Privacy Policy

Last updated: 15 August 2026

1. About this policy

Operational Fortitude Pty Ltd (“Operational Fortitude”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit our website, contact us or engage with our services.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Personal information we collect

The personal information we collect depends on how you interact with us. It may include:

  • your name;
  • email address and other contact details;
  • business name;
  • your role in the business;
  • information included in an enquiry or message;
  • information about your business operations, systems, processes, responsibilities and operational challenges;
  • records of our communications with you; and
  • technical information associated with your use of our website, such as your IP address, browser, device type, referring website and pages viewed.

We generally do not request sensitive information through our website. If you voluntarily provide sensitive information, we will handle it only where reasonably necessary for the purpose for which it was provided or as otherwise permitted by law.

3. How we collect personal information

We generally collect personal information directly from you when you:

  • submit a contact or enquiry form;
  • communicate with us by email, telephone or another method;
  • meet or consult with us;
  • request information about our services; or
  • engage Operational Fortitude to provide services.

We may also collect information from publicly available sources, people or organisations authorised by you, professional advisers, referral partners and our website or technology providers.

4. Why we collect and use personal information

We may collect, hold and use personal information to:

  • respond to enquiries and communicate with you;
  • understand your business circumstances and operational challenges;
  • assess whether our services are suitable for your needs;
  • provide business resilience reviews and related services;
  • prepare proposals, recommendations and practical action plans;
  • manage our client and business relationships;
  • administer, maintain and improve our website and services;
  • protect the security and integrity of our systems;
  • meet legal, regulatory, insurance and record-keeping obligations; and
  • exercise or defend our legal rights.

We do not sell or rent personal information.

5. Disclosure of personal information

We may disclose personal information where reasonably necessary to:

  • employees, contractors or consultants who assist us in providing our services;
  • website hosting, email, cloud storage, analytics and other technology providers;
  • accountants, insurers, lawyers and other professional advisers;
  • regulators, government agencies, courts or law-enforcement bodies where required or authorised by law;
  • another party involved in a proposed or completed sale, transfer or restructuring of our business; or
  • another person or organisation with your consent.

We take reasonable steps to limit disclosures to the information required for the relevant purpose.

6. Overseas processing and storage

Some service providers used to operate our website and business systems may store or process information outside Australia, including in the United States and other countries in which those providers operate.

Privacy and data-protection laws in those countries may differ from Australian law. Where applicable, we take reasonable steps to ensure overseas recipients handle personal information appropriately.

7. Website hosting, analytics and cookies

Our website is hosted by Squarespace. Squarespace and its service providers may collect technical information and use cookies or similar technologies to operate the website, protect it from misuse and understand how visitors interact with it.

Cookies are small data files stored on your device. You can usually control or disable cookies through your browser settings. Disabling certain cookies may affect how the website functions.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and you should review their privacy policies separately.

8. How we protect personal information

We take reasonable administrative, technical and physical measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include access controls, password protection, secure technology platforms and limiting access to people who require the information for legitimate business purposes.

No internet transmission or storage system is completely secure. We cannot guarantee absolute security, but we will respond appropriately if we become aware of a suspected data breach.

9. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, to maintain appropriate business records, or to meet legal, regulatory, insurance and professional obligations.

When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to any lawful record-retention requirements.

10. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

To make a request, contact us using the details below. We may need to verify your identity before providing access or making a correction.

In some circumstances, we may be permitted to refuse access or correction. If this occurs, we will explain the reason where required or appropriate.

11. Privacy enquiries and complaints

If you have a question or concern about how we handle personal information, please contact us through the Contact Us page and include “Privacy enquiry” or “Privacy complaint” in your message.

We will acknowledge and investigate privacy complaints within a reasonable period and aim to provide a response within 30 days.

If you are not satisfied with our response and the Privacy Act applies to the matter, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

12. Changes to this policy

We may update this Privacy Policy when our information-handling practices, services or legal obligations change.

The current version will be published on our website, and the “Last updated” date will identify when it was most recently revised.

13. Contact us

Operational Fortitude Pty Ltd

Website: www.operationalfortitude.com.au

For privacy enquiries, access or correction requests, or complaints, please use our Contact Us page.