Legal

Privacy Policy

Last updated 7 October 2026. Re-issued from the version dated 15 April 2025.

CSH Group Pty Ltd trading as Shaped (ABN 44 648 874 882) ("we", "us", or "our") is committed to protecting your privacy. We are bound by the Australian Privacy Act 1988 (Cth), which includes the Australian Privacy Principles (APPs) that regulate how we collect, use, disclose, store, and protect your personal information.

This Privacy Policy explains how we handle your personal information, including the kinds of personal information we collect, how it is used and disclosed, and how you can access or correct your information or make a complaint.

1. What is personal information?

Personal information refers to data that identifies, or could reasonably identify, an individual. Examples include your name, email address, phone number, and IP address.

We may also collect sensitive personal information, with your consent, where required by law or necessary for specific services.

2. What personal information do we collect?

The personal information we may collect includes:

  • Name
  • Email address
  • Phone number
  • Business name and position title (if relevant)
  • Billing address and payment details (where relevant to an engagement)
  • The content of enquiries, questionnaire answers and messages you send us
  • IP address and device or browser information, in server logs

When we deliver services, we may also handle personal information held in your own systems (for example customer email addresses in an inbox we are asked to automate). We handle that information on your instructions, under a written agreement that sets out where the data lives and which providers process it.

3. How do we collect personal information?

We collect personal information in a number of ways, including:

  • Directly from you when you interact with us (phone, email, website forms, bookings, meetings)
  • Automatically through your use of our website, limited to server logs and privacy-respecting analytics that do not identify individuals
  • From third-party service providers that help us run the business (for example booking and email providers)
  • From publicly available sources or third parties with your consent

4. Why do we collect, use and disclose your personal information?

We collect, use and disclose your personal information for purposes including:

  • To respond to your enquiry and arrange a call
  • To scope, propose, deliver, run and maintain the services you engage us for
  • To manage engagements, invoicing and payments
  • To communicate with you about our services
  • To comply with our legal obligations
  • To improve our website and services

We will not sell your personal information to third parties. We will not use or disclose your personal information for any secondary purpose unless you have consented or we are permitted to do so by law. We do not use your personal information for direct marketing without your consent.

5. AI and your information

Information you send us through this website is not used to train AI models, ours or anyone else's. Where an AI provider processes data as part of an engagement, we name the provider, describe what it sees and confirm its no-training terms in writing before anything runs. See our data statement.

6. How do we store and protect your personal information?

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:

  • Secure hosting and encryption in transit
  • Restricted access to personal information
  • Confidentiality obligations on anyone who works with us

However, no data transmission over the internet can be guaranteed to be 100% secure. While we take reasonable steps to protect your information, we cannot guarantee its immunity from breaches. We keep personal information only as long as it is needed for the purpose it was collected, or as the law requires.

7. Disclosure of personal information to third parties

We may disclose your personal information to:

  • Service and technology providers who assist us in operating our business (for example web hosting, email delivery, booking and, where agreed, AI processing)
  • Payment and accounting providers
  • Regulatory or government authorities as required by law
  • Any third party with your consent or where required or authorised by law

Some of these third parties may be located outside of Australia. Where this occurs, we take reasonable steps to ensure your information is handled securely and in accordance with this policy, and where a provider offers Australian data residency we use it.

8. Cookies and third-party tools

This website does not use advertising cookies, tag managers, pixels or visitor-identification services. It may use privacy-respecting analytics that do not set cookies and do not identify individuals. Third-party embeds, such as the booking calendar on our contact page, are governed by the privacy terms of the provider.

9. Accessing and correcting your personal information

You have the right to access the personal information we hold about you and request corrections if you believe it is inaccurate, outdated, or incomplete.

To request access or correction, please contact us using the contact details below. We may need to verify your identity before fulfilling your request.

10. Making a complaint

If you have a concern or complaint about how we handle your personal information, or believe your privacy has been breached, please contact us first so we can try to resolve the issue.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: oaic.gov.au
Phone: 1300 363 992

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated policy will be posted on our website with the "last updated" date. We encourage you to review our Privacy Policy periodically.

12. Contact us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at:

CSH Group Pty Ltd trading as Shaped
Email: hi@shaped.com.au
Phone: 1300 403 567
Address: 1/6 Northgate Drive, Thomastown VIC 3074