Privacy Policy

SAGE WORKPLACE ADVISORY PTY LTD

Privacy Policy

ABN: 35 702 685 096

Email: sageadvice@sageworkplaceadvisory.com.au | Phone: 0435 73 SAGE (7243)

Effective date: 6 October 2026

Review date: 6 October 2027


1. Purpose

SAGE Workplace Advisory Pty Ltd (SAGE, we, us or our) respects privacy and is committed to handling personal information in a fair, lawful, secure and transparent manner. This Privacy Policy explains how SAGE collects, holds, uses and discloses personal information in connection with its professional services and business activities.

2. Our services
 

• SAGE provides professional workplace advisory services, including:

• Workplace investigations, including OHS investigations;

• Mediations and conflict resolution;

• Employee relations and industrial relations (ER/IR) advisory; and

• Corporate governance and compliance advisory.

SAGE may handle information about employees, workers, managers, executives, directors, contractors, complainants, respondents, witnesses, clients and other individuals in performing these services.

3. Personal information we may collect
 

• Depending on the nature of an engagement, SAGE may collect and hold personal information including:

• Identity and contact details;

• Employment, position, organisational and professional information;

• Information contained in complaints, allegations, grievances, incident reports, policies and other workplace records;

• Interview notes, statements, correspondence, meeting records and evidence;

• Information concerning workplace conduct, performance, disputes and relationships;

• OHS, injury, health and safety information where relevant to an engagement;

• Information necessary for mediation, ER/IR advice or governance and compliance reviews;

• Billing, payment and business relationship information; and

• Technical information associated with website use or electronic communications.

4. Sensitive information

Some matters may involve sensitive information, including health information, information about disability or injury, racial or ethnic information, religious or philosophical beliefs, political opinions or associations, professional or trade association or trade union membership, criminal-record information and other information treated as sensitive under applicable privacy law.

SAGE will only collect sensitive information where it is reasonably necessary for SAGE's functions or activities and the individual has consented, or where collection is otherwise permitted or required by applicable law. SAGE will use and disclose sensitive information only as permitted or required by applicable law.

5. How we collect information

SAGE generally collects information directly from the individual. In investigations and other professional engagements, SAGE may also collect information from a client, employer, complainant, respondent, witness, manager, adviser, regulator, tribunal, court or another person who is authorised or permitted to provide it.

Information may also be obtained from documents, email, telephone or video interviews, meetings, online forms and appropriate publicly available sources.

6. Why we collect and use information
 

• SAGE may collect, use and hold personal information to:

• Conduct and report on workplace and OHS investigations;

• Plan and facilitate mediations and conflict resolution processes;

• Provide ER/IR advisory services;

• Conduct governance and compliance reviews;

• Communicate with clients, participants and professional advisers;

• Prepare proposals, engagement documents, reports and invoices;

• Maintain professional records and meet legal, contractual and regulatory obligations;

• Protect the security and integrity of our systems and information; and

• Manage and improve our business and services.

7. Investigation confidentiality

Information provided to SAGE during an investigation may be treated as confidential within the scope of the engagement. Confidentiality does not mean that information can never be disclosed.

Information may need to be reported or disclosed to the client, relevant decision-makers, legal advisers, regulators, courts, tribunals, emergency services or other persons where reasonably necessary for the engagement, with the individual's consent where required, or where otherwise permitted or required by law.

8. Disclosure to third parties
 

• SAGE may disclose personal information to:

• The organisation or person who engaged SAGE and their authorised representatives;

• SAGE personnel and contractors who need the information to perform the engagement;

• Legal, accounting, insurance, technology and other professional advisers;

• Secure technology, hosting, document management, communication and administrative service providers;

• Courts, tribunals, regulators, government bodies or law enforcement where required or authorised; and

• Other persons where consent has been provided or disclosure is otherwise permitted or required by law.
  
  SAGE does not sell personal information.

9. Overseas handling

Some technology and cloud service providers used by SAGE may store or process information outside Australia. The location of processing may change as service providers change.

SAGE will take reasonable steps required by applicable privacy law when personal information is disclosed to an overseas recipient and will use appropriate contractual, technical or organisational safeguards where appropriate.

10. Security

SAGE takes reasonable steps to protect personal information against misuse, interference and loss and against unauthorised access, modification or disclosure. Measures may include access controls, authentication, secure cloud services, confidentiality obligations, controlled sharing, secure disposal and incident response procedures.

11. Retention and disposal

SAGE retains information for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, contractual, insurance, professional or business requirements.

When information is no longer required and no retention obligation applies, SAGE will take reasonable steps to securely destroy it or de-identify it.

12. Website and communications

Our website may collect information supplied through enquiry forms and ordinary technical information associated with website use. SAGE may use cookies or similar technologies for functionality, security, analytics or performance.

Third-party website, hosting or analytics providers may process information under their own terms and privacy policies.

13. Direct marketing

SAGE may send professional updates or information about its services where permitted by law. Individuals may opt out of direct marketing communications at any time.

14. Access and correction

Individuals may request access to personal information SAGE holds about them or request correction of information that is inaccurate, incomplete, out of date or misleading. Requests should be sent to sageadvice@sageworkplaceadvisory.com.au.

SAGE may need to verify identity and may be permitted or required to refuse access in particular circumstances.

15. Privacy complaints

Privacy concerns should first be raised with SAGE at sageadvice@sageworkplaceadvisory.com.au. SAGE will investigate and respond within a reasonable period.

If a concern cannot be resolved, an individual may be able to complain to the Office of the Australian Information Commissioner (OAIC).

16. Data breaches

SAGE maintains an internal data breach response process. Where an incident may constitute an eligible data breach under the Privacy Act 1988 (Cth), SAGE will assess the incident and comply with applicable notification requirements.

17. Anonymity and pseudonyms

SAGE will accommodate anonymity or pseudonyms where lawful and reasonably practicable. This may not be possible where identification is necessary to conduct an investigation or mediation, provide advice, establish authority, meet contractual requirements or comply with law.

18. Third-party websites

Links from the SAGE website to third-party websites do not mean SAGE controls those websites. Their privacy practices are governed by their own policies.

19. Changes to this policy

SAGE may update this policy to reflect changes to its services, systems, service providers or legal obligations. The latest version will be published on the SAGE website.

20. Technology, transcription and AI-assisted services

SAGE uses Microsoft 365 as a core business and information-management environment. Depending on the Microsoft 365 service used and its configuration, customer information may be stored or processed in Australian or other Microsoft global infrastructure. SAGE will configure and use Microsoft 365 services in a manner appropriate to the sensitivity of the information and applicable privacy and contractual requirements.

SAGE may also use PLAUD, or another approved transcription service, to assist with the transcription or summarisation of interviews or meetings. Where such a service is used, audio recordings, transcripts or other information may be processed using cloud and AI services, including infrastructure or service providers located outside Australia.

Before using an AI-assisted transcription service, SAGE will consider the nature and sensitivity of the matter, applicable engagement terms, participant expectations, consent requirements and cross-border privacy requirements.

SAGE will not use AI tools as a substitute for professional judgment. AI-generated transcripts, summaries or other outputs will be reviewed by an appropriately authorised SAGE professional before they are relied upon for an investigation report, advice, finding or other material professional outcome.

Where appropriate, SAGE may choose not to use AI-assisted transcription for highly sensitive matters or may use a configuration or service that provides additional privacy, retention or contractual controls.

SAGE will not knowingly use personal information supplied through an engagement to train a public or general-purpose AI model unless this is expressly authorised and lawfully permitted. SAGE will assess the terms, privacy controls, data-use practices and retention settings of any AI or transcription provider before using that provider for client or participant information.

21. Contact

For privacy enquiries, access or correction requests, or complaints, please contact:

SAGE Workplace Advisory Pty Ltd

ABN 35 702 685 096

Email: sageadvice@sageworkplaceadvisory.com.au

Phone: 0435 73 SAGE (7243)