Privacy policy

Last updated: 17 July 2026

Who we are

Creative Directions Management Consulting Pty Ltd (ABN 78 655 132 166) — referred to in this policy as CDMCG, "we" or "us" — is a Sydney-based consultancy providing ISO 9001, 14001 and 45001 certification-readiness consulting and work health and safety consulting to clients across Australia.

We're committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles — whether or not the law strictly requires that of a business our size. This policy covers our website (cdmcg.com.au) and the information we collect when you enquire, book a call, download our guide or work with us.

What we collect

• Enquiry details — when you use our contact form: your name, company (optional), email, phone (optional) and your message.
• Booking details — when you book a call through our online booking page: your name, email, phone and the time you choose.
• Guide download details — when you request our free guide: your name and email.
• Correspondence — emails, call notes and documents you send us in the ordinary course of enquiring or working together.
• Website analytics — pages viewed, approximate location, device and browser type, collected through cookies and similar identifiers (see the analytics section below).
• Engagement records — if you become a client, the business information needed to deliver the work. Client information is treated as confidential regardless of whether it is personal information.

We don't collect more than we need, and we never ask for sensitive information through the website.

Why we collect it

• To respond to your enquiry — normally within one business day.
• To run the call you booked and prepare for it properly.
• To send you the guide you requested, plus the occasional practical note on certification and prequalification — and you can unsubscribe anytime, or simply reply and say so; either way you come off the list straight away. We don't use the guide list for anything beyond that.
• To deliver consulting engagements, invoice for them and keep proper business records.
• To understand which parts of the website are actually useful, so we can improve it.

We don't sell, rent or trade personal information. Ever.

Cookies and analytics

This site sets no cookies of its own. The only cookies and similar identifiers come from Google Analytics 4, which we use to measure how the site is used — pages viewed, how visitors arrive, approximate location and device type. Google processes this on our behalf; Google states that GA4 does not log or store full IP addresses, and approximate location is derived from the IP address during collection.

You can opt out of Google Analytics with the Google Analytics opt-out browser add-on, or by blocking cookies in your browser settings. The site works fine either way.

Where your information goes

Enquiries, bookings and guide requests submitted through the website are delivered to us through an automation service (Zapier) and stored in our client management system (Zoho Bigin), so nothing you send us falls through a crack. Beyond that, we share personal information only with:

• Service providers that help us run the business, under obligations of confidentiality — form delivery and automation (Zapier), our client management system (Zoho Bigin), email and documents (Microsoft 365), accounting (Zoho Books), website analytics (Google Analytics) and website hosting;
• Professional advisers or certification bodies, only where you've asked us to (for example, helping you obtain quotes from certifiers) or with your knowledge as part of an engagement;
• Anyone the law requires us to — and only what it requires.

Overseas disclosure

Some of our service providers are based overseas or store information there. Zapier and Google are US-based, and Microsoft and Zoho may store information in the United States or other regions. Where information goes overseas, we take reasonable steps to make sure it's handled consistently with the Australian Privacy Principles.

How long we keep it

We keep enquiry and booking records while there's a live conversation or a reasonable prospect of working together. Beyond that, we keep personal information only for as long as we need it for the purposes described above, or for as long as the law requires us to keep certain business and financial records — after which it's destroyed or de-identified. If you unsubscribe from the practical notes, you come off that list immediately.

How we protect it

Personal information is held in access-controlled systems, and access is limited to the people who need it to do the work. No transmission or storage is perfectly secure, but we take reasonable steps to protect what you give us and we don't keep what we no longer need.

If a data breach is ever likely to result in serious harm, we'll notify the people affected and, where required, the Office of the Australian Information Commissioner (OAIC).

Access and correction

You can ask us at any time for a copy of the personal information we hold about you, and ask us to correct anything that's wrong or out of date. Contact us using the details below — we don't charge for reasonable requests, and we'll respond within a reasonable time, aiming for 30 days at most.

Complaints

If you think we've mishandled your personal information, tell us first — write to email us with "Privacy" in the subject line. We'll acknowledge your complaint, look into it properly and aim to respond within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au or 1300 363 992.

Contact us

Creative Directions Management Consulting Pty Ltd (ABN 78 655 132 166)
PO Box 2851, Carlingford NSW 2118
email · 02 8014 7575

Changes to this policy

If we change how we handle personal information, we'll update this page and the date at the top. The current version always lives at cdmcg.com.au/privacy.html.