01
Introduction
Innovate Ahead Group Pty Ltd (ABN 91 130 671 340) respects the privacy of individuals who visit our websites, contact us, participate in our events, complete assessments or engage our professional services.
This Privacy Policy explains how we collect, use, hold and disclose personal information and how individuals can contact us about their information. We aim to manage personal information responsibly and in accordance with applicable Australian privacy laws. This policy is not an independent certification of legal compliance.
02
Information we collect
The information we collect depends on how you interact with us. We do not collect every item below from every visitor. Relevant information may include:
Some information is needed to respond to a request or provide a service. Other information is optional and can be left blank. Where requested information is not supplied, we may be unable to provide the particular response or service.
- Name, business email address and telephone number.
- Organisation, position or job title and business website.
- Organisation size and business turnover range, where voluntarily provided.
- Enquiry details, event registration information and relevant business correspondence.
- Assessment responses, calculated results and recommendations.
- Communication preferences and marketing consent records.
- Technical information associated with website use, such as page visits and browser or device information where collected by enabled services.
03
How we collect information
We generally collect information directly from you when you interact with us or our website features. These interactions may include:
Website enquiry, booking and event-related forms may be embedded from our customer relationship management infrastructure. Those forms display their own fields, consent wording and submission confirmation. The scorecard is a separate application feature.
- Completing a website enquiry form or contacting us by email or telephone.
- Registering for events, requesting professional services or arranging a consultation.
- Completing an online assessment or choosing to receive communications.
- Participating in meetings, workshops or other professional engagements.
- Using website features that involve cookies, browser storage or optional analytics.
04
How we use information
We use information for purposes relevant to your interaction with us. These may include:
Submitting an assessment does not automatically add you to a marketing list. Requested assessment-result emails and responses to your enquiries are separate from optional marketing communications.
- Responding to enquiries and arranging meetings or consultations.
- Providing requested advisory and professional services and managing client relationships.
- Managing event registrations and related communications.
- Processing scorecard submissions, calculating and displaying results, and emailing requested reports when delivery is configured.
- Maintaining business correspondence and appropriate business records.
- Understanding and improving website performance using analytics where you have opted in.
- Sending marketing communications where permitted and consistent with your choices.
05
Executive Transformation Scorecard
The Executive Transformation Scorecard is a complimentary self-assessment. It collects your name, business contact details, organisation and position; optional organisation information; answers to the 12 assessment questions; calculated overall and category scores; recommendations; submission timestamp; and marketing preferences.
We use this information to process the assessment, calculate scores, display personalised results, email your requested results when email delivery is configured, notify Innovate Ahead Group of the completed submission, respond to any consultation enquiry, and maintain assessment records for legitimate business purposes.
Results are indicative and based on self-reported answers. They are not formal audits, compliance certifications or independent organisational assessments.
Results are restricted to the assessment session rather than published in a public directory. Browser access expires after 24 hours; that does not delete the stored submission. Unfinished responses are temporarily stored in your browser session and cleared after successful submission. Take care when using a shared device.
06
Marketing communications
Marketing communications are separate from requested assessment-result emails. You may choose to receive business insights, executive briefings, event invitations, relevant updates and professional services information.
The scorecard marketing checkbox is optional and unchecked by default. Choosing not to receive marketing does not prevent you from completing the assessment or viewing results. We do not automatically enrol scorecard participants into marketing campaigns.
Any commercial marketing communications we send must include an appropriate unsubscribe option. You can also ask to stop receiving marketing by emailing hello@innovateahead.com. Withdrawal of marketing consent does not prevent us from responding to a current enquiry or sending requested service-related communications.
Consent evidence may be kept separately where needed to demonstrate how and when a choice was made. A recorded scorecard preference is not itself a mailing-list subscription.
07
Disclosure to service providers
Appropriately authorised service providers may process information to provide services supporting our business operations. Relevant categories may include website hosting, database infrastructure, transactional email, customer relationship management, event registration, analytics, and IT support or security where engaged.
Replit provides application hosting and database infrastructure for the scorecard. Mailgun is the selected transactional email provider; live delivery has not been verified for this draft. Sending through Mailgun shares recipient details and email content with that provider.
Google Analytics is used for optional website analytics following opt-in. Our existing embedded enquiry and booking forms use customer relationship management infrastructure. The underlying CRM, event and business mailbox provider arrangements require administrative confirmation before public release; no unverified provider names are stated here.
Service providers may receive information relevant to the services they provide. Where scorecard email is enabled, respondent details and result content are processed for delivery, and an internal notification is sent to Innovate Ahead Group. Email copies may also be handled by the recipient’s email service.
08
Overseas data processing
Some technology providers may process or store personal information outside Australia. We do not claim that information remains exclusively in Australia or that Australian data residency has been verified.
The scorecard is configured to use Mailgun’s US sending region. This setting alone does not establish every location where email content, logs, backups or subprocessors handle information, or confirm inbox delivery.
Administrative review before publication: confirm the actual Replit application, database and backup locations; the Mailgun account, agreement, subprocessors and retention settings; Google Analytics handling; and the CRM, event and mailbox arