.png){kind=small}
.svg){kind=small}
This Privacy Notice was last reviewed or revised on August 21, 2025.
We, Galloway & Pierce Pty Ltd, Australia, including our subsidiaries and affiliates (collectively, “Galloway & Pierce,” “we,” or “us”), understand that your privacy is important to you. We are committed to respecting your privacy and protecting your personal data. This Privacy Notice describes how we handle and safeguard your personal data when collected through our websites, applications, and digital platforms (together, our “Sites”), and through our business activities such as service offerings, events, surveys, and communications, when Galloway & Pierce is acting as a data controller (or equivalent under applicable privacy laws).
Depending on your relationship with Galloway & Pierce, additional or different notices may apply:
If you are located in a jurisdiction with specific data protection laws (for example, the EU/EEA, UK, or Australia), those rights and obligations are addressed in section 9 below. You are not required to share personal data with us, but if you do not, we may be unable to provide certain services or deliver a complete user experience through our Sites or communications. Please see our Terms of Use for additional terms governing use of our Sites.
When Galloway & Pierce collects and processes your personal data in accordance with this Privacy Notice, we do so as permitted under applicable privacy and data protection laws, acting as a data controller (or equivalent term under local law). This means that Galloway & Pierce determines how and why your personal data is collected, used, stored, disclosed, and ultimately disposed of.
The primary data controller is Galloway & Pierce Pty Ltd, Australia, unless you interact with another Galloway & Pierce entity in a different jurisdiction, in which case the local entity may also act as a controller, either independently or jointly with Galloway & Pierce Pty Ltd.
If you have questions regarding which entity is responsible for your personal data, or if you would like further details, you may contact us using the details provided in Section 9 of this Privacy Notice.
Galloway & Pierce collects personal data in the course of our business activities, both directly from you and from third parties.
We may collect personal data directly from you in circumstances such as:
We may also receive personal data about you from third parties, including:
In each instance, we make reasonable efforts to confirm that the third party has lawfully collected the data and is authorized to share it with us for the intended use.
On occasion, we may collect sensitive personal data directly from you, for example if you provide dietary or accessibility information when registering for an event, or demographic information in a survey. Sensitive personal data will only be collected and used where necessary and lawful, and usually with your explicit consent, unless another legal basis applies (e.g., compliance with health or safety obligations).
We may combine personal data collected directly from you with information obtained from third parties, provided that all such use is consistent with this Privacy Notice and the purposes described in Section 3 below.
Galloway & Pierce uses personal data for specific business purposes. Depending on the context, we may combine information collected from multiple sources to support these purposes. The table below outlines our main uses of personal data, the categories of data involved, the legal basis for processing, and who may access the data.
Purpose: To maintain and support client and business relationships.
Categories of personal data: Name, contact details, professional information (employer, title, role).
Legal basis for use: Legitimate interest in providing services and maintaining business relationships.
Data access: Galloway & Pierce affiliates and service providers.
Purpose: To deliver services and provide access to resources.
Categories of personal data: Name, email, preferences, usage data from our Sites.
Legal basis for use: Legitimate interest in delivering services and improving offerings; contractual necessity where applicable.
Data access: Galloway & Pierce staff and service providers.
Purpose: To send newsletters, updates, and communications.
Categories of personal data: Name, email, communication preferences.
Legal basis for use: Consent (where required by law) or legitimate interest in keeping contacts informed.
Data access: Galloway & Pierce staff and third-party email service providers.
Purpose: To manage participation in events and workshops.
Categories of personal data: Name, contact details, employer, professional role; dietary or accessibility information where relevant.
Legal basis for use: Legitimate interest in providing events; consent for sensitive data when required.
Data access: Galloway & Pierce staff and event partners/service providers.
Purpose: To collect feedback and conduct research.
Categories of personal data: Opinions, preferences, demographic data (if provided).
Legal basis for use: Consent (where given) or legitimate interest in improving services and insights.
Data access: Galloway & Pierce staff and trusted research service providers.
Purpose: To meet compliance and legal obligations.
Categories of personal data: Any personal data relevant to legal, regulatory, or contractual requirements.
