This Privacy Statement (“this Statement”) applies to “TAK website ”
(“we” or “us”), which includes both the TAK ADVICE business name of
Northface (aus) Pty Ltd and TAK Advice Pty Ltd and the entities it owns or
controls. We want you to know that we are committed to protecting
your privacy and handling your personal information in an open
and transparent way.
This Statement explains how we collect, handle, store and protect
personal information when:
- We provide professional services to you or our clients; You use “this Website”; or
- Perform any other activities that form part of the operation of our business.
When we refer to “this Website” we are talking about websites associated with TAK Advice Pty Ltd, Northface (aus) Pty Ltd and Michelle and Stacey Pty Ltd. This Statement also contains information about when we share information with TAK Advice Pty Ltd and Northface (aus) Pty Ltd and Michelle and Stacey Pty Ltd.
Are all areas of this Website covered by this statement?
All areas of this website are covered by this statement, except in the
instance of the Podcast area. If you are directed to the “Michelle and Stacey website” – the Podcast area of this website via the “TAK website” then all information relating to “Michelle and Stacey Podcast” is covered by the privacy policy on the
“Michelle and Stacey website”.
When handling personal information we will comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act) and other applicable legislation (such as Australian State and Territory health privacy legislation), as well as the Spam Act 2003 (Cth) and the Do Not Call Register Act
2006 (Cth).
The APPs are legally binding principles that are designed to ensure that individuals’ personal information is protected throughout the information lifecycle – that is, from the time the information is collected through to its destruction. The APPs also give individuals the right to access their personal information and have it corrected if it is incorrect. We take our obligations under the APPs, Australian State and
Territory privacy legislation and other applicable data protection laws seriously.
Information we collect when we provide professional services to our clients. We may be provided with personal information directly by our clients to enable us to deliver professional services or to perform due diligence checks before we agree to provide services. This information may relate to clients’ employees, members or customers
or it may relate to third parties (for example, the spouses and dependents of a client’s employees, members or customers).
As part of providing professional services to our clients, we may also collect personal information from other sources (such as directly from individuals themselves or information that is publicly available). The types of personal information we may collect or be provided with include, but are not limited to: Contact details;
Dates of birth; Gender; Employment records; Financial records; Complaint details.
We may also collect sensitive personal information (also called ‘special category information’). For example, where we are provided with such information directly by our clients to provide professional services, or where we collect information directly from individuals with their consent. This may include: Government identifiers such as drivers’ licence, passport and Medicare numbers and visa/work permit status;
Tax file numbers; Health records; Information about racial or ethnic origins;
Information about criminal convictions; Membership of a political association or membership of a trade union.
Where we are provided with personal information by a client, we take steps to ensure that the client has complied with the relevant obligations under applicable data protection laws in relation to that information; this may include, for example, that the client has provided you with notice of the collection (and other matters) and
has obtained any necessary consent for us to collect, use and disclose that information. We also collect personal information (such as contact details and
account details) from suppliers, contractors and third party service providers that we engage to help us operate our business.
We may collect personal information when performing other activities that form part of the operation of our business, but which do not directly form part of providing professional services to our clients. For example, we might collect personal information from members of the public as part of undertaking surveys, research on current issues or as part of projects or initiatives we are conducting with other
organisations. The types of information that we collect may vary depending on the
nature of the activity. However, we will take reasonable steps to provide clear information about the nature of those activities and the purpose for which we are collecting your information.
We may collect your personal contact details when you use this Website or when you attend a TAK event, a Michelle and Stacey event or an event sponsored by TAK or Michelle and Stacey. For example, if you sign up to receive promotional materials, thought leadership or communications about services provided by us or their related entities.
To improve your experience when you use this Website and ensure that it is functioning effectively, we also use cookies (small text files stored in a user’s browser) and Web beacons (electronic images that allow this Website to count visitors who have accessed a particular page and to access certain cookies). Additional information on how we use cookies and other tracking technologies and how you can control these can be found in our Cookie Notice.
We understand the importance of protecting childrens privacy. This Website is not designed for, or intentionally targeted at, children 15 years of age or younger. It is not our policy to intentionally collect or store information about anyone under the age of 15.
We use the personal information that we collect to provide clients with agreed services. We have an agreement with each client that governs the provision of our services and sets out the purposes for which we may use any information that the client provides to us (including any personal information). We use that information as permitted by the client agreement and we do not use that information for any other purposes, unless it is necessary to comply with a legal or professional right, obligation or duty. Because we provide a wide range of different types of services to
our clients, the way we use personal information also varies. For example, we might use personal information:
About a client’s customers to help the client improve the quality of the services they offer;
Collected by a client as part of their ordinary business activities in the course of helping that client restructure their business; and
Collected by a client as part of their ordinary business activities to help that client manage their cyber-security and other business risks.
