Privacy Policy

1. What personal information does Yellow Hat collect and hold?

Yellow Hat is an Australian boutique consultancy helping organisations navigate complex, high-stakes change through strategy development, operating model review and design, change advisory, co-design facilitation, executive and board alignment, culture change, visual design and training in our methods.

The type of personal information we collect and use will depend on factors such as the service you request or use and any applicable legal or regulatory obligations. This may include, but is not limited to, the following kinds of information:

• Contact: information that allows us to communicate with you.
• Identity: information that allows us to identify you.
• Professional: information that helps us understand more about you, including your role, organisation, industry and areas of interest.
• Financial: information that allows Yellow Hat to invoice and pay you, should you engage us as a client or be engaged by us as a contractor or associate.
• Other individuals: information we request, or that you provide, about an individual other than yourself, such as a colleague, stakeholder or workshop participant you nominate for an engagement.

We may collect this information where you:

• instruct Yellow Hat to provide consulting, facilitation, change or communication services;
• have business dealings with us;
• attend a Yellow Hat workshop, Fusion session, masterclass or event;
• subscribe to our website or one of our mailing lists;
• receive marketing communications and information relating to our services which we think may be of interest to you;
• submit an enquiry through our contact form;
• apply or register your interest in engagement with Yellow Hat as an associate, contractor or supplier.

The personal information we collect from you will usually include your name, title, organisation, email address and contact number. We do not collect personal information that we do not need. If you do not provide us with the information we request, we may not be able to provide the services or assistance you seek.

Generally, we endeavour to collect personal information directly from the individuals concerned. Where this is not practicable, we may collect personal information about individuals from third parties, including publicly available sources, and will take reasonable steps to ensure those individuals are made aware of the collection.

As a general rule, Yellow Hat will not seek to collect sensitive information about you (such as details of racial or ethnic origin, political affiliation, religious beliefs, sexual preferences, criminal convictions or health information) unless it is needed to provide our services, in which case we will first seek your consent.

2. How does Yellow Hat use personal information?

Yellow Hat’s policy is to use personal information collected from business contacts only for the purpose for which it was collected. We collect personal information so that we can provide our services and conduct our business, including to respond to enquiries, deliver engagements, invite you to events, and communicate relevant industry and business developments, including advertising new services we offer, to our clients and to those who have subscribed to our website or mailing lists.

3. Will your personal information be given to anyone else?

Yellow Hat does not sell, rent or trade personal information about you to or with third parties. Personal information may be disclosed outside of Yellow Hat in the circumstances described below.

Yellow Hat may disclose personal information to external service providers who help us operate our business and deliver services to you. Examples include, but are not limited to, providers of:

• website hosting, data storage and archiving;
• information technology and other software and systems (including our contact form and email delivery provider);
• website analytics services;
• printing, design and visual production services;
• marketing and communications support; and
• subcontracted associates who assist in delivering an engagement on our behalf.

Where Yellow Hat engages external service providers, we take steps to ensure they comply with the APPs when handling personal information about you, and are authorised only to use it for the limited purposes we specify.

Otherwise, Yellow Hat will only disclose personal information if required by law or permitted under the Privacy Act. We are also bound by professional obligations of confidentiality, including in relation to personal information.

4. Security of personal information

Yellow Hat takes reasonable steps to protect the personal information we hold from loss, unauthorised access and misuse, including through the use of secure systems and access controls. Your personal information may be stored electronically on Yellow Hat’s systems or those of our service providers. When no longer required, personal information is destroyed or de-identified in a secure manner. All Yellow Hat personnel are required, as a condition of engagement, to treat personal information held by Yellow Hat as confidential.

5. Access and correction

Under the Privacy Act, you have the right to:

• seek access to your personal information held by Yellow Hat;
• ask us to update or correct your personal information where it is inaccurate, incomplete or out of date; and
• opt out of receiving direct marketing communications from us.

If you wish to access or correct the personal information Yellow Hat holds about you, please put your request in writing and send it to our Privacy Officer using the contact details below. We will not charge you for providing access to your current records. For legal and administrative reasons, Yellow Hat may also retain non-current records, such as back-up data.

6. Cookies and online privacy

When you visit our website, we may use website analytics tools to understand how our site is used and to keep it relevant and useful. Depending on which analytics service is active, this may involve cookie-free analytics (which do not identify you), or Google Analytics, which uses cookies and may collect information such as your approximate location, device type and browsing behaviour on our site. Where cookie-based analytics is used, we will only do so with your consent, sought via a cookie consent notice on our website.

We do not link analytics information back to your identity or to other information you have provided to us. Most web browsers are set by default to accept cookies; you may set your browser to prompt or refuse cookies, though this may limit some functionality of our website.

Our website may contain links to other websites for your convenience and information. Yellow Hat is not responsible for the privacy practices of any website other than our own.

7. Personal information of contractors, associates and applicants

Yellow Hat collects personal information from individuals who seek to work with us as an associate, contractor or supplier. This may include contact details, professional history and qualifications, eligibility to work in Australia, and referee details, collected directly from the individual or, where necessary, from a third party such as a referee.

We use this information to assess suitability for engagement with Yellow Hat, and do not disclose it to any other person or entity except as set out in section 3 above.

8. Making a complaint

If you wish to make a complaint about how Yellow Hat handles your personal information, please contact us in writing, setting out your complaint, using the details below. We will deal with all requests and complaints as quickly as possible and aim to respond within a reasonable timeframe. If you are not satisfied with our response, you may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes to this policy and how to contact us

This privacy policy may change from time to time and will be made available on our website. If you have any questions or comments about this policy, or wish to make a request under section 5, please contact our Privacy Officer: