What we collect
When you submit the enquiry form on our Contact page, we collect your name, work email address and phone number; your organisation's name and details; your state, territory or country; the standards you are interested in; the number of locations and approximate personnel count; your proposed certification scope; your timing preferences; and any existing certification details. We use this information to scope and respond to your certification enquiry. We may also collect personal information when someone asks for a quotation, discusses a proposed certification engagement, applies to work as an auditor or contractor, or raises a complaint, appeal or impartiality concern.
If certification activities begin, records may include names, work contact details, roles and qualifications; information supplied in applications and quotations; audit plans, notes, evidence, findings and reports; certification decisions; and records needed to manage complaints and appeals. Audit material may contain personal information about client personnel or other people. We ask clients and auditors to provide only information reasonably needed for the certification activity.
We do not ask for sensitive information unless it is reasonably necessary for a lawful activity and can be handled appropriately.
How we collect and use it
We generally collect information directly from the person concerned, from a client organisation, or from an auditor or other person participating in certification activities. We use it to respond to enquiries, prepare quotations, assess applications, plan and conduct audits, make and maintain certification decisions, manage auditor competence and availability, address complaints or appeals, protect impartiality, meet legal and accreditation requirements, and keep appropriate business records.
We do not sell personal information or use certification records for unrelated advertising.
When we may disclose it
We may disclose relevant information to personnel and contracted auditors who need it for their work; service providers supporting secure communications, document storage or business administration; professional advisers; JASANZ or another authorised oversight body as part of an application, assessment or complaint; and regulators or other parties where disclosure is required or authorised by law. We limit disclosure to what is reasonably needed for that purpose and use confidentiality controls appropriate to the information.
Some service providers may store or process information outside Australia. Webflow, which hosts this website and stores enquiry form submissions, Cloudflare, which provides the captcha check on the enquiry form, and Google, which provides website analytics, process information in the United States and other countries where their systems operate. Before certification operations commence, we will review the providers used and update this statement if more specific overseas locations can be identified.
Website information
This website is hosted by Webflow, which stores and processes enquiry form submissions on our behalf. When you submit the enquiry form, the details you enter are stored by Webflow and a notification email is sent to info@acscert.com.au. The form uses Cloudflare Turnstile, a captcha service that checks whether each submission comes from a person rather than a bot, and Cloudflare processes limited technical information about the browser or device to make that check. This website uses Google Analytics to understand how visitors use the site. Google Analytics sets cookies and collects information including pages visited, approximate location derived from IP address, browser and device type, and referring website. We use that information in aggregate to improve the website. It is not used to identify individual visitors and is not combined with information provided through enquiry, complaint or appeal forms. Browser settings and browser extensions can be used to block this collection. This website does not provide user accounts or use advertising cookies. Ordinary server logs may record technical information such as an IP address, browser type, requested page and time of access for security and service operation. If further analytics or cookies are introduced, this statement will be updated before they are used.
Storage, security and retention
We use access controls, confidentiality obligations and appropriate technical and organisational safeguards to reduce the risk of misuse, interference, loss, unauthorised access, modification or disclosure. No method of storage or transmission is completely secure.
We retain personal information only for as long as it is reasonably needed for certification, accreditation, legal or business-record purposes. When it is no longer required, we take reasonable steps to delete it or de-identify it, subject to any lawful retention requirement.
Access and correction
You may ask to access personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, email privacy@acscert.com.au. We may need to verify your identity. If an exception under law applies, we will explain our decision where required.
Privacy enquiries and complaints
Contact us if you have a question about this statement, want access or correction, or believe personal information has been mishandled.
- Email: privacy@acscert.com.au
We will acknowledge a privacy complaint and explain the next steps. Our Complaints and appeals page explains how we handle complaints and appeals about our certification activities. If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner. See oaic.gov.au/privacy/privacy-complaints.
Changes to this statement
We will review this statement as operations, systems and legal obligations develop. The current version will be published on this page with its effective date. This version is effective from 12 September 2026.