Privacy policy
Last updated 16 October 2026
TMC Group Pty Ltd (ABN 40 637 420 109), “we” or “us”, respects your privacy. This policy explains how we handle personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It covers our website, tmcgroup.com.au, and the personal information we handle when you deal with us.
The information we collect
The personal information we collect depends on how you deal with us. It may include:
- your name, job title, organisation and contact details, such as your email address and phone number
- what you tell us when you contact us, for example about your organisation, a project or an enquiry
- if you’re interested in working with us, your CV, work history, qualifications and referees
- information about how you use our website, collected by Google Analytics (see “Cookies and analytics” below)
We don’t ask for sensitive information, such as health information, through our website. Please don’t send it to us unless we’ve asked for it.
How we collect it
We collect personal information directly from you, for example when you email us, talk to us, meet us at an event or send us an expression of interest. We may also collect it from publicly available sources, such as your organisation’s website or your LinkedIn profile, or from someone who refers you to us.
You can deal with us anonymously or using a pseudonym where that’s practical, for example when you browse our website. If you’d like us to respond to an enquiry, we’ll need your contact details.
Why we collect it and how we use it
We use personal information to:
- respond to your enquiry and talk to you about our services
- provide services to our clients and manage our relationship with them
- consider you for work with us, if you’ve expressed interest
- send you information you’ve asked for, such as a case study
- understand how people use our website, so we can improve it
- meet our legal, regulatory and quality obligations, including our ISO 9001 quality management system
We may send you occasional updates about our services or insights if you’ve given us your details for that purpose or it’s within what you’d reasonably expect. Every message tells you how to opt out, or you can email us at any time.
Who we disclose it to
We don’t sell or rent personal information. We may disclose it to:
- our team members and contractors who need it to do their work
- service providers who support our business, such as Microsoft (email and document storage), Microsoft Azure (website hosting) and Google (website analytics)
- our professional advisers, such as lawyers and accountants
- anyone else you’ve agreed to, or where the law requires or allows it
We require our service providers to protect personal information and to use it only for the services they provide to us.
Disclosure outside Australia
Some of our service providers store or process information outside Australia. In particular, Google processes website analytics data in the United States and other countries, and our website’s public pages are delivered through Microsoft’s global network. We take reasonable steps to make sure overseas recipients handle personal information consistently with the Australian Privacy Principles.
Cookies and analytics
Our website uses Google Analytics to understand how visitors use it, for example which pages are popular and how people find us. Google Analytics uses cookies, small files stored by your browser, to tell visits apart. The information is collected in aggregate and we don’t use it to identify you.
You can block or delete cookies in your browser’s settings, or install Google’s Analytics opt-out browser add-on. The website works without cookies. Google explains how it uses this information in How Google uses information from sites that use its services.
Our website doesn’t use advertising cookies, and the map on our contact page is a still image that doesn’t load anything from third parties.
Keeping it secure
We store personal information in secure systems, mainly Microsoft 365 and Azure in Australia, with access limited to the people who need it. We protect it against misuse, loss and unauthorised access, and we manage it under our ISO 9001 certified quality management system. When we no longer need personal information, we securely destroy or de-identify it, unless the law requires us to keep it.
Accessing and correcting your information
You can ask for access to the personal information we hold about you, or ask us to correct it, by emailing us. We’ll respond within a reasonable time, usually 30 days. If we can’t give you access or make a correction, we’ll tell you why.
Making a complaint
If you think we’ve mishandled your personal information, please email us at info@tmcgroup.com.au with the details. We’ll acknowledge your complaint, look into it and respond, usually within 30 days.
If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Other websites
Our website links to websites we don’t control, such as our partners’ sites and LinkedIn. Their privacy practices are their own, so please read their privacy policies.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it last changed.
Contact us
For questions about this policy or your personal information, email us at info@tmcgroup.com.au or write to us at Level 30, Collins Place, 35 Collins Street, Melbourne VIC 3000.