Privacy Policy

Version	Date	Author	Status
1.0	May 2026	Adam Torta	Active

1. About This Policy

ATCL Consulting Pty Ltd (ACN: 675 516 435) (‘ATCL’, ‘we’, ‘us’) is a construction advisory consultancy based in South East Queensland. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We are committed to handling personal information responsibly and transparently. If you have any questions about this policy, please contact us using the details at the end of this document.

2. What Personal Information We Collect

In the course of providing advisory services, ATCL may collect the following types of personal information:

• Names, job titles, and contact details of individuals at client organisations
• Personnel and workforce information provided as part of engagement scope (e.g. incident registers, workforce records)
• Contractor and subcontractor details
• Signatures on agreements and correspondence
• Financial information relevant to claims, variations, or commercial assessments
• Any personal information contained in documents provided to ATCL by clients

We collect only the personal information that is necessary for the specific engagement. We do not collect sensitive information (such as health or biometric information) unless it is directly relevant to the scope of work and you have consented to its collection.

3. How We Collect Personal Information

Personal information is collected through:

• Direct engagement with clients, their staff, and their contractors
• Documents, records, and data provided by clients as part of an advisory engagement
• Email, telephone, and written correspondence
• Site visits and observations

4. Why We Collect Personal Information

Personal information is collected and used for the following purposes:

• Delivering the advisory services described in the engagement agreement
• Preparing reports, analyses, claims, or recommendations on behalf of clients
• Communicating with clients and their representatives
• Complying with legal and contractual obligations
• Managing the business relationship with clients

We will not use personal information for any purpose other than those described above without obtaining your consent, unless required by law.

5. How We Store and Protect Personal Information

ATCL takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

• Storage of all business files in Microsoft 365 Business Premium (SharePoint and OneDrive for Business) with access restricted to authorised ATCL personnel
• Multi-factor authentication required for access to all systems holding personal information
• Full disk encryption on all devices used for business purposes
• A four-layer backup architecture including offsite and cloud backup
• Password management via a dedicated password manager with unique credentials per system
• Email authentication (SPF, DKIM, DMARC) to protect against email-based fraud and impersonation

Personal information is stored in Australia (Microsoft 365 Australian data centres) and backed up to US-based cloud storage (Backblaze) under data processing agreements that meet Australian Privacy Principle requirements.

6. Disclosure of Personal Information

ATCL does not sell, rent, or trade personal information. We may disclose personal information in the following limited circumstances:

• To third parties who assist us in providing services (e.g. cloud storage providers, software platforms), under confidentiality obligations
• When required or authorised by law (e.g. in response to a court order or regulatory requirement)
• With your consent

We do not disclose personal information to overseas recipients except where necessary for cloud storage services operating under appropriate data protection frameworks.

7. Data Retention

Personal information is retained for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Upon completion of an engagement:

• Active working files are archived to long-term storage
• Personal information no longer required for legal or business purposes is securely deleted or de-identified
• Backup copies are purged in accordance with our backup retention schedule

8. Access and Correction

You have the right to request access to personal information we hold about you, and to request correction of any inaccurate, incomplete, or out-of-date information. To make a request, please contact us using the details below. We will respond within 30 days.

There is no charge for making an access or correction request, however we may charge a reasonable fee for providing access in certain circumstances.

9. Complaints

If you believe we have not handled your personal information in accordance with this policy or the Australian Privacy Principles, please contact us in writing. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Changes to This Policy

This policy is reviewed annually and may be updated from time to time. The current version is available at atclconsulting.com.au and on request.

11. Contact

Name	Adam Torta, Director – Principal Consultant
Business	ATCL Consulting Pty Ltd
Email	adam@atclconsulting.com.au
Phone	0434 948 955
Address	Gold Coast, Queensland, Australia

Prepared by ATCL Consulting – Construction Insight. Commercial Confidence.
E: adam@atclconsulting.com.au  |  M: 0434 948 955