Grounds for data collection 

Processing of your personal information (meaning, any information which may potentially allow your identification with reasonable means; hereinafter " Personal Information ") [add explanation regarding the legal grounds for processing personal information, such as:] 


is necessary for the performance of our contractual obligations towards you and providing you with our services, to protect our legitimate interests and for compliance with legal and financial regulatory obligations to which we are subject.


When you use the Site, you consent to the collection, storage, use, disclosure and other uses of your Personal Information as described in this Privacy Policy.


We encourage our Users to carefully read the Privacy Policy and use it to make informed decisions. 

What information we collect?

We collect two types of data and information from Users. 


The first type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site (“ Non-personal Information ”). We are not aware of the identity of a User from which the Non-personal Information was collected. Non-personal Information which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. We may also collect information on your activity on the Site (e.g. pages viewed, online browsing, clicks, actions, etc.).


The second type of information Personal Information which is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual. Such information includes:

  • Device Information: We collect Personal Information from your device. Such information includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information which relates to your activity through the Site.
  •  [add types of personal information collected, and respective explanations, such as:]
  • Registration information: When you register to our Site you will be asked to provide us certain details such as: full name; e-mail or physical address, and other information. 
  • …
  • …

Advertisement

We may use a third-party advertising technology to serve advertisements when you access the Site. This technology uses your information with regards to your use of the Services to serve advertisements to you (e.g., by placing third-party cookies on your web browser). 


[Add information regarding opt-out options from personalized advertisements, such as:] You may opt-out of many third-party ad networks, including those operated by members of the Network Advertising Initiative ("NAI") and the Digital Advertising Alliance ("DAA"). For more information about this practice by NAI and DAA members, and your choices regarding having this information used by these companies, including how to opt-out of third-party ad networks operated by NAI and DAA members, please visit their respective websites: http://optout.networkadvertising.org/#!/ and http://optout.aboutads.info/#!/ .

Therisano Privacy Policy

Last updated: July 2026
Applies to: therisano.com.au


Who we are

Therisano (ABN: 35 676 273 448) is a specialist bid, tender and grant consultancy based in Queensland, Australia. In this policy, "Therisano", "we", "us" and "our" refer to Therisano, and "you" refers to anyone who visits our website at therisano.com.au or otherwise shares personal information with us.


We take your privacy seriously. This policy explains what personal information we collect, why we collect it, how we look after it, and what you can ask us to do with it. It is written to be read, not to be endured.


We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).


What information we collect

We only collect information we actually need. In practice, that means:


Information you give us

  • Your name, email address and phone number, when you complete our contact form or book a consult
  • Your organisation, role and any details you choose to tell us about the opportunity you're working on
  • Anything else you send us by email, phone or during an engagement


Information collected automatically

  • Technical information such as your IP address, browser type, device type and operating system
  • Aggregated usage information — pages visited, time spent, and how you arrived at our site
  • What we don't do. We don't sell your information. We don't run advertising on this site or share your details with ad networks. We don't require you to create an account, and we don't collect payment details through this website.


How we collect it

We collect personal information directly from you — when you submit our contact form, book a consult, email or call us, or work with us on an engagement.


We also collect technical information automatically through cookies and website analytics when you browse the site, and we may collect information from publicly available sources, such as your organisation's website or a public professional profile, where it's relevant to an enquiry or engagement.


Why we collect it

We use personal information to:

  • Respond to your enquiry and arrange a consult
  • Provide our services and manage our engagement with you
  • Send you information you've asked for, and keep in touch about our work where you've agreed to hear from us
  • Understand how our website is used, so we can improve it
  • Meet our legal, accounting and record-keeping obligations


If you'd rather not receive our updates, every email we send includes an unsubscribe link, and you can ask us to stop at any time. We'll still need to contact you about anything essential to a current engagement.


Who we share it with

We do not sell, rent or trade your personal information. We share it only where it's necessary, and only with:

  • Trusted consultants in our network — bid managers, writers and subject matter specialists — where they're contributing to your engagement. They are bound by confidentiality obligations.
  • Service providers who help us operate — our website platform and host, email and calendar providers, analytics tools, file storage, and our accountant.
  • Anyone else you've asked us to, or where we're required or authorised to by law.


Overseas disclosure

Some of the service providers we rely on store data on servers located outside Australia, including New Zealand and in the United States. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.


Cookies and analytics

A cookie is a small file placed on your device when you visit a website. Cookies let the site work properly, remember your preferences, and help us understand how the site is being used.


This site uses:

  • Essential cookies — needed for the site to function.
  • Analytics cookies — which tell us how visitors find and use the site.


We use Google Analytics to understand how the site is used. It collects information such as your IP address and the pages you view. We use this only to improve the site, and we don't combine it with information that identifies you personally. You can read how Google handles this data in the Google Privacy Policy.


You can disable or delete cookies through your browser settings. If you do, some parts of the site may not work as well.


Client project information

When we work on a bid, tender or grant with you, we often handle commercially sensitive material — your strategy, your pricing, your evidence, and details about your people.


We treat that information as confidential. It is used only for the purpose of your engagement, shared only with those working on it, and governed by the confidentiality terms of our engagement agreement or any non-disclosure agreement we've signed with you. Those terms sit alongside this policy, and where they're more protective, they prevail.


How we protect your information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. That includes secure, access-controlled cloud storage, strong authentication on our accounts, reputable providers, and limiting access to those who need it.


No method of transmitting or storing information is completely secure. While we work hard to protect your information, we can't guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.


How long we keep it

We keep personal information only for as long as we need it for the purpose it was collected, or for as long as we're required to by law.

Enquiries that don't proceed are deleted once they're no longer relevant. Client records are retained for the life of the engagement and for 7 years afterwards, in line with our tax and record-keeping obligations. When information is no longer needed, we destroy or de-identify it.


Your rights

Under the Australian Privacy Principles, you can ask us to:

  1. Confirm what personal information we hold about you.
  2. Give you access to that information.
  3. Correct anything that's inaccurate, out of date or incomplete.
  4. Delete information we no longer need to hold.
  5. Stop sending you marketing communications.


Just contact us using the details below. We'll respond within a reasonable time, usually within 30 days, and we won't charge you for making a request. If we can't give you access or make a correction, we'll explain why in writing.

You can also deal with us anonymously or under a pseudonym where it's lawful and practicable — though if you'd like us to respond to an enquiry, we'll generally need a way to reach you.


Complaints

If you think we've mishandled your personal information, please tell us first. Contact us using the details below and we'll investigate and respond to you in writing, usually within 30 days.


If you're not satisfied with our response, you can raise it with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.


Changes to this policy

We may update this policy from time to time to reflect changes in how we operate or what the law requires. The current version will always be published on this page, with the date it was last updated shown at the top. If we make a significant change, we'll take reasonable steps to let you know.


How to contact us

If you have a question about this policy, want to access or correct your information, or would like to make a complaint, please get in touch.


Privacy enquiries
Nicole Dunbar, Director — Therisano
Email: hello@therisano.com.au
Phone: 0409 207 124