Skip to main content

Privacy Policy

Last updated: 21 October 2026

Business Analyst Services (“we”, “us”, “our”) respects your privacy. This policy explains how we collect, use, disclose, store and protect personal information when you visit this website, contact us, or use our business analyst recruitment, talent community and advisory services.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where it applies to you, we also respect your rights under the EU and UK General Data Protection Regulation (GDPR).

What personal information we collect

The information we collect depends on how you interact with us. It may include:

  • Contact details — your name, email address, phone number, organisation and job title.
  • Enquiry details — the service you are interested in, the content of your message, and any report you request.
  • Candidate information — if you engage with us about BA roles: your CV, employment history, qualifications, skills, work preferences, referee details and notes from our conversations with you.
  • Client information — if your organisation engages us: the names and business contact details of the people we work with, and details of the roles you are hiring for.
  • Technical information — your IP address, browser and device type, pages visited and how you arrived at the site. We use this in aggregated form to keep the site secure and understand how it is used.

We do not intentionally collect sensitive information (such as health information, racial or ethnic origin, or criminal record) unless you choose to provide it, it is reasonably necessary for a role, and you consent — or the law requires or permits it.

How we collect it

We collect personal information directly from you wherever we can — for example when you complete our contact form, email or call us, send us your CV, or meet with us. We may also collect it from publicly available sources (such as professional networking profiles), from referees you nominate, or from a client or colleague who refers you to us. Technical information is collected automatically when you browse the site.

You can browse this website without telling us who you are. If you contact us, you may use a pseudonym where that is practical, but we may not be able to help you fully — for example, we cannot put you forward for a role anonymously.

Why we collect and use it

We collect, hold and use personal information to:

  • respond to your enquiries and send you any report you request;
  • provide our recruitment, talent community and advisory services;
  • assess candidates for roles, and with your consent introduce you to prospective employers;
  • manage our relationship with clients, candidates and partners;
  • operate, secure and improve this website, including preventing spam and abuse;
  • send you information about our services or events, where you have agreed to receive it; and
  • meet our legal, regulatory and record-keeping obligations.

Where the GDPR applies, we rely on your consent, the performance of a contract with you, our legitimate interests in running and promoting our business, or compliance with a legal obligation as the lawful basis for processing.

Who we disclose it to

We do not sell or rent your personal information. We only disclose it where needed for the purposes above, including to:

  • prospective employers or clients, when you are a candidate and have agreed to be put forward;
  • referees and verification providers you have authorised us to contact;
  • service providers who help us run our business, such as website hosting, email delivery, security and analytics providers;
  • our professional advisers, such as lawyers, accountants and insurers; and
  • government agencies, regulators or law enforcement where required or authorised by law.

Our service providers are only permitted to use your information to provide services to us, and must protect it appropriately.

Overseas disclosure

Some of our service providers store or process data outside Australia. In particular, this website is hosted by Vercel and our email is delivered by Resend, both of which may process information in the United States and other countries where they or their sub-processors operate. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the APPs.

Marketing communications

We will only send you marketing communications where you have agreed to receive them or the law otherwise permits it, in line with the Spam Act 2003 (Cth). Every marketing email includes a way to unsubscribe, or you can ask us to stop at any time by emailing gday@business-analyst.services.

Cookies, analytics and security

We use Vercel Web Analytics and Speed Insights to understand how the site is used and how quickly it loads. These tools report aggregated, anonymised statistics and do not use cookies to track you across other websites. We also use bot-protection and rate-limiting tools, which may briefly process your IP address and browser characteristics to block spam and automated abuse of our contact form. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for more detail.

How we protect and retain it

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include encrypted connections (HTTPS), access controls limiting information to people who need it, and using reputable providers with strong security practices.

We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law. When it is no longer needed we take reasonable steps to destroy it or permanently de-identify it.

Data breaches

If a data breach involving your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Email gday@business-analyst.services and we will respond within a reasonable time, usually 30 days. We may need to verify your identity first. If we refuse a request, we will tell you why in writing, unless that would be unreasonable, and how you can complain.

If the GDPR applies to you, you also have the right to request erasure of your data, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (without affecting processing that took place before you withdrew it).

Making a complaint

If you have a concern about how we have handled your personal information, please contact us first at gday@business-analyst.services. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. If you are in the EU or UK, you may also complain to your local data protection authority.

Third-party websites

This site may link to other websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

Changes to this policy

We may update this policy from time to time. The current version will always be published on this page, with the date it was last updated.

Contact us

For privacy questions, requests or complaints, contact our Privacy Officer at gday@business-analyst.services.