “we”, “us”, “our”) is committed to protecting the privacy of personal information and handling it in an open and transparent manner.

We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable privacy and data protection laws. Where we process personal information on behalf of clients, we also comply with contractual obligations regarding privacy, security, and confidentiality.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information.

2. Who We Are

One51 is an Australian consulting firm specialising in:

• Data and analytics consulting
• Data engineering
• Data governance
• Data platform implementation
• Cloud Data Platform solutions
• Business intelligence and reporting
• Artificial intelligence and advanced analytics services

3. Personal Information We Collect

The types of personal information we collect depend on our relationship with you and may include:

Contact Information

• Name
• Job title
• Employer
• Business address
• Email address
• Telephone number

Business Information

• Organisation details
• Professional qualifications
• Areas of responsibility
• Business communications

Recruitment Information

• Resume/CV
• Employment history
• Qualifications
• References
• Background verification information where legally permitted

Website and Technical Information

When you visit our website, we may collect:

• IP address
• Browser type
• Device information
• Website usage information
• Cookie and analytics information
• Referring websites

Client Data

In providing consulting services, we may process personal information contained within client systems and datasets. In these circumstances, One51 typically acts as a service provider or processor on behalf of the client and handles such information only in accordance with contractual instructions.

Sensitive Information

We only collect sensitive information where:

• required by law;
• necessary for employment purposes;
• required for health and safety obligations; or
• you have provided consent.

4. How We Collect Personal Information

We collect personal information directly from you when you:

• contact us;
• submit an enquiry;
• engage our services;
• subscribe to communications;
• attend events or webinars;
• apply for employment; or
• interact with our website.

We may also collect information from:

• your employer;
• publicly available sources;
• recruitment agencies;
• professional references;
• business partners;
• service providers; and
• client representatives.

5. Why We Collect and Use Personal Information

We collect and use personal information to:

• provide consulting services;
• manage client relationships;
• respond to enquiries;
• administer contracts;
• manage projects;
• recruit employees and contractors;
• conduct business operations;
• improve services;
• conduct research and analysis;
• comply with legal obligations;
• manage security risks; and
• communicate relevant service information.

We collect only the personal information reasonably necessary for our business activities.

6. Artificial Intelligence and Data Analytics Services

As part of our consulting services, One51 may assist clients with data analytics, machine learning and artificial intelligence solutions.

Where personal information is included within client datasets:

• the client remains responsible for determining lawful collection and use;
• One51 processes data only under client instructions;
• access is restricted to authorised personnel;
• data minimisation principles are applied where practical; and
• appropriate technical and organisational security controls are maintained.

7. Cookies and Website Analytics

Our website uses cookies and similar technologies to:

• improve website functionality;
• analyse website traffic;
• measure website performance;
• understand user engagement; and
• support security monitoring.

Users may manage cookie preferences through their browser settings.

8. Direct Marketing

We may send information about our services, events, publications and industry insights.

You may opt out of marketing communications at any time by:

• using the unsubscribe facility in communications; or
• contacting us directly.

We do not sell personal information to third parties.

9. Disclosure of Personal Information

We may disclose personal information to:

• clients;
• contractors;
• subcontractors;
• professional advisers;
• auditors;
• cloud service providers;
• technology vendors;
• managed service providers;
• government agencies where required by law; and
• other parties with your consent.

Examples of technology providers may include:

• Microsoft Azure
• Microsoft 365
• Atlassian
• HubSpot
• Xero
• other approved business systems used by One51

Such providers may store or process information in Australia or overseas.

10. Overseas Disclosure

Some service providers used by One51 may store or process personal information outside Australia.

Where overseas disclosure occurs, we take reasonable steps to ensure providers maintain privacy and security protections consistent with Australian privacy requirements.

Depending on the location of the relevant service provider, countries may include:

• Australia
• New Zealand
• United States
• Singapore
• European Union member countries

11. Information Security

One51 maintains administrative, physical and technical safeguards designed to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

These safeguards may include:

• Multi-factor authentication
• Role-based access control
• Encryption in transit
• Encryption at rest, where supported
• Endpoint protection
• Anti-malware protection
• Anti-virus protection
• Network monitoring
• IDS/IPS security controls
• Email security controls
• Data loss prevention controls
• Security logging and monitoring
• Physical access controls
• Secure backup management
• Security awareness training

Security controls are reviewed periodically and updated based on risk assessments and business requirements.

12. Data Retention

We retain personal information only for as long as reasonably necessary to:

• provide services;
• comply with legal obligations;
• resolve disputes;
• enforce agreements; or
• satisfy regulatory requirements.

When information is no longer required, it is securely destroyed or de-identified.

13. Client Data Return and Destruction

Where One51 processes data on behalf of a client:

Data Return

Upon completion or termination of an engagement, and subject to contractual obligations, One51 will:

• return client data in an agreed format;
• use secure transfer mechanisms;
• provide relevant documentation where applicable;
• verify completeness before transfer; and
• complete return activities within agreed contractual timeframes.

Data Destruction

Following completion of data return obligations, One51 will securely destroy remaining client data unless retention is required by law or contract.

The destruction process may include:

• secure deletion using recognised industry standards;
• removal of backup copies where feasible;
• deletion of temporary processing environments;
• confirmation of destruction upon request; and
• verification that subcontractors have completed equivalent destruction activities.

14. Notifiable Data Breaches

If a data breach involving personal information is likely to result in serious harm, One51 will comply with the Notifiable Data Breaches Scheme under the Privacy Act.

This may include:

• assessing the incident;
• containing the breach;
• notifying affected individuals where required; and
• notifying the Office of the Australian Information Commissioner (OAIC).

15. Access and Correction

You may request access to personal information we hold about you.

You may also request correction of information that is inaccurate, incomplete, out-of-date, irrelevant or misleading.

Requests should be submitted to our Privacy Officer.

16. Privacy Complaints

If you have a privacy concern or complaint, please contact us first.

We will:

• acknowledge your complaint promptly;
• investigate the matter;
• respond within a reasonable timeframe; and
• advise you of the outcome.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The current version will always be available on our website.

18. Contact Us

Privacy Officer

One51 Consulting Pty Ltd

Level 28 / 161 Castlereagh Sydney NSW 2000 Australia

Email: info@one51.com.au

Website: https://www.one51.consulting