Draft for legal review · Last updated 6 August 2026
1. Purpose and scope
This policy explains how Merita collects, uses, stores and discloses personal information. It is intended to align with the Australian Privacy Principles where they apply. It is not legal advice and should be reviewed before commercial launch.
2. Information we may collect
Merita may collect contact details, organisation and role information, enquiry content, service records, billing information and information provided during a scoped engagement. Please do not include participant health information or other sensitive information in the website enquiry form.
3. How information is collected and used
Information may be collected directly through email, meetings, contracts, workshop administration and service delivery. It may be used to respond to enquiries, scope and deliver services, maintain business records, improve services and meet legal obligations.
4. Website enquiry
The contact form currently uses an email fallback. Merita has prepared a controlled Microsoft Power Automate workflow in an Australian Power Platform environment for future direct submission. If activated, it will send only the contact and operational information you choose to provide to Merita's Microsoft 365 mailbox. A hidden spam field and submission timing value may also be processed to reduce automated abuse. Please do not include participant health information or other sensitive information.
5. Website measurement
No analytics provider is enabled by default. Merita may enable a cookieless, privacy-respecting analytics service to measure page visits and general website performance. If a future tool uses non-essential cookies or comparable tracking, Merita will update this policy and introduce an appropriate consent control before enabling it.
6. Disclosure and service providers
Merita may use authorised technology, professional and administrative service providers. Personal information will not be sold. Where a service provider handles information, access and purpose should be limited by contract and operational controls.
7. Storage, security and retention
Merita will take reasonable steps to protect information from misuse, interference, loss and unauthorised access. Retention periods should reflect the engagement, legal requirements and legitimate business needs.
8. Access, correction and complaints
You may request access to or correction of personal information, or raise a privacy concern, by emailing support@npsconsulting.com.au. Merita will respond within a reasonable period and explain any lawful reason a request cannot be completed.
9. Business details
Trading entity: [legal entity to be supplied]. ABN: [to be supplied]. Business name registration details: [to be supplied]. These placeholders must be completed before commercial launch.