1. About this policy

This policy explains how Gentle Advisory collects, uses, stores and discloses personal information.

Gentle Advisory is the business name of Nicola Gentle, ABN 740 518 793 02 (I, me, my). I handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

This policy applies to personal information collected through gentleadvisory.com.au [confirm domain], by email, by phone, at events and in the course of consulting engagements.

When I work with a client, personal information handled during that engagement is also covered by the confidentiality and privacy terms in my Terms of Engagement.

2. What I collect

I collect only what I need to respond to you, deliver my services and run my business. This may include:

• your name, job title and organisation
• contact details, such as email address and phone number
• information you share about your organisation and the situation you want help with, including in a diagnostic call
• records of our correspondence and meetings
• billing details, such as the entity to invoice and its ABN
• technical information about your visit to my website, such as IP address, browser type and pages viewed

I do not seek to collect sensitive information, such as health information or political opinions. Please don't include it when you contact me. If it is relevant to an engagement, I will only collect it with your consent.

You can contact me anonymously or under a pseudonym for general enquiries. I will need your name and contact details to book a diagnostic or provide services.

3. How I collect it

I collect personal information directly from you where I can. This includes when you:

• complete a form on my website
• book a diagnostic or meeting
• email, call or message me, including on LinkedIn
• subscribe to updates
• work with me on an engagement

Sometimes I receive information from someone else, such as a person who refers you to me, or a client who introduces you as a stakeholder in an engagement. I also collect some technical information automatically when you visit my website (see section 6).

4. Why I collect it and how I use it

I use personal information to:

• respond to enquiries and arrange diagnostic calls
• scope, propose and deliver consulting services
• manage client relationships, invoicing and records
• send updates you have asked to receive
• improve my website and understand how it is used
• meet my legal, tax and insurance obligations

I do not sell personal information. I do not use automated decision-making that significantly affects your rights or interests.

If I don't receive the information I need, I may not be able to respond to your enquiry or provide services.

5. Who I share it with

I share personal information only where needed for the purposes above, or where required or authorised by law. This includes:

• service providers who run my website, email, booking, storage and accounting systems
• my professional advisers, such as my accountant, lawyer and insurer
• subcontractors who help deliver an engagement, who are bound by confidentiality obligations

The service providers I currently use are:

Some of these providers store data outside Australia, including in the United States. I take reasonable steps to use reputable providers with appropriate security and privacy protections.

6. Cookies and analytics

My website uses cookies and similar technologies to make it work and to understand how visitors use it.

Some pages may include content from third parties, such as Google Fonts,  LinkedIn, which may collect your IP address.

You can block or delete cookies through your browser settings. Some parts of the site may not work properly if you do.

7. Email updates

I only send marketing emails if you have opted in, or where the Spam Act 2003 (Cth) otherwise allows it. Contacting me or booking a diagnostic does not add you to a mailing list.

8. Security and retention

I take reasonable steps to protect personal information from misuse, loss and unauthorised access. These include password-protected accounts with multi-factor authentication, secure cloud storage and limiting access to people who need it.

I keep personal information only as long as I need it for the purposes above or as required by law. Client and financial records are generally kept for seven years to meet tax obligations. After that, I securely delete or de-identify them.

If a data breach is likely to cause you serious harm, I will notify you and, where required, the Office of the Australian Information Commissioner (OAIC).

9. Access, correction and complaints

You can ask to see the personal information I hold about you, or ask me to correct it. I will respond within 30 days. If I can't give you access, I will explain why.

If you have a concern about how I have handled your information, please contact me first. I will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with my response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Contact Nicola Gentle, Gentle Advisory Email: nicola@gentle-advisory.com.au  Phone: 0429 098 710  Post:PO Box 333 Junee NSW 2663

10. Changes to this policy

I may update this policy as my business, tools or the law change. The current version will always be on this page.

Last updated: 4 October 2026