When we collect personal information as part of performing other activities that form part of our business, we will take reasonable steps to provide clear information about the nature of those activities and how we will use any personal information collected. We may also use non-personal, de-identified and aggregated information for several purposes including for data analytics, research, submissions, thought leadership and promotional purposes.
We may use personal information that we collect from you via this Website, through your interactions with our firm and staff or through your attendance at events, to provide you with promotional materials, thought leadership or communications about services provided by us that we feel may be of interest to you. We may provide these materials to you directly (e.g. via email) or through third parties who provide us with marketing services (e.g. via your news feed in professional networking platforms).
We will not use your personal information collected via this Website or through other sources to market the goods and services of third parties to you without first notifying you and seeking your consent (usually through a separate privacy notice).
We may also use your personal information collected via this Website:
- To manage and improve this Website;
- To tailor the content of this Website to provide you with a more personalised experience and draw your attention to information about our services that we feel may be of interest to you;
- To seek feedback on our services; and
- For market or other research purposes (however, we will only ever report aggregated results of any research we undertake, and will never include your personal information in those results unless you explicity give us your consent).
We may also use personal information to protect our rights and those of our users or to comply with a legal or professional right or duty.
We will only disclose your personal information as set out below. Importantly, we will never sell your personal information to third parties for advertising purposes or disclose it for an unrelated secondary purpose without your authorisation.
We may disclose personal information to: Other entities in the TAK Advice, Northface (aus) amd the Michelle and Stacey Network; Third parties that we engage to assist us in providing professional services to our clients or in the operation of our
business (i.e. our subcontractors, advisors and suppliers).
Where we disclose your personal information to other entities in the Network (as defined above), or to third party service providers, we will take steps to ensure that those recipients implement appropriate safeguards to protect that information from unauthorised access, modification or disclosure, and from misuse, interference and loss. We may also be required to disclose personal information to law enforcement, regulatory or government agencies, or to other third parties: To comply with legal or regulatory obligations or requests; or where there is a legal or professional right or duty to disclose. We may share non-personal, de-identified and aggregated information with third parties for several purposes, including data analytics, research, submissions, thought leadership and promotional purposes.
This Website hosts various blogs, forums, wikis, and other social media applications or services that allow you to share content with other users (collectively ‘social media applications’). Importantly, any personal information that you contribute to these social media applications can be read, collected and used by other users of the application. We have little or no control over these other users and, therefore, we cannot guarantee that any information that you contribute to any social media applications will be handled in accordance with this Statement.
Certain data protection laws, require us to have a ‘legal basis’ for processing personal information. Where those laws apply, we may process your personal
information for the purposes outlined above because:
(a) You have consented to the processing of your personal information for those purposes;
(b) We have a legitimate interest in processing your personal information, which may be to: provide services to you and/or to the entity that has engaged us to provide the services; support the management of our client engagements; evaluate, develop or improve our services or products; or protect our business interests; or
(c) We are subject to legal, regulatory or professional obligations.
To the extent that we process any sensitive (special category) personal information about you for any of the purposes outlined above, we will do so because either:
(a) You have given us your explicit consent to process that information
(b) We are required by law to process that information, for example, in order to ensure we meet our ‘know your client’ and ‘anti-money laundering’ obligations;
(c) The processing is necessary to carry out our obligations under employment, social security or social protection law; or
(d) The processing is necessary for the establishment, exercise or defence of legal claims.
We hold personal information in hard copy and electronic formats. We use a range of physical, operational and technological security measures to protect this information. These measures include: Staff education and training to ensure our staff are aware their privacy obligations when handling your personal information; Administrative and technical controls to restrict access to personal information to only those people who need access; Technological security measures, including fire walls, encryption and anti-virus software;
You may access your personal information, or seek to have that information corrected if you believe that it is incorrect, at any time. To request access, or to correct your personal information, please contact the TAK Head office at Unit 2, 22 George Street Sandringham Vic, 3191. We will then get in contact with you (either by phone or via email) and will work with you to provide you with access to your
information or to determine whether it requires correction.
If you have any questions or concerns regarding your privacy, or if you would like to make a complaint, please contact the TAK head office at Unit 2, 22 George Street, Sandringham, VIC , 3191.
We take all the privacy complaints we receive seriously. We will acknowledge the receipt of a complaint promptly and will work with you to resolve it.
What if you are not satisfied with how we have handled your complaint? If you believe that TAK has not adequately handled your privacy complaint, you may complain to the Office of the Australian Information Commissioner (OAIC) whose contact details are as follows:
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
1300 363 992
enquiries@oaic.gov.au
For further information about privacy and the protection of privacy, visit the Office of the Australian Information Commissioner’s website at www.oaic.gov.au.
We may modify or amend this Privacy Statement from time to time. This statement was updated 23 July, 2025.