Privacy

Privacy Policy

Last updated: October 2026

This policy explains how Ironpeak Consulting, a business of Hartwell Digital (ABN 44 286 503 049), handles the personal information you give us through this website. We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

We only collect what you choose to give us, and a small amount of technical data needed to run the site:

  • Information you enter in our contact form: your name, email, company, your role, your staff numbers if you give them, what you are looking for, and your message. If you ask for a call, also the days and times that suit you, where you are, how you would like us to call, and your phone number if you give it.
  • Information you enter to request a Defence-able Review: your name, email, business name and website address, your staff numbers if you give them, and anything you'd like us to look at.
  • If you sign up to our brief, the details described under The brief below.
  • Standard technical data logged by our hosting, such as your IP address and browser type, used to keep the site secure and working.
  • Anonymous usage statistics collected by Google Analytics: the pages you visit, how you arrived at the site, and general information such as your device type and approximate location. This data is statistical and does not identify you.

Google Analytics sets cookies on your browser to make that measurement work. We use it to understand how the site is used, nothing more. We do not run advertising trackers, and we do not use this data to profile or identify you. You can block these cookies in your browser settings, or opt out of Google Analytics entirely with Google's opt-out add-on.

How we use it

We use the information you send us to respond to your enquiry and to discuss whether we can help your business. We do not sell your information, and we do not share it with anyone except the service providers below who help us operate.

Who helps us process it

  • Cloudflare hosts the website and handles security and delivery.
  • Resend delivers your enquiry to us by email when you submit a form, and sends the brief and keeps its list of subscribers.
  • Google Analytics measures how the site is used, so we can improve it.

These providers only process your information to provide their service to us, and are bound by their own privacy and security obligations.

The brief

If you sign up to The Open Window, our fortnightly email brief, we collect your email address and, if you give them, your name, company, staff numbers, what your business makes, what it already holds (such as DISP membership or ISO 9001) and how often you've bid for defence work. We use them to send you the brief and to match it to your business, and for nothing else.

  • We only send it if you ticked the box to say you'd like it, and then confirmed your address from the email we sent you.
  • Every issue says who it's from and has an unsubscribe link. We act on an unsubscribe within five business days.
  • Your details are held by our email provider, Resend, which stores them outside Australia.

Letters we send by post

We sometimes write to Australian businesses that supply, or could supply, the defence industry. To do that we use the business's name and address, and the name and role of a senior person there.

  • We take these from public sources only: Commonwealth contract notices published on AusTender, published grant announcements, state defence industry directories, the business's own website, and the public company register.
  • We don't buy lists, and we only ever write to a business address.
  • We use the details to write to you and to make one follow-up call to your business. We don't sell or share them.
  • To stop the letters, use the form at ironpeakconsulting.com.au/letter or email us. We'll stop before the next batch is addressed, and keep a note of your request so you aren't written to again.

How long we keep it

We keep enquiry information for as long as we need it to respond and to maintain our working relationship with you. We keep brief subscribers' details until they unsubscribe, and the details we write to only while we're writing to businesses like yours. A request to stop the letters is kept for as long as we send them, so it's honoured. If you ask us to delete your information and we have no legal reason to keep it, we will.

Your rights

You can ask us to access the personal information we hold about you, correct it, or delete it. Email us at [email protected] and we will help. If you are not satisfied with how we handle a privacy matter, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Security

We take reasonable steps to protect your information, including secure hosting and encrypted connections. No online service can be perfectly secure, but we treat your enquiries as confidential.

Changes

We may update this policy from time to time. The current version always lives on this page, with the date it was last updated shown at the top.

Contact

For any privacy question, email [email protected].