Privacy Policy

Effective Date: August 2026

At Conway Consulting Group (“we”, “our”, “us”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and manage personal information through our website www.conwaygroup.com.au and related online services.

This policy applies to all visitors and users of the website, and to clients and prospective clients who interact with us online or offline.

1. About Us

Conway Consulting Group provides Allied Health business consulting and strategic advisory services. We support providers with operational clarity, financial performance, compliance and growth in sectors including Allied Health, NDIS and Aged Care.

Contact Details: Email: trystan@conwaygroup.com.au PO Box 121, Bulleen VIC 3105, Australia

2. What Personal Information We Collect

We collect personal information that you voluntarily provide when you:

• use contact forms,
• sign up for newsletters,
• book calls or services,
• email us,
• or otherwise interact with our website.

Examples of personal information we may collect include:

• Name
• Email address
• Phone number
• Business name
• Payment and billing information (via secure third-party providers)

We run one analytics tool, Cloudflare Web Analytics, on every page of this website. It counts page views and measures how quickly pages load. It sets no cookies, it stores nothing on your device, and Cloudflare states that it does not identify individual visitors or follow them from one website to another. We do not run advertising pixels of any kind, and we do not set cookies of our own. We do not build profiles of visitors and we do not track how individuals move through the site.

Beyond that analytics beacon, another company’s code runs only on our booking page, which embeds a booking calendar, and on the pages that embed a video or audio player. One of those pages loads its video player only if you press play. Sections 5 and 6 explain all of them.

Our website is hosted by Cloudflare. Like any web host, Cloudflare receives the technical information your browser sends in order to deliver a page, including your IP address, the page you requested and your device and browser type. That is a necessary part of serving a website. We do not use it to identify individual visitors. Section 6 lists every third-party service involved in running this website.

3. How We Collect Personal Information

We collect information:

• Directly from you when you provide it,
• From our hosting provider and our analytics, in the limited technical sense described in Sections 2 and 6, whenever your browser loads a page,
• From the third-party services listed in Section 6, when you submit a form or follow a booking link.

You may choose not to provide certain information. This may limit your ability to use some features of the site.

4. How We Use Your Information

We use personal information to:

• respond to inquiries or requests,
• provide consulting, advisory or account services,
• send newsletters or updates if you have subscribed,
• improve our website, products and services,
• comply with legal and regulatory obligations.

We do not use your information for advertising, and we do not use it to target you on any third-party platform.

5. Cookies and Similar Technologies

We do not set any cookies of our own.

We do not use cookies to operate the site, remember preferences, analyse traffic or support advertising. We do not use local storage, session storage or any similar technology to keep information on your device.

This is true of the analytics as well. Cloudflare Web Analytics runs on every page and is deliberately a tool that needs no cookies: Cloudflare states that it “does not use any client-side state, such as cookies or localStorage, to collect usage metrics”. Nothing is written to your device when it runs.

There are exceptions, and each belongs to another company rather than to us.

Our booking page embeds Calendly’s booking calendar, which may set its own cookies as soon as the page opens. One article embeds a Spotify podcast player, which may do the same.

The pages carrying a video use YouTube’s no-cookie player. YouTube states that it does not store cookies for a visitor who does not play the video. Pressing play changes that.

Our When to Recruit Calculator shows a still image in place of a video hosted by Loom. Nothing loads from Loom unless you press play. Pressing play loads Loom’s player, which may set its own cookies.

In every case the cookies belong to that company’s domain and privacy policy rather than ours. Apart from those embeds, no page on this website sets a cookie at all. Section 6 explains each of them.

If you follow a link from our website to somewhere else, such as a social media profile, that website sets its own cookies and applies its own privacy policy rather than this one.

6. Third-Party Services We Use

We do not use tracking pixels or advertising platforms. We use one analytics service, described first below.

An earlier version of this website ran a Meta pixel and a LinkedIn Insight Tag. Both have been removed and neither operates on this website. They have not been reinstated and will not be. The analytics tool described below is not a replacement for them: it counts page views in aggregate and is not capable of building an advertising profile or retargeting you.

With a few exceptions, nothing on our pages loads from another company. Our fonts, images, styles and scripts are all served from this website. The exceptions are the analytics beacon, the booking calendar, the video players and the podcast player described below. The other services listed here receive information only when you choose to do something specific.

Cloudflare Web Analytics tells us how many times each page was viewed, roughly where in the world visitors came from, which website or search engine referred them, and how quickly pages loaded. It runs on every page of this website. Your browser loads a small script from Cloudflare and sends those measurements back to it.

We chose it because it is the least intrusive option we could find that still answers which articles people read. Cloudflare states that it “does not use any client-side state, such as cookies or localStorage, to collect usage metrics”, that it does not “fingerprint individuals via their IP address, User Agent string, or any other data for the purpose of displaying analytics”, and that it does not track individual visitors across the different websites that use it. It also does not record the query string part of a web address, which is where sensitive information sometimes ends up.

