Your Information. Handled Properly.

This Privacy Policy explains how Meridian ISO Pty Ltd (ABN 19 663 155 351) (“Meridian ISO”, “we”, “us”, “our”) collects, uses, discloses and protects personal information when you visit meridianiso.com (the “Website”), contact us, or subscribe to our communications.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we deal with people in New Zealand, we also aim to handle their information in line with the Privacy Act 2020 (NZ) and its Information Privacy Principles (IPPs).

By using the Website or giving us your personal information, you acknowledge that we will handle it as set out in this policy.

Information you give us directly

For example, when you complete our enquiry form, call us on 1300 438 476, email us, or subscribe to our newsletter:

Information collected automatically

When you use the Website, through cookies, analytics tools and advertising pixels:

Information from third parties

Sometimes we may receive information about you from others, such as a colleague who names you as a contact for their organisation’s project.

Sensitive information and anonymity

We don’t ask for sensitive information (such as health information, racial or ethnic origin, or political or religious views) through the Website. Please don’t include it in enquiry forms.

You can browse the Website without telling us who you are. If you contact us, you can ask to use a pseudonym, but we may not be able to properly answer your enquiry or provide a quote without your real contact details.

We use personal information to:

We won’t use your personal information for any other purpose unless you have consented, you would reasonably expect it, or the law allows or requires it.

Cookies are small files stored on your device. We and our service providers use cookies and similar technologies (such as pixels and tags) to make the Website work, remember your preferences, analyse traffic and deliver and measure advertising.

We currently use:

These providers may collect information about your use of the Website and other websites over time, and may combine it with information they already hold about you (for example, if you are logged in to their platform).

Your choices

If you subscribe to our newsletter or otherwise agree to hear from us, we may send you emails about ISO standards, compliance updates, events and our services. We send commercial electronic messages in line with the Spam Act 2003 (Cth) and, for New Zealand recipients, the Unsolicited Electronic Messages Act 2007 (NZ).

Every marketing email includes an unsubscribe link. You can also opt out at any time by contacting us (see section 12). We’ll action opt-out requests within five business days. We may still send you service-related messages, such as replies to your enquiries.

We may disclose personal information to:

We require our service providers to handle personal information only for the purposes we engage them for and to protect it appropriately.

You can ask to see the personal information we hold about you, and ask us to correct it if it’s inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details in section 12.

We’ll respond within a reasonable time, usually within 30 days (20 working days for New Zealand requests). We may need to verify your identity first. We won’t charge you for making a request, but we may charge a reasonable fee for providing access in some cases. If we refuse your request, we’ll tell you why in writing and explain how you can complain.

Some of our service providers store or process information outside Australia. This means your personal information may be held or accessed in other countries, including the United States (where our CRM, analytics and advertising providers, such as HubSpot, Google and Meta, primarily store data) and other countries where those providers operate. As our services expand, information may also be held in New Zealand.

Where we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs, for example by using reputable providers with appropriate contractual privacy and security commitments.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. These include secure (HTTPS) connections on the Website, restricting access to personal information to staff who need it, and using reputable cloud providers with strong security controls.

No method of transmitting or storing information online is completely secure, so we can’t guarantee the security of information you send us over the internet.

We keep personal information only for as long as we need it for the purposes in this policy or as the law requires. After that, we take reasonable steps to securely destroy or de-identify it.

Data breaches

If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme. For New Zealand residents, we’ll notify you and the NZ Office of the Privacy Commissioner of any notifiable privacy breach.

We don’t currently use computer programs to make decisions about you that could significantly affect your rights or interests. If this changes, we’ll update this policy to explain what kinds of personal information are used and what kinds of decisions are made.

You can ask to see the personal information we hold about you, and ask us to correct it if it’s inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details in section 12.

We’ll respond within a reasonable time, usually within 30 days (20 working days for New Zealand requests). We may need to verify your identity first. We won’t charge you for making a request, but we may charge a reasonable fee for providing access in some cases. If we refuse your request, we’ll tell you why in writing and explain how you can complain.

If you have a concern about how we’ve handled your personal information, please contact our Privacy Officer first (see section 12). We’ll acknowledge your complaint promptly and aim to resolve it within 30 days.

If you’re not satisfied with our response, you can contact:

We may update this policy from time to time. We’ll publish the updated version on the Website with a new “Last updated” date. If we make significant changes, we may also let you know by email or a notice on the Website.