Get a Quote
1300 810 127
Get a Quote

Privacy Policy

Last updated: 25 September 2026

This website (psmg.com.au) and our consulting services are operated by ProShot Management Group Pty Ltd (ACN 652 670 632) as trustee of the trust that trades as ProShot Management Group (ABN 68 139 132 383) (“PSMG”, “we”, “us”, “our”). We provide ISO 9001, ISO 45001 and ISO 31000 management-system consulting services.

This policy explains what personal information we collect, why, who we share it with, and how you can access it, correct it or complain. It covers personal information we handle through our website, our online shop, our free resources, our emails and our consulting work.

1. The Australian Privacy Principles

Businesses with an annual turnover of $3 million or less are generally exempt from the Privacy Act 1988 (Cth). Whether or not that exemption applies to us, we have chosen to handle personal information in line with the Australian Privacy Principles (APPs), and this policy is written on that basis.

2. What we collect, and how

We only collect personal information we need for the purposes in this policy. Where a form field is optional, you can leave it blank.

2.1 Contact and quote forms.

  • Contact form (Contact Us page): your first name, last name, email address, subject and message.
  • Quote request form (Get a Free Quote page): the service you’re interested in, your name, company name, company website, email address, phone number and what you tell us about your business.

2.2 Free resources (downloads). When you ask for one of our free resources, such as our ISO 9001 resources or our ISO 45001 Readiness Scorecard, we collect your first name and email address, and, if you choose, your last name, phone number, company and country.

We use these details to send you the resource and to keep a record of your request. We only add you to our marketing emails if you tick the optional opt-in box on the form (see section 5).

2.3 Online shop and customer accounts. When you buy from our online shop or create an account, we collect your name, email address, phone number, billing address, company (if given), order details and account login details. Payment options include:

  • card payments, processed by Stripe;
  • PayPal, including PayPal card payments, Google Pay and Apple Pay;
  • direct bank transfer and cheque.

Some products may be bought on a recurring subscription through PayPal. Card and wallet payments are handled by Stripe or PayPal, and we do not see or store your full card number. If you pay by bank transfer or cheque, we receive the payer name and banking details that come with the payment.

2.4 Direct contact. When you phone us (1300 810 127), email us (info@pspmg.com.au) or meet us in person or online, we collect your name, contact details and the details of your enquiry.

2.5 Client engagements. When we provide consulting services, our clients may give us information about their own employees, contractors and visitors. For example, names in training records, incident reports, internal audit findings, corrective action records and nonconformance reports. Some of this may be sensitive information, such as health information in an injury or incident record. We handle it only to deliver the engagement, under our services agreement with the client and this policy. We ask clients to give us only what the work needs.

2.6 Working with us. If you apply for a role or offer your services as a subcontractor, we collect your application details (such as your CV, qualifications, referees and contact details) and use them to assess your application.

2.7 Website technical information. When you visit our website, our hosting and security providers automatically process technical information such as your IP address, browser type, the pages you visit, links you click and the time of your visit (see section 8).

2.8 Anonymity. You can browse our website without telling us who you are, and you can make a general enquiry using a pseudonym. To send you a resource, process an order or provide our services, we need your real contact details.

3. How we use personal information

We use personal information to:

  • respond to your enquiry or quote request;
  • send you a free resource you’ve asked for;
  • process orders and subscriptions, manage customer accounts and provide what you’ve bought;
  • provide quotes, proposals and consulting services, and administer engagements, including scheduling, invoicing and reporting;
  • send marketing emails, but only if you’ve opted in (section 5);
  • assess job and subcontractor applications;
  • keep our website secure and working, understand how it’s used, and improve our services; and
  • meet our legal obligations, including tax and record-keeping.

We don’t use your information for any other purpose unless you’ve agreed or the law requires or permits it.

We don’t make decisions about you using automated processes that significantly affect your rights or interests.

4. Who we share it with

We may share personal information with the following. Our service providers only use it to provide their service to us.

