Privacy Policy

Purpose Bureau ABN 33 648 238 902

Last updated: March 2026

This Privacy Policy sets out how Purpose Bureau Pty Ltd (ABN 33 648 238 902) (we, us, our) collects, holds, uses, discloses and protects personal information. It applies to personal information collected through our website (www.purposebureau.com) and through any other interactions you have with us. If you are an authorised user of our platforms (including Bureau Automate or our Climate Portal), please refer to the separate Privacy Policy applicable to those platforms, available upon login or on request.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our direct marketing activities are conducted in accordance with the Spam Act 2003 (Cth).

1. Personal information we collect

We may collect the following types of personal information:

Your name and contact details, including email address, mailing address, street address and/or telephone number;
Your job title, employer name and professional contact details (for business contacts and prospective customers);
Your age and/or date of birth (where relevant to the services provided);
Your demographic information, such as postcode or country of residence;
Your preferences, opinions and feedback provided to us through enquiry forms, surveys or communications;
Details of products and services we have provided to you and/or that you have enquired about, and our response to you;
Browser session and geo-location data, device and network information, page view statistics, search queries and browsing behaviour collected through our website;
Information about your access and use of our website, including via cookies and similar technologies, browser type, operating system and internet service provider details;
Information you provide when applying for employment with us; and
Any other personal information you provide directly or indirectly through your use of our website, associated applications or social media.

We may collect personal information directly from you or from third parties (such as referral partners or publicly available sources).

2. How we collect personal information

We collect personal information in a number of ways, including:

Directly from you when you contact us via our website, complete an enquiry or contact form, subscribe to communications, request a demonstration, or otherwise interact with us;
Through your use of our website, including via cookies and analytics tools (see Section 8 below);
From publicly available sources and third-party data providers, where relevant to our services.

3. Why we collect and use personal information

We collect, hold, use and disclose personal information for the following purposes:

To provide, operate and improve our website and services;
To respond to your enquiries and communicate with you about our products and services;
To manage our business relationships with customers, prospects and partners;
For internal record-keeping and administrative purposes;
For analytics, market research and business development, including to understand how our website is used and to improve it;
For direct marketing, including to send you information about our products, services, events and insights that we believe may be of interest to you (see Section 7 for your opt-out rights);
To comply with our legal obligations and to resolve any disputes; and
To consider your employment application where you have applied to work with us.

We will only use your personal information for the purpose for which it was collected, or for a secondary purpose that is directly related to the primary purpose, or where you have consented to the secondary use, or as otherwise permitted by law.

4. Disclosure of personal information

We may disclose personal information to:

Third-party service providers who assist us in operating our business and delivering our services, including IT infrastructure and cloud hosting providers, data analytics providers, marketing and communications platforms (including HubSpot), professional advisers (lawyers, accountants, auditors), and payment processors;
Our employees, contractors and related entities;
Our existing or potential agents, business partners or investors;
Third parties in connection with a corporate transaction, such as a merger, acquisition or sale of business assets, where personal information forms part of the assets transferred;
Courts, tribunals, regulatory authorities and law enforcement bodies, as required or authorised by law, or in connection with actual or prospective legal proceedings; and
Any other third parties with your consent.

Some of our third-party service providers may be located outside Australia, including in the United States and other countries. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that those recipients handle the information in a manner consistent with the APPs, including by entering into contractual arrangements with those recipients where appropriate.

Please note that, where we are unable to ensure an overseas recipient complies with the APPs, Australian Privacy Principle 8.1 will not apply to that disclosure. By providing personal information to us, you acknowledge this.

5. Data retention

We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by law. The criteria used to determine retention periods include:

The duration of our relationship with you (for example, while you are an active contact or customer);
Whether we are subject to a legal obligation to retain the information (for example, under applicable tax, corporate or financial reporting laws); and
Whether retention is advisable in light of our legal position (for example, in relation to applicable statutes of limitations, litigation or regulatory investigations).

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it securely.

6. Storage and security

We are committed to protecting the personal information we hold. We have implemented appropriate technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These measures include access controls, encryption in transit, and regular security reviews.

We cannot guarantee the security of information transmitted to or by us over the internet. The transmission and exchange of information is carried out at your own risk. If you believe your personal information has been compromised, please contact us immediately using the details in Section 10.

7. Direct marketing

We may use your personal information to send you information about our products, services and insights that we think may be of interest to you. All direct marketing communications are sent in accordance with the Spam Act 2003 (Cth). We will always provide you with an option to unsubscribe or opt out of receiving such communications.

To opt out of receiving direct marketing communications from us at any time, you can:

Click the unsubscribe link in any marketing email we send you; or
Contact us using the details set out in Section 10.

We will process opt-out requests promptly and within a reasonable timeframe. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related communications.

8. Cookies and tracking technologies

We use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device that help us provide and improve our website and services.

We use the following types of cookies:

Essential cookies: necessary for the website to function and cannot be switched off;
Analytics cookies: help us understand how visitors interact with our website (for example, via tools such as Google Analytics); and
Marketing cookies: used to track visitors across websites and to deliver relevant advertising (for example, via HubSpot).

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Where required by applicable law, we will seek your consent before placing non-essential cookies on your device.

We may also use web beacons (also known as clear GIFs or pixel tags) on our website to monitor visitor behaviour and collect analytics data.

9. Links to other websites

Our website may contain links to third-party websites. We do not control those websites and are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Your rights and controlling your personal information

You have the following rights in relation to your personal information:

Access: You may request access to the personal information we hold about you. We will respond to your request within a reasonable timeframe and in accordance with the Privacy Act 1988 (Cth). We will not charge a fee for making an access request, although we may charge a reasonable fee to cover the cost of providing access in certain circumstances.

Correction: If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us. We will take reasonable steps to correct the information.

Complaints: If you believe we have breached the Australian Privacy Principles, you may make a complaint by contacting us using the details in Section 10. We will acknowledge your complaint promptly and investigate it within a reasonable timeframe. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Opt-out of marketing: You may opt out of receiving direct marketing communications from us at any time as described in Section 7.

11. Contact us

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal information, please contact our Privacy Officer:

Purpose Bureau Pty Ltd

ABN 33 648 238 902

Email: privacy@purposebureau.com

Website: www.purposebureau.com

12. Amendments

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated policy will be posted on our website with a revised ‘Last updated’ date. We encourage you to review this Privacy Policy periodically. Your continued use of our website following any changes constitutes your acceptance of the updated policy.