Malla and Co Pty Ltd and its related entities (“we”, “us”, “our”) respect your privacy and are committed to protecting the personal information you share with us. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can review the Principles at the OAIC website (https://www.oaic.gov.au). This policy explains how we collect, use, disclose and secure your personal information. By providing personal information to us, you consent to the practices described in this policy. We may update this document from time to time and will post any changes on our website.

1. What is personal information?

Personal information is information or an opinion that can reasonably identify you. Examples include your name, postal or email address, telephone number and employment details.

2. How we collect personal information

We collect personal information in a variety of ways, including:

• when you engage us for advisory or project services

• when you complete a form on our website or contact us by phone, email or social media

• when you attend meetings, workshops or events hosted by us

• through publicly available sources and third-party referrals

• by using cookies and similar technologies on our website

Where reasonable, we collect information directly from you. If we receive information from a third party, we will take reasonable steps to ensure you are aware of the information provided.

3. Why we collect personal information

We collect personal information so we can:

• deliver advisory, project and staffing services to you

• communicate project updates, insights and marketing material you have requested

• manage client relationships, billing and administration

• improve our website, services and client experience

• comply with legal or regulatory obligations

We may also use your information for related secondary purposes you would reasonably expect, or when you have given consent.

4. Sensitive information

Sensitive information includes details about racial or ethnic origin, political opinions, religious beliefs, union membership, criminal history or health. We only collect sensitive information with your consent or when required or authorised by law. We use it only for the purpose for which it was provided, or a directly related purpose.

5. Disclosure of personal information

We do not sell, rent or trade personal information. We may share it with:

• trusted service providers who assist us with professional, technical or administrative functions

• advisors such as auditors, accountants or lawyers

• government or regulatory bodies where required by law

• any other party when you have given consent

Service providers are given access only to the information necessary to perform their function and must keep it confidential.

6. Security of personal information

We use industry-standard physical, electronic and managerial safeguards to protect personal information against loss, misuse and unauthorised access. Only authorised personnel have access, and they must keep that information confidential. While we strive to protect your information, no data transmission over the internet can be guaranteed to be fully secure. You use our website and provide information at your own risk.

7. Cookies and website analytics

Our website uses cookies to improve functionality and personalise your experience. Cookies are small files stored on your device that recognise repeat visitors. You may disable cookies through your browser settings, though some site features may not function as intended.

8. Access and correction

You have the right to request access to the personal information we hold about you and to correct it if it is inaccurate or incomplete. To do so, please contact us in writing. We may require verification of identity before releasing information. There is no charge for access requests, but we may apply an administrative fee for providing copies.

9. Links to other sites

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. Please review the privacy policies of any external sites you visit.

10. Complaints and enquiries

If you have a question or wish to make a complaint about how we handle your personal information, contact us at:

Email: harish.malla@mallaandco.com.au
Mail: Privacy Officer, Malla and Co Pty Ltd, Melbourne VIC 3000

We will acknowledge your query within two business days and aim to resolve any complaint within thirty days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Last updated: 06/08/2025