Last updated: 27 Nov 2025
1. Introduction
Critical Risk Group (“we”, “us”, “our”) operates https://criticalrisk.com.au (the “Site”). We respect your privacy and are committed to protecting any personal information you provide to us. This Privacy Policy explains what information we collect, how we use it, and your rights.
By using the Site and submitting a contact form, you consent to the practices described in this policy.
2. What information we collect
Through our contact forms, we may collect personal information such as:
Name
Email address
Phone number (if provided)
Company name (if provided)
Any other information you voluntarily submit via the form (e.g., message content, project details)
We do not collect sensitive personal information (e.g., health data) via the Site forms unless you voluntarily provide it — in which case we will treat it with extra care.
3. How we collect your information
We collect information directly from you when you voluntarily complete and submit a contact form on our Site.
We do not collect personal information passively (e.g., we do not track or store IP addresses or behavioural data via analytics), unless explicitly disclosed elsewhere.
If in future we add cookies, analytics tools, or other tracking technologies, we will update this Policy accordingly.
4. Why we collect and how we use your information
We use the personal information you provide to:
Respond to your enquiries, requests or messages submitted via the contact form.
Provide you with information about our services, follow-up or support.
Maintain records of communication related to your enquiry.
We will not use your personal information for marketing, advertising or third-party sale without your explicit consent.
5. Disclosure of your information
We will not sell or rent your personal information to third parties.
We may share your information only to the extent necessary to respond to your enquiry (e.g., with staff or contractors who assist in managing communications), and only under confidentiality obligations.
If for any reason we anticipate transferring your personal information outside Australia (e.g., using third-party service providers hosted overseas), we will clearly indicate which countries are involved and ensure appropriate protections.
6. Data security
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification or disclosure.
Measures include (where relevant): secure web hosting, restricted access to information, secure data storage practices, and ensuring staff or contractors handling your data are bound by confidentiality obligations.
7. Data retention
We retain your personal information only for as long as needed to respond to your enquiry or as required by law or legitimate business purposes.
If you request deletion of your personal information (e.g., after resolution of an enquiry), we will take reasonable steps to delete or de-identify it, unless retention is required by law.
8. Your rights
Depending on applicable law, you may have rights to:
Access personal information we hold about you,
Request correction if your information is inaccurate or out-of-date,
Request deletion or anonymisation of your information (subject to any overriding legal or legitimate business needs),
Withdraw your consent (where our processing was based on consent).
To exercise any of these rights, please contact us using the details below.
9. Complaints or enquiries
If you have any questions, concerns or wish to make a complaint about how your personal information is handled by us, please contact:
Critical Risk Group
Email: [insert email address]
Address: [insert business address]
We will respond to your concern as soon as practicable.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal obligations. If we make any material changes, we will update the “Last updated” date and post the updated policy on this Site.
We encourage you to review this Policy periodically. Your continued use of the Site after changes are posted indicates your acceptance of those changes.
11. Applicability
This Privacy Policy applies only to personal information collected via our Site contact forms. If we expand our services or data collection (e.g., cookies, analytics, third-party integrations), we will update this Policy to cover those practices.