Privacy Policy

Advancing Practice for Complex Projects

Effective: 9 July 2026

1. About this Policy

This Privacy Policy applies to all personal information collected, held, used, and disclosed by Al Khateeb Advisory Pty Ltd trading as INMAA Advisory (ABN 52 695 624 867) (“INMAA Advisory”, “we”, “us”, “our”), across every channel through which we interact with you. This includes our website at www.inmaa.com.au, our CRM system, consultation requests, training and certification registrations, career coaching enrolments, contractor and consultant engagements, and any other direct dealings with us — not our website alone.

2. What information do we collect?

The kind of personal information we collect depends on how you engage with us. We collect the following personal information from clients, contractors, consultants, training participants, coaching participants, and website visitors: full name, email address, phone number, business name, job title, organisation details, professional qualifications, training attendance records, assessment results, project engagement details, payment and invoicing information (including ABN/ACN and bank account details), communication preferences, and any other information voluntarily provided through our website forms, CRM system, consultation requests, training registrations, coaching enrolments, or during the course of our consulting, advisory, training, and coaching services.

3. Types of information

The Privacy Act 1988 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether it is recorded in a material form or not. If information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as Personal Information and will not be subject to this Policy.

Sensitive Information is defined in the Privacy Act as including information or an opinion about an individual's racial or ethnic origin, political opinions, political association membership, religious or philosophical beliefs, trade union or professional body membership, criminal record, or health information. Sensitive Information will be used by us only for the primary purpose for which it was obtained, for a secondary purpose directly related to the primary purpose, or with your consent or where required or authorised by law.

We do not seek to collect Sensitive Information, and our career coaching services are conversational in nature and are not therapy, counselling, or a health service (see our Career Coaching Terms & Conditions). However, Sensitive Information may be voluntarily disclosed by a participant in the course of a coaching conversation. Where this occurs, it is handled in accordance with section 3 above and is not sought or recorded beyond what the participant chooses to share.

4. How we collect your Personal Information

• We may collect Personal Information whenever you input it into our website or related systems, or provide it to us in any other way.

• We may collect cookies from your device, which help us recognise use of the website and customise your experience. As a general rule, it is not possible to identify you personally from our use of cookies.

• We generally do not collect Sensitive Information, but where we do, we comply with section 3 above.

• Where reasonable and practicable, we collect your Personal Information from you directly. Where we receive information from a third party, we will take steps to make you aware of this.

• We require third-party service providers (including cloud hosting providers, analytics platforms, and subcontractors) to comply with the Australian Privacy Principles and to enter into arrangements imposing equivalent data protection obligations. We will notify you within 30 days of engaging a new third party to process your Personal Information.

5. Purpose of Collection

• We collect Personal Information to provide you with the best possible service, to process payments and administer bookings, to deliver our advisory, training, and certification-preparation programs, and to keep in touch with you about developments in our business.

• We customarily only disclose Personal Information to service providers and partners who assist us in operating our business and delivering our services. This includes disclosure to categories of recipient such as payment processors, website and technology platforms, and — where you enrol in a training or certification program — our training and delivery partners and the relevant certification and examination bodies, to the extent necessary to process your payment, register you, deliver the program, or issue a credential. Our network of partners and service providers may change and expand over time; we describe them by category rather than by name so that this Policy remains accurate as our business grows. Your Personal Information may also be accessed by maintenance and support personnel acting in the normal course of their duties.

• By engaging with us, you consent to receiving direct marketing material. We will only use Personal Information for this purpose where it was collected directly from you and is of a type you would reasonably expect to receive. We do not use Sensitive Information in direct marketing. All direct marketing material includes a simple means to opt out, such as an unsubscribe link.

6. Security, Access and Correction

We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification, or disclosure. When we no longer require your Personal Information for the purpose it was obtained, we take reasonable steps to destroy, anonymise, or de-identify it. Most Personal Information held in our client files and records is kept for a maximum of 7 years to fulfil our record-keeping obligations.

The Australian Privacy Principles permit you to obtain access to Personal Information we hold about you in certain circumstances (APP 12) and allow you to correct inaccurate Personal Information subject to certain exceptions (APP 13). To request access or correction, please contact us using the details in section 10.

7. Overseas Disclosure of Personal Information

Some of the platforms we use to operate our business — including our client relationship management, partner management, and email/productivity systems — are hosted or operated overseas, and may store or process Personal Information on servers located outside Australia. The specific providers we use may change from time to time. We take reasonable steps to ensure these providers handle Personal Information in a manner consistent with the Australian Privacy Principles, including through the providers' own data protection commitments.

Other than through these service providers, we will not disclose your Personal Information to recipients located outside Australia unless you expressly request us to do so. Where you make such a request, the overseas recipient may not be required to comply with the Australian Privacy Principles, and we will not be liable for any mishandling of your information by that recipient.

8. GDPR

In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in Europe. Being located in Europe does not, on its own, entitle you to protection under the GDPR. Our website does not specifically target individuals in the European Union and we do not monitor the behaviour of individuals in the European Union; accordingly, the GDPR does not apply to our handling of your Personal Information.

9. Complaints

If you have a complaint concerning the manner in which we handle your Personal Information, please contact us using the details in section 10. Our Privacy Officer is John Al Khateeb, Director, who personally considers all complaints and may seek further information from you to clarify your concerns.

• We will acknowledge receipt of your complaint within 3 business days.

• We aim to complete our investigation within 5 business days of receipt. Where additional time is required, we will notify you of the extension and the reasons for it.

• During an investigation, we may implement interim measures — such as suspending access to, or applying temporary de-identification to, the relevant Personal Information — where appropriate to protect your interests.

• You will receive a written response setting out our findings and any remedial action taken.

If we agree your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may escalate the matter to our Privacy Officer directly, or externally to the Office of the Australian Information Commissioner (OAIC).

10. How to Contact Us

If you have any queries, wish to access or correct your Personal Information, or have a complaint about our privacy practices, please contact:

John Al Khateeb, Director & Privacy Officer
Al Khateeb Advisory Pty Ltd t/a INMAA Advisory
Email: info@inmaa.com.au