Privacy policy
Last updated: 12/10/2026
About SCG and this policy
Shukri Consulting Group Pty Ltd, trading as Shukri Consulting Group or SCG (we, us or our), handles personal information in connection with business consulting, related implementation services, international staffing and outsourcing enquiries, and the operation of our website.
This policy explains what information we collect, why we use it, when we share it and how you can contact us about it. It covers website visitors, people making enquiries, client and supplier contacts, candidates and other individuals whose information we handle in providing our services.
We comply with privacy and data protection laws that apply to our activities, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where applicable. An external service provider or client may also have its own privacy policy governing information it handles independently.
Information we collect
Depending on how you deal with us, we may collect:
- Your name, email address, telephone number, job title, business name and business contact details.
- Enquiry details, correspondence, meeting notes, service preferences and information you choose to provide about your business requirements.
- Client administration information, such as proposals, agreements, billing contacts, invoices and payment records.
- Information in business documents or systems that we are authorised to access for an agreed project, which may identify staff, customers, suppliers or other individuals.
- For staffing enquiries and recruitment activities, CVs, employment history, qualifications, skills, availability, role preferences, relevant work eligibility information and references.
- Technical information associated with website access, such as IP address, device and browser information, pages requested, approximate location inferred from an IP address, and access times, depending on the website tools in use.
We seek to limit collection to information reasonably needed for the relevant activity. We do not ask you to send full payment-card details, passwords, identity documents or sensitive records through a general website enquiry.
How we collect information
We generally collect information directly from you through email, telephone, meetings, messages, enquiries, documents and agreed service activities. We may also receive information from an authorised representative, a client, a recruitment partner, a referee or a publicly available professional source where lawful and relevant.
Where we obtain information indirectly, we take any steps required by applicable law to explain the collection. If you provide information about someone else, you should have authority to share it and give them any appropriate notice.
You can ask general questions anonymously or using a pseudonym where practicable. We may need your identity and contact details to prepare a proposal, assess a candidate, meet a legal requirement or deliver a service. Without relevant information, we may be unable to assist fully.
Website forms and communications
Your email or messaging provider may process communications under its own privacy terms. Website access may also generate technical logs even if you do not send an enquiry. Contact us to arrange an appropriate transfer method before sending confidential documents or sensitive information.
Why we use personal information
We use relevant personal information to respond to enquiries, assess requirements, prepare proposals, provide agreed services, coordinate delivery, communicate with clients and candidates, administer payments and maintain business records.
We may also use it to improve our services and website, protect systems, investigate concerns, manage legal obligations and resolve disputes. We do not use information for an unrelated purpose without an appropriate lawful basis, such as consent where required.
Candidates and international staffing
Where we assist with staffing, we use candidate information to assess suitability, coordinate interviews, check relevant information and support agreed recruitment or onboarding activities.
We explain the relevant opportunity and obtain the candidate’s agreement before submitting an identifiable profile to a prospective client or employer. We seek appropriate permission before contacting referees. Any screening is limited to checks relevant to the role and lawful in the circumstances.
If retaining a candidate profile for future opportunities, we explain that purpose and the relevant choices. A candidate can contact us to withdraw from consideration or ask about deletion, subject to any information we need to retain for lawful reasons.
Sensitive information and client records
Health information, disability information and certain screening results can be sensitive information. Please do not include these in an initial enquiry. We only collect sensitive information where needed for an agreed activity and with consent where required, or another lawful basis.
Where work for an NDIS provider or other client requires access to records about individuals, we agree the purpose, access permissions and handling arrangements before access is provided. De-identified information should be used where it can meet the task’s requirements. A client must have appropriate authority to give SCG access; SCG remains responsible for its own handling obligations.
When we disclose information
We may disclose information, where relevant to the purpose and permitted by law, to:
- Authorised personnel and contractors assisting with an enquiry or engagement.
- Hosting, email, communications, document storage, CRM, IT support and other business service providers.
- Recruitment partners and prospective employers or clients for an agreed staffing process.
- Professional advisers, insurers and payment providers where needed for their services.