Legal basis for use: Compliance with applicable law.
Data access: Galloway & Pierce staff, legal advisors, regulators (as required).
Purpose: To ensure site performance, security, and functionality.
Categories of personal data: Technical information (device type, IP address, browsing activity, error reports).
Legal basis for use: Legitimate interest in securing systems and improving functionality.
Data access: Galloway & Pierce staff and IT/security providers.
We may use first- and third-party cookies, pixels, and similar technologies to manage our Sites, understand usage patterns, improve performance, and measure engagement with our content. For details, please see our Cookie Notice.
Galloway & Pierce does not use personal data for automated decision-making that produces legal or similarly significant effects without human review.
Galloway & Pierce does not acquire, use, or permit others to use personal data with the intent of unlawfully identifying or re-identifying individuals. When we receive deidentified data or transform personal data into a deidentified or anonymized format, we make the following commitments:
Personal data collected in the course of Galloway & Pierce’s business activities may be shared with entities inside and outside our organization where necessary to fulfill the purposes set out in Section 3 of this Privacy Notice, and as otherwise required by applicable law. Depending on the context, your personal data may be disclosed to the following categories of recipients:
Because Galloway & Pierce operates internationally, personal data may be transferred across national borders, including to countries that may not have the same level of data protection as your home jurisdiction. In such cases, we take appropriate measures to safeguard your data, including:
Galloway & Pierce is committed to protecting and safeguarding your personal data in accordance with applicable laws, industry standards, and this Privacy Notice. We implement technical, organizational, and administrative measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include access controls, data encryption where appropriate, secure storage, and monitoring of our systems. Access to personal data is restricted to authorized personnel of Galloway & Pierce and our trusted service providers, who are required to handle such information in a confidential and secure manner. All staff and third parties with access to personal data are bound by contractual or professional confidentiality obligations. Despite these safeguards, no system or transmission of data over the internet can be guaranteed to be completely secure. While we take reasonable steps to protect personal data, we cannot guarantee that unauthorized persons will never gain access.
Galloway & Pierce retains personal data only for as long as necessary to achieve the business purposes for which it was collected, to comply with legal and regulatory obligations, and in line with our internal data-retention policies. Once personal data is no longer needed for these purposes, we securely delete or anonymize it in accordance with applicable law and industry practice.
If you request that we delete your personal data, we will comply with applicable law and take reasonable steps to remove or deidentify it, subject to our right to retain a copy where necessary to:
Retention periods may vary depending on the type of data and the context in which it was collected. For example, data collected for event registrations may be retained for a shorter period, whereas data related to client engagements may be retained for longer periods in accordance with contractual or regulatory requirements.
Galloway & Pierce does not knowingly collect or maintain personal data from individuals under the age of 16 through our Sites or business activities. Our services and online resources are directed toward professionals and organizations, and are not intended for use by children. If we become aware that personal data from an individual under the age of 16 has been collected without the appropriate legal consent from a parent, guardian, or authorized individual, we will take steps to delete such data in accordance with applicable law. To the extent that any of our non-Site activities involve the collection of personal data from or about individuals under the age of 16, we will only do so with the required consent and in compliance with applicable laws and regulations.
Depending on your jurisdiction, you may have certain rights in relation to the personal data that we collect and process. Galloway & Pierce respects these rights and will respond to requests in accordance with applicable law.
Subject to legal limitations and exceptions, you may have the following rights:
To exercise your rights, you may contact us using the details below:
Data Protection Officer
Galloway & Pierce Pty Ltd
chloesutton@gallowaypierce.com.au
We will acknowledge receipt of your request within the timeframe required by law and provide further information on the steps we will take. To protect your privacy, we may need to verify your identity before acting on your request. If you authorize someone to act on your behalf, we may require proof of authorization.
Please note that certain requests may be subject to exemptions or limitations under applicable law. Where we cannot fully comply, we will explain the reasons and the extent of our response.
If you receive newsletters, event invitations, or other communications from us and wish to stop receiving them, you may unsubscribe at any time by:
We will process unsubscribe requests promptly in accordance with applicable law.
