‍Privacy Policy

Ally Group Pty Ltd (ABN 45 604 925 804), trading as Allygroup

Current as at 31 July 2026

We value the privacy of your personal information and are committed to safeguarding your privacy and the confidentiality of your personal information.

This Privacy Policy outlines how we collect, hold, use and disclose your personal information.

By using our website and services, or otherwise providing us with your information, you consent to us collecting, holding, using and disclosing your personal information as described in this Privacy Policy.

Our commitment to respecting your privacy online

At Allygroup, we respect your privacy and take our responsibilities seriously.

We collect, use and protect your personal information when we provide legal resourcing, consultancy and legal project management services.

Allygroup aims to only collect the personal information we require to perform our service.

We manage personal information in accordance with the Privacy Act 1988 and the Australian Privacy Principles.

How we collect your personal information

We collect your personal information directly from you when you:

  • speak with us in person, by phone, email or online

  • complete a form, survey or questionnaire

  • apply for an advertised tole through SEEK or other online platforms

  • apply for a position with us as an employee or contractor

  • send us your resume or CV

  • attend an Allygroup event or webinar

  • subscribe to our mailing list or updates.

Sometimes, we collect information about you from other sources, including:

  • LinkedIn and other publicly available websites

  • Public government registers, such as ASIC

  • Referees nominated by you

  • Screening and verification providers

  • Organisations providing security clearances, police checks or medical assessments

  • Subcontractors or service provides who engage you

  • Clients who provide feedback about your work or performance

  • Business development activities and professional networking.

If we collect information about you from another source, we will take reasonable steps to let you know, when required by law.

What information we collect and hold

The information we collect depends on your relationship with us.

Personal details

We may collect:

  • Your name

  • Date of birth

  • Gender

  • Nationality and citizenship

  • Place of birth

  • Photograph

  • Marital status

  • Other identifying information.

Contact Details

We may collect:

  • Home, postal and work addresses

  • Telephone numbers

  • Email addresses.

Employment and professional information

We may collect:

  • employment history

  • qualifications and training (including academic records)

  • professional memberships

  • directorships

  • work preferences

  • remuneration information

  • availability for work

  • performance and reference information

  • whether you identify as Aboriginal or Torres Strait Islander.

Verification and compliance information

We may collect:

  • visa and work rights information

  • citizenship information ‍

  • driver licence information

  • security clearance information

  • police check results

  • referee details

  • conflict of interest declarations

  • any other information required to meet client requirements.

Financial information

We may collect:

  • Bank account details

  • Superannuation details

  • Tax file numbers where required by law

  • Payment information.

Sensitive information

Sometimes we collect sensitive information when we need it to provide our services or meet our legal obligations. This may include:

  • Health information

  • Criminal history information

  • Security clearance information

  • Workplace adjustments requirements

  • Professional conduct information

We generally collect sensitive information with your consent, unless the law allows or requires us to collect it without consent.

Website and technology information

When you use our website or online systems, we may collect:

  • IP address information

  • Browser and device information

  • Website usage information

  • Analytics and activity logs

  • User preferences.

If you do not provide information

If we are not able to collect, handle, use and disclose personal information about you as set out in this Privacy Policy, we may not be able to provide you with our services or with access to our website.

Why we collect personal information

We collect, use, and share personal information to:

  • Identify and assess candidates

  • conduct referee, police and other screening checks

  • confirm citizenship and work rights

  • prepare candidate profiles and résumés

  • match candidates with suitable opportunities

  • provide legal resourcing, consultancy and legal project management services

  • manage client relationships

  • administer payroll and invoicing

  • meet legal, regulatory and professional obligations

  • improve our systems and services

  • conduct research and business planning

  • invite people to events and webinars

  • send marketing communications where permitted by law.

Sharing candidate information with clients

A key part of our business is introducing candidates to clients. We will usually ask for your consent before we share your résumé, profile or identifying information with a client. Once you give consent, we may prepare candidate summaries or profiles and provide them to clients as part of a recruitment or consulting process.

Who we share information with

‍We may share personal information with:

  • current and prospective clients

  • referees

  • payroll and accounting providers

  • superannuation providers

  • technology and cloud service providers

  • insurers and professional advisers

  • screening and verification providers

  • government agencies

  • regulators

  • law enforcement agencies

  • organisations where the law requires us to do so.

We take reasonable steps to make sure organisations that handle information for us do so securely.

How we hold and protect your personal information

We store information electronically and in hard copy. We use systems operated by Allygroup and trusted service providers. These may include:

  • Microsoft 365

  • Bullhorn

  • LEAP

  • SEEK

  • Astute

  • other approved business systems.

We use security measures to protect your personal information from loss and unauthorised access, such as:

  • access controls

  • user permissions

  • staff training

  • confidentiality obligations

  • security monitoring

  • information security policies.

Our staff are trained on their legal obligations for dealing with personal and sensitive information.

While we take reasonable steps to protect personal information, no system can guarantee complete security.

Overseas disclosure

Some of our service providers may store or process information outside Australia.

For example, this may happen through cloud hosting, software platforms or technical support arrangements.

When information is stored or processed overseas, we take reasonable steps to make sure it is protected and handled consistently with Australian privacy laws.

How long we keep information

‍We keep personal information for as long as we need it for business, legal and regulatory purposes. For example, we may keep candidate information so we can contact you about future opportunities.

‍When we no longer need personal information, we will securely destroy it or remove identifying details.

‍ We collect, use and store tax file numbers only as allowed by tax and superannuation laws.

Direct marketing

We may send you information about:

  • employment opportunities

  • industry updates

  • events and webinars

  • Allygroup services

  • other information that may interest you.

‍We do not use sensitive information for direct marketing.

You can unsubscribe at any time by:

  • using the unsubscribe link in our communications; or

  • contacting us directly.

How we use artificial intelligence

‍We sometimes use artificial intelligence (AI) tools to help with administrative work, information management, drafting and other business activities.

‍We do not use AI to make decisions about people without human involvement.

‍Before we use an AI tool, we assess whether it is appropriate, secure and consistent with our privacy obligations.

‍We choose tools that do not use personal information to train publicly available AI models.

‍Our people review AI-generated outputs before relying on them.

Data breaches

We take data security seriously.

If a data breach is likely to cause serious harm, we will respond in line with the Notifiable Data Breaches Scheme. This may include notifying affected individuals and the Office of the Australian Information Commissioner.

‍Accessing and correcting your information

You can ask us for access to the personal information we hold about you.

‍You can also ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

‍In some situations, the law allows us to refuse a request. If that happens, we will explain why.

Privacy complaints

We encourage you to contact Allygroup at any time you have questions or concerns about this Policy or about the way in which we handle your personal information.

‍We will:

  • acknowledge your complaint

  • investigate the issue

  • respond in writing

  • aim to resolve the matter within 30 days where possible.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

‍Contact us

Privacy Officer
Allygroup
Suite G3, 65 Canberra Avenue
Griffith ACT 2603

‍ Email: info@allygroup.com.au
Phone: +61 2 5104 3170

‍Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

‍ ‍

‍