LEGAL
Privacy Policy
Carpadium respects the privacy of individuals who interact with our business and is committed to handling personal information responsibly.
Last updated: September 2026
About this Privacy Policy
This Privacy Policy explains how Carpadium collects, uses, holds and discloses personal information when individuals interact with our website, contact us or engage with our business.
Carpadium operates in Australia and handles personal information in accordance with applicable Australian privacy requirements.
Where the Australian Privacy Principles under the Privacy Act 1988 (Cth) apply to Carpadium, this policy should be read in conjunction with those requirements.
Personal information we may collect
Depending on the interaction, Carpadium may collect information such as:
- name
- work email address
- telephone number where voluntarily provided
- organisation
- job title or role
- information contained in an enquiry
- correspondence with Carpadium
- information provided during prospective client discussions
- information required to establish or manage a business relationship
- basic technical information associated with use of the website where collected by the website platform
Carpadium does not require visitors to provide sensitive project information through the website enquiry form. Visitors should avoid submitting confidential project documentation or sensitive organisational information through general website forms.
How we collect personal information
Information may be collected:
- directly through website forms
- through email or telephone communication
- during meetings or business discussions
- during the establishment or delivery of professional services
- automatically through normal website functionality where applicable
Carpadium does not claim to use specific analytics, cookies or tracking technologies unless these are actually configured.
How we may use personal information
Carpadium may use information to:
- respond to enquiries
- arrange discussions
- understand prospective client requirements
- provide professional services
- manage client and business relationships
- communicate about existing engagements
- operate and improve the website
- maintain appropriate business and administrative records
- comply with applicable legal or regulatory obligations
- protect legitimate business interests
Carpadium will not sell personal information.
Confidential project and client information
Carpadium's work may involve commercially, organisationally or operationally sensitive project information.
The website enquiry process is intended only to establish initial contact.
Prospective clients should not provide confidential project documentation, commercially sensitive information or other sensitive material through general website forms.
Where detailed information is required as part of an engagement, appropriate arrangements for sharing and handling that information can be established.
“Independent challenge requires trust. Confidentiality is part of that trust.”
When information may be disclosed
Carpadium may disclose personal information where reasonably necessary to:
- service providers supporting normal business operations
- professional advisers
- contractors or specialists involved in providing agreed services where appropriate
- authorities where required or authorised by law
Carpadium does not sell or rent personal information to third parties.
Third-party services
The Carpadium website may rely on third-party technology or service providers for functions such as website hosting, forms, communications or other normal business operations.
Those providers may process information in accordance with their own privacy and security practices.
Where the website contains links to third-party websites, Carpadium is not responsible for the privacy practices of those external websites.
Protecting personal information
Carpadium takes reasonable steps appropriate to its operations to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
No method of electronic transmission or storage can be guaranteed to be completely secure.
How long information is retained
Personal information is retained only for as long as reasonably required for the purpose for which it was collected, legitimate business and record keeping requirements, or applicable legal obligations.
When information is no longer reasonably required, appropriate steps may be taken to delete, destroy or de-identify it where practicable.
Accessing or correcting your information
Individuals may contact Carpadium if they wish to:
- request access to personal information Carpadium holds about them
- request correction of inaccurate information
- raise a privacy-related question
Some requests may be subject to legal limitations. Please direct enquiries to the contact details published on this website.
Privacy concerns
If an individual has a concern about how Carpadium has handled their personal information, they can contact Carpadium using the contact details available on the website.
Carpadium will consider privacy concerns and respond as appropriate.
Where applicable, individuals may also have rights to contact the Office of the Australian Information Commissioner (oaic.gov.au).
Overseas processing
Some technology or service providers used in normal business operations may process or store information outside Australia.
Where this occurs, Carpadium will take reasonable steps appropriate to its obligations and the circumstances.
Changes to this Privacy Policy
Carpadium may update this Privacy Policy from time to time to reflect changes to business practices, technology or applicable requirements.
The current version will be published on this page together with its updated date.
CONTACT US
Contact us
For questions about this Privacy Policy or the way Carpadium handles personal information, please contact Carpadium using the contact details published on this website.
CONTACT CARPADIUM