Privacy Policy
Effective date: 2 October 2026
IntraWork Group Pty Ltd (ABN 35 661 220 748) takes your privacy seriously. This policy describes what personal information we collect through this website, why we collect it, who we share it with, and the rights you have under the Australian Privacy Act 1988 and the Australian Privacy Principles.
Who we are
IntraWork Group Pty Ltd, registered office 15 Napier St, Warragul VIC 3820. Contact for privacy enquiries: admin@intrawork.com.au. We do not publish a phone number.
What we collect on this website
- Contact details you give us through the enquiry form, the Grant-Ready Vault request form, the AI Starter Guide and AI Prompting Guide forms, the AI readiness diagnostic interest form, or a newsletter sign up: name, email, phone, organisation, and any message you write.
- Technical and analytics information collected automatically: pages viewed, referring source, device type, approximate location.
- Store purchase details for toolkit and guide purchases, handled by Wix in Stage 1 (see "Who we share it with" below).
How we collect it
Directly from you, through the forms on this site. Analytics information is collected automatically through Google Analytics (GA4).
Why we collect it
To respond to your enquiry, to send you the resource you asked for, to process a toolkit purchase, to send our newsletter if you subscribed, and to understand how the site is used so we can improve it. We do not use personal information for any purpose beyond this, and we do not sell personal information to any third party.
How your enquiry reaches our systems
Every form on this site sends your details, once, to Helm, IntraWork's own client and lead management system. The site's server sends a single signed request to Helm (an HMAC signature over the submitted data, so Helm can confirm the request genuinely came from this site), and Helm records you as a new lead or contact so Jessica and her team can follow up. No form data is sent to Helm more than once, and the request never appears in this site's page addresses or in analytics.
Who we share it with
- Vercel Inc., for website hosting.
- Wix.com Ltd., for the store and checkout, in Stage 1 only.
- Microsoft Corporation, for email and calendar operations.
- Helm (operated on Microsoft Azure), IntraWork's own client and lead management system: every form submission on this site is sent to Helm as a new lead or contact.
- Mailchimp, for newsletter subscribers.
- Google, for website analytics (GA4).
- From Stage 2: Stripe, for toolkit purchases, once checkout moves off Wix.
The full list, with purpose and location, is at "our list of sub-processors" (/sub-processors).
When you buy a toolkit, your order is processed by Wix. We also record your name, email and organisation as a lead in our internal system (Helm) so we can help you use what you have bought.
Overseas disclosure
Some of the vendors above are based overseas, principally the United States (Google, Mailchimp, and Wix and Stripe where used). Wix also stores data in Ireland. We take reasonable steps to check these vendors have their own appropriate data protection standards before we use them, but we do not require them to handle your personal information the same way the Australian Privacy Principles would require. If an overseas recipient mishandles your information, you may not be able to seek redress under Australian privacy law in the same way you could against us directly. By using this site and submitting a form, you acknowledge personal information may be disclosed to these overseas recipients for the purposes described above.
The Australian Privacy Principles
IntraWork handles personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Cookies
This site sets a small number of cookies. None of them are used for advertising.
| Cookie | Set by | Purpose | Typical duration |
|---|---|---|---|
wix_session | Wix (visitor token) | Keeps your store cart and checkout session working across pages, Stage 1 only | Set by Wix |
iw_posted | This site | A signed, browser-only marker that stops a page reload or back navigation sending the same form twice | 1 hour |
iw-inbound | This site | Records the marketing UTM parameters from your first visit (source, medium, campaign) so they can be included in your enquiry for our own internal reporting | 30 days |
iw-analytics | This site | Stores your analytics on/off preference, set using the switch below. Not sent to us or to Google. | Until you clear it |
Google Analytics' own cookies (_ga, _ga_*) | Google Analytics (GA4) | Distinguish visits and sessions for site measurement | 2 years (GA4 default) |
Analytics on this site: on / off
This site uses Google Analytics (GA4) to understand how the site is used, so we can improve it. Analytics on this site does not collect your name, your email address, or your precise location, and is not linked to advertising. You can turn Google Analytics off for this browser using the "Analytics on this site: on / off" switch on this page. Turning it off is remembered on this browser only (it is not sent to us or stored against you), so it needs to be switched off again on a new device or browser. If your browser sends the Global Privacy Control signal, we treat that the same as switching analytics off.
Security and retention
We retain enquiry and lead information for the life of any resulting engagement plus 7 years after it ends, then delete or de-identify it unless we are required by law to keep it longer. Newsletter details are kept in Mailchimp until you unsubscribe. Vercel's own function logs, which record the campaign, delivery status and a salted hash of your email address rather than the address itself, are kept for 30 days. Analytics information is retained per Google's standard retention settings. We apply reasonable technical and organisational measures to protect personal information, including encrypted connections (TLS) on every form submission.
If something goes wrong
If we experience a data breach likely to result in serious harm, we will handle it in line with the Notifiable Data Breaches scheme where it applies to us, including notifying affected individuals and the Office of the Australian Information Commissioner where required.
Your rights
You can ask to access or correct the personal information we hold about you, or complain if you believe we have breached the Australian Privacy Principles, by contacting admin@intrawork.com.au. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Children
This site is not directed at children. We do not knowingly collect personal information from children under 16.
Changes to this policy
We will update this policy as our services or obligations change. The effective date at the top of this page is the version date.
If you have a question about your data, contact IntraWork.