Privacy policy

Last updated 31 October 2026

This policy explains how Pavona Group Pty Ltd (ABN 83 676 924 904) (“Pavona”, “we”, “us”) collects, holds, uses and discloses personal information. It covers our website at pavona.au and our dealings with clients, prospective clients and anyone else who contacts us. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The personal information we collect

When you use the contact form on our website, we collect your name, role, organisation, sector, the services you are interested in, your message, your email address and, if you choose to give it, your phone number.

When you email, call or meet with us, we collect your contact details and whatever you choose to tell us. When we work with a client, we collect the names, roles and contact details of the people we deal with in that organisation, and other information we need to deliver our services.

When you visit our website, our hosting provider automatically records technical information such as your IP address, browser type, the pages you request and the time of each request. We use this to run and secure the website. Our website does not use advertising cookies or analytics tracking.

We do not usually need sensitive information, such as health information. If we do, we will ask for your consent unless the law allows otherwise. You can contact us without giving your name where that is practical, but we will need a way to reply to you.

How we collect it

We collect personal information directly from you wherever we can. We may also receive it from the organisation you work for, or collect it from publicly available sources such as organisation websites. If we receive personal information we did not ask for and do not need, we will destroy or de-identify it where it is lawful and reasonable to do so.

How we use it

We use personal information to respond to your enquiry, to provide and manage our services, to run our business (including billing and record keeping), to keep our website working and secure, and to meet our legal obligations.

We may send you information about our services if you have asked for it or if the law otherwise allows. Every message will tell you how to opt out, and you can also ask us to stop at any time. We do not sell personal information.

Automated decisions

We do not use computer programs, including artificial intelligence, to make decisions about you that could reasonably be expected to significantly affect your rights or interests, or to do things substantially and directly related to making such decisions.

If that changes, we will update this policy first. The update will describe the kinds of personal information used, the kinds of decisions made wholly by a computer program, and the kinds of decisions in which a computer program substantially and directly assists.

Who we share it with

We share personal information with service providers that help us run our business, including our website host, the service that delivers contact form messages to us, and our email and document storage provider. We also share it with our professional advisers, and with others where the law requires or allows it. Our service providers may only use personal information to provide their services to us.

Information held or processed overseas

Some of our service providers store or process information outside Australia, including in the United States. Before personal information is disclosed overseas, we take reasonable steps to make sure the recipient handles it in a way that is consistent with the Australian Privacy Principles.

How we keep it secure

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. These include access controls, secure systems from reputable providers and limiting access to the people who need it. When we no longer need personal information for any lawful purpose, we destroy or de-identify it.

If a data breach is likely to cause serious harm to anyone, we will notify the people affected and the Office of the Australian Information Commissioner as the law requires.

Children

Our website and services are for organisations and are not directed at children. We do not knowingly collect personal information from children.

Accessing or correcting your information

You can ask us for access to the personal information we hold about you, or ask us to correct it, by emailing info@pavona.au. There is no charge to make a request. We will respond within a reasonable time, usually 30 days. If we refuse a request, we will tell you why in writing and how to complain.

Complaints

If you have a concern about how we have handled your personal information, please email info@pavona.au with the details. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time, including when the law changes. The current version is always on this page, with the date it was last updated.

Contact us

You can contact Pavona Group Pty Ltd about privacy by email at info@pavona.au, or by post at 144 Lords Place, Orange NSW 2800.