- Regulators, courts or other parties where disclosure is required or authorised by law, or necessary for a lawful claim.
We limit disclosure to information relevant to the purpose and use appropriate confidentiality and handling arrangements. We do not sell personal information as a marketing list. Any referral or introduction involving your details will be explained where consent or further notice is required.
Overseas handling
Our services may involve overseas personnel, recruitment partners and technology providers. Personal information may be accessed, stored or disclosed outside Australia as part of those arrangements.
Before giving overseas recipients access, we consider the information involved, the purpose, applicable legal requirements and appropriate safeguards. These may include contractual handling obligations, limited access permissions and checks of provider arrangements. Where Australian Privacy Principle 8 applies, we take the required steps before disclosure unless a lawful exception applies. Publishing this policy does not by itself obtain your consent to waive those protections.
Contact us if you need more information about the overseas arrangements relevant to your information or proposed engagement.
Cookies and third-party website tools
Cookies and similar technologies can support website functions, remember settings, analyse use or support advertising. Their use depends on the tools enabled on the website.
You can usually block or delete cookies through your browser. Some functions may then work differently. If the website offers optional tracking choices, you can use those controls to manage your preferences. Cookies are not the only way technical information may be processed; third-party content can also receive information when it loads.
Marketing preferences
We may send relevant business updates or service information where we have your consent or are otherwise permitted by law. You can unsubscribe using the option in the message or by contacting us. We will action requests in accordance with applicable requirements.
Choosing not to receive marketing does not prevent necessary communications about an enquiry, existing engagement, invoice or legal matter. We do not treat acceptance of website terms as blanket permission for marketing.
AI and automated processing
Offering AI integration services does not itself mean that all enquiries, candidate profiles or client records are processed by AI. The arrangements for a client’s own system are addressed in the project scope and applicable privacy notices.
Security and retention
We take reasonable steps to protect information we hold from loss, misuse, interference and unauthorised access, modification or disclosure. Safeguards are selected according to the information and the service involved and include appropriate access restrictions and confidentiality arrangements.
No electronic transmission or storage method can be guaranteed completely secure. If we identify a privacy or security incident, we will assess it, take appropriate response steps and notify affected people and relevant authorities where required by law.
We retain information for as long as reasonably needed for the purpose for which it is held, including applicable recordkeeping obligations, ongoing engagements and the establishment or defence of legal claims. When it is no longer needed, we take reasonable steps to destroy or de-identify it, subject to legal requirements and appropriate backup handling. Retention periods may differ for enquiries, candidate records and client engagement records.
Access and correction
You can contact us to request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity or an authorised representative’s authority.
We will respond within a reasonable period and in accordance with applicable law. If a lawful exception prevents access or correction, we will explain the reason, to the extent we can, and how you can raise a concern. There is no fee to make a request. If a lawful, reasonable access-processing charge applies, we will explain it in advance; we do not charge for correcting information.
Questions and complaints
Contact the Privacy Contact at SCG using the details below. Please describe your concern and the outcome you are seeking, without sending unnecessary sensitive documents.
We will acknowledge the complaint, review the circumstances and aim to provide a substantive response within 30 days. If more time is needed, we will explain why and keep you informed.
If you are dissatisfied, you may be able to complain to the Office of the Australian Information Commissioner where the matter falls within its jurisdiction, or another relevant regulator. Information is available at https://www.oaic.gov.au/privacy/privacy-complaints or on 1300 363 992.
Privacy Contact — Shukri Consulting Group Pty Ltd
Email: kadhem@shukriconsultinggroup.com
Phone: +61 480 851 458
Policy updates
We may update this policy as our services, information handling practices or legal requirements change. The current version and update date will appear on our website. Where a change requires a further notice or consent, we will take the required steps. You can request a copy of this policy by contacting us.
Enquiry form privacy notice
Website copy
SCG uses the information you send to respond to your enquiry and discuss relevant services. Without your contact details, we may be unable to respond. Please do not include participant records, health information, identity documents or other sensitive material. Our Privacy Policy explains how we handle information, including relevant overseas arrangements, and how to request access, correction or make a complaint. Contact: info@shukriconsultinggroup.com.