As with any request your browser makes, the measurement request itself reaches Cloudflare carrying your IP address, because that is how the internet delivers a response. Cloudflare states that it is not used to identify you or retained as part of the analytics. We never see it. What we see is counts: how many views a page received, not who viewed it.

We cannot verify Cloudflare’s statements about its own systems, and we repeat them here rather than adopt them as our own promises.

Web3Forms handles our contact form. When you submit that form, your name, email address, organisation if you provide one and your message are sent to Web3Forms, which forwards them to our email address. Web3Forms states that it does not store submissions and that its server logs are deleted periodically. Its servers are in the United States.

MailerLite handles our newsletter and resource downloads. When you subscribe, your email address is sent to MailerLite, which stores it so we can send you the emails you asked for. Every email we send includes an unsubscribe link.

Cloudflare also hosts this website, separately from the analytics described above. It receives the technical request information described in Section 2 in order to deliver and secure each page. Your browser may also report network connection errors to Cloudflare so that faults can be diagnosed. Cloudflare states that these reports contain no personally identifying information.

Calendly provides our booking calendar. On our booking page the calendar is embedded directly, so your browser loads content from Calendly as soon as you open that page, before you have entered anything or clicked anything. Calendly may set cookies and may record that the page was viewed. Other pages link to Calendly instead of embedding it, and those links load nothing until you follow them. If you book a call, the details you enter are provided to Calendly under its own privacy policy.

YouTube, which is owned by Google, provides the video player embedded on four resource pages and two articles. When the player loads, your browser fetches it from Google, which receives your IP address and the page you are on.

We use YouTube’s no-cookie player rather than the standard one. YouTube states that this version does not store cookies for a visitor who does not play a video. If you press play, YouTube may set cookies under its own domain and record what was watched.

On the four resource pages, the page shows a still image in place of the player, and nothing loads from YouTube until you press play or choose a chapter. In the two articles, most browsers do not load the player until you scroll down to it, so opening one of those articles and leaving before you reach the video may not contact Google at all. That behaviour depends on your browser, so we cannot promise it.

Loom, which is owned by Atlassian, hosts the walkthrough video on our When to Recruit Calculator. The page shows a still image, which comes from this website, and loads nothing from Loom until you press play. If you press play, your browser loads Loom’s player, which receives your IP address and the page you are on, may set cookies under its own domain and may record that the video was watched.

Spotify provides the podcast player embedded in one article, Leadership Is the Difference in Allied Health. That player loads from Spotify and may set cookies under its own domain. As with the video player, most browsers do not load it until you scroll down to it.

Each of these services handles your information under its own privacy policy as well as this one.

7. Disclosure of Your Information

We may disclose personal information:

• to the service providers listed in Section 6, who assist with website hosting, contact form delivery and email delivery,
• in response to lawful requests by public authorities, including to meet national security or law enforcement requirements,
• if required by law or to protect our rights.

We do not sell or rent your personal information. We do not share it with advertising platforms or marketing partners. The one analytics service we use, described in Section 6, receives page view measurements rather than personal information, and we do not send it anything you have given us. Where we share information with the service providers in Section 6, we require them to handle data securely and only for permitted purposes so far as we are reasonably able.

8. Cross-Border Transfers of Personal Information

Some of the service providers listed in Section 6 are located outside Australia, or store and process data outside Australia:

• Cloudflare, which hosts this website and provides our analytics, is based in the United States and serves pages from a global network, so a page may be delivered from outside Australia. The analytics measurements described in Section 6 are sent to Cloudflare and processed outside Australia.
• Web3Forms, which handles our contact form, processes submissions on servers in the United States.
• MailerLite, which handles our newsletter, stores subscriber data in the European Union.
• Calendly, which provides the booking calendar embedded on our booking page, is based in the United States.
• YouTube, owned by Google, provides the video player embedded on four resource pages and two articles. Google is based in the United States and serves content from a global network.
• Loom, owned by Atlassian, hosts the walkthrough video on our When to Recruit Calculator and is based in the United States. Nothing is sent to Loom unless you press play.
• Spotify, which provides the podcast player embedded in one article, is based in Sweden and operates globally.

Where your information is transferred overseas, we take reasonable steps to ensure it is handled in accordance with this policy and the Australian Privacy Principles.

9. Security of Your Personal Information

We use reasonable technical and organisational measures to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. No system can be guaranteed to be completely secure.

10. Access and Correction

You can request access to personal information we hold about you. You may also ask us to correct information that is inaccurate, out of date or incomplete.

Requests should be made in writing to: Email: trystan@conwaygroup.com.au

11. Complaints

If you believe your personal information has been mishandled, please contact us first so we can address your concerns. If you are not satisfied, you may also contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The revised version will be posted on this page with an updated effective date.

13. How to Contact Us

For questions or concerns about this Privacy Policy:

Email: trystan@conwaygroup.com.au Address: PO Box 121, Bulleen VIC 3105, Australia