Back

Your privacy

Privacy policy

How we collect, use, share and protect your personal information, written in plain English.

Last updated 1 November 2026

The short version

01Who we are

BSR Solutions Pty Ltd (ABN 21 100 950 516) is a consultancy that works with NSW Government agencies. In this policy, "we", "us" and "our" mean BSR Solutions.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. When we work for a NSW Government agency, we also follow the privacy obligations in our contract with that agency, including the Privacy and Personal Information Protection Act 1998 (NSW) and the Health Records and Information Privacy Act 2002 (NSW) where they apply.

02What we collect

Personal information is any information that identifies you, or could reasonably identify you. Depending on how you deal with us, we may collect:

  • Contact details, such as your name, role, agency or organisation, work email address and phone number.
  • Booking and quote details, such as the session you're interested in, preferred timing and the number of attendees.
  • What you tell us when you email, call or meet with us, or during an engagement.
  • Subscription details, if you sign up for our updates.

We don't ask for sensitive information, such as health information or political opinions, through our website. Please don't include it in messages to us.

AI maturity assessment. The assessment runs entirely in your web browser. Your answers are not stored or sent to us, and are cleared when you close the page. If you choose to download your report, we ask for your name, agency and work email so a principal can offer to discuss your results.

03How we collect it

We collect most information directly from you, for example when you book a session, request a quote, download a report, subscribe to updates or contact us.

Sometimes we receive your details from someone else, such as a colleague arranging an engagement, or from publicly available sources such as agency websites. If we collect information about you from someone else, we'll take reasonable steps to let you know.

You can browse our website without telling us who you are, and you can ask us general questions without identifying yourself. We will need your contact details to send you a quote, book a session or deliver our services.

04How we use it

We use your personal information to:

  • respond to your enquiry and prepare quotes
  • arrange and deliver workshops, sessions and engagements
  • follow up on your assessment results, if you asked us to
  • send you updates you've signed up for
  • run our business, including invoicing and record keeping
  • meet our legal and contractual obligations.

We only send marketing emails with your consent, and every email includes a simple way to unsubscribe, in line with the Spam Act 2003 (Cth). We never sell your personal information.

05Who we share it with

We only share your personal information when we need to, with:

  • Our strategic partners who work with us on your engagement, under confidentiality obligations.
  • Service providers who help us run our business, such as website hosting, email and cloud software providers.
  • Professional advisers, such as our accountants and lawyers.
  • Authorities, when the law requires or allows it.

Some of our cloud service providers may store information on servers outside Australia. When this happens, we take reasonable steps to make sure your information is protected to a standard similar to the Australian Privacy Principles.

06Our website and cookies

We don't use advertising cookies, and we don't use analytics tools that track you across websites.

Like most websites, our site loads fonts and icons from third-party services, which receive basic technical information such as your IP address and browser type. Our hosting and security providers also keep standard server logs to keep the site running and secure.

07Keeping it secure

We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access, for example by using secure, access-controlled systems. When we no longer need your information, we securely delete it or remove anything that identifies you, unless the law requires us to keep it.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme.

08Accessing and correcting it

You can ask to see the personal information we hold about you, or ask us to correct or delete it. Just contact us using the details below. We'll respond within 30 days and there's no charge.

In the rare case we can't give you access, for example because the law prevents it, we'll explain why in writing.

09Making a complaint

If you think we've mishandled your personal information, please contact us first so we can put it right. We'll acknowledge your complaint promptly and aim to resolve it within 30 days.

If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner on 1300 363 992. If your complaint relates to information we handle on behalf of a NSW Government agency, you can also contact that agency or the NSW Information and Privacy Commission.

10Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

11Contact us

For privacy questions, requests or complaints, contact our Privacy Officer:

Post
Privacy Officer, BSR Solutions
Level 25, 100 Mount Street
North Sydney NSW 2060