Privacy Policy

Last updated: January 2026

1. Introduction

AI Governance Council Australia is a trading name of FIMALU Pty Ltd (ABN 46 674 338 839). We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our services.

FIMALU Pty Ltd is responsible for compliance with this Privacy Policy.

2. Information We Collect

We may collect the following types of personal information:

• Contact information (name, email address, phone number, business address)
• Professional information (job title, organisation name, industry sector)
• Communication records (correspondence, enquiries, feedback)
• Assessment-related information provided during governance reviews
• Information relating to governance documentation provided during assessments, which may include internal policy documents and organisational controls
• Website usage data (IP address, browser type, pages visited)
• Newsletter subscription preferences

3. How We Collect Information

We collect personal information through:

• Direct interactions when you contact us, submit enquiries, or engage our services
• Our website when you complete forms, subscribe to newsletters, or browse our pages
• Assessment processes when organisations provide documentation and information for review
• Professional networking and industry events
• Third parties such as referrals from professional contacts

4. How We Use Your Information

We use your personal information to:

• Provide AI governance assessment services
• Respond to your enquiries and communicate with you
• Send newsletters and updates about AI governance (where you have consented)
• Improve our services and website functionality
• Comply with legal and regulatory obligations
• Maintain records for audit and quality assurance purposes

5. Disclosure of Information

We do not sell, rent, or trade your personal information. We may disclose your information to trusted service providers who assist us in operating our business (such as IT support and email services), professional advisers (legal, accounting), regulatory authorities when required by law, and with your consent for specific purposes such as publishing assessment outcomes.

Assessment status may be published in AIGC's public assessment register where applicable.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Personal information is stored on secure cloud infrastructure located in Australia or in jurisdictions with appropriate data protection safeguards.

Access to assessment documentation is restricted to authorised personnel and appointed assessors.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. Assessment records are retained for a minimum of seven years unless a longer retention period is required by law.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information (subject to legal requirements)
• Opt out of marketing communications at any time
• Lodge a complaint about our handling of your information

Requests for access or correction should be submitted in writing to the contact details below.

9. Cookies and Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and collect usage data. You can control cookie settings through your browser preferences. We use analytics services to understand how visitors interact with our website, which helps us improve our content and services.

10. Third-Party Links

Our website may contain links to third-party websites, including government resources and industry publications. We are not responsible for the privacy practices of these external sites, and we encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a revised effective date.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:

We will respond to privacy complaints within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.