  • Website hosting: GoDaddy (Managed WordPress). Our website, form entries and shop orders are stored with GoDaddy.
  • Website security and performance: Cloudflare, which all traffic to our website passes through.
  • Email and document storage: Microsoft 365.
  • Payments: Stripe and PayPal.
  • Accounting: any accounting software provider we use to keep our financial records.
  • Certification bodies, where needed as part of a client’s certification pathway and with the client’s knowledge.
  • Professional advisers, such as our accountant, lawyer or insurer, where reasonably necessary.
  • Regulators, courts or authorities, where the law requires or permits it.

We don’t sell or rent personal information, and we don’t share our marketing list with anyone else.

5. Direct marketing

We only send you marketing emails if you’ve opted in, for example by ticking the optional opt-in box on one of our forms. These cover things like safety and quality management updates, news about our services and offers. Getting a free resource or a quote never depends on opting in.

Every marketing email identifies PSMG and has a working unsubscribe link. You can also unsubscribe by emailing info@pspmg.com.au. We act on unsubscribe requests within 5 working days.

If you ask, we’ll tell you where we got your details.

Some emails aren’t marketing and don’t depend on opting in, such as a download link, an order confirmation or a reply to your enquiry.

6. Overseas disclosure

Some of our service providers store or process personal information outside Australia. These include:

  • GoDaddy, Cloudflare, Stripe and PayPal, which are based in the United States and may process information there and in other countries where they operate; and
  • Cloudflare’s global network, which may process technical information about your visit (such as your IP address) at the data centre nearest you.

Microsoft 365 stores our email and documents in Australia, although Microsoft may access them from other countries to support and maintain its service.

We take reasonable steps to make sure these providers handle personal information consistently with the APPs.

7. Storage, security and retention

We store personal information electronically with our service providers, and use reasonable technical and organisational measures to protect it from misuse, interference, loss, and unauthorised access, change or disclosure. These include:

  • encrypted (HTTPS) connections across our whole website;
  • security filtering of website traffic;
  • restricted access to our website administration;
  • multi-factor authentication on our business accounts;
  • limiting access to the people who need it; and
  • leaving card payments to our payment providers.

We keep personal information only for as long as we need it for the purposes in this policy, or as the law requires. In particular:

  • download and enquiry records: 2 years after our last contact with you;
  • our marketing list: until you unsubscribe;
  • client engagement records: for the period set by our services agreement with the client and by law; and
  • financial records: at least 5 years, for tax purposes.

After that, we delete or de-identify it.

If a data breach is likely to cause serious harm to anyone affected, we will notify them and the Office of the Australian Information Commissioner (OAIC), in line with the Notifiable Data Breaches scheme.

8. Cookies and similar technologies

Our website uses cookies and similar technologies for the following purposes:

  • Security. Cloudflare sets a bot-management cookie (__cf_bm), which expires after about 30 minutes. The website can’t operate without it.
  • Shopping and accounts. WooCommerce uses cookies to run your cart, checkout and account login. Our payment providers (Stripe and PayPal) may set their own cookies on the cart and checkout pages to process payments and prevent fraud.
  • Hosting analytics. Our web host, GoDaddy, runs analytics as part of its hosting service. It measures site performance and usage, including pages viewed and links clicked.
  • Order attribution. WooCommerce records how you arrived at our site (for example, the referring website or campaign link) and how many pages you viewed, so we can see which sources lead to orders.

We have not installed Google Analytics, Google Tag Manager, the Meta (Facebook) Pixel, LinkedIn Insight, or any other advertising or cross-site tracking tool. If we add one, we’ll update this policy before it goes live.

You can block or delete cookies in your browser settings. Blocking cookies may stop parts of the site, such as the shop, from working.

9. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us (section 11). We may need to verify your identity first. We’ll respond within 30 days, and we don’t charge for making a request. If we refuse, we’ll tell you why in writing and how you can complain.

10. Complaints

If you think we’ve mishandled your personal information, contact us first (section 11). We’ll acknowledge your complaint promptly and aim to resolve it within 30 days.

If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: www.oaic.gov.au, phone 1300 363 992.

11. Contact us

ProShot Management Group
PO Box 2494, Rowville VIC 3178
Phone: 1300 810 127
Email: info@pspmg.com.au

12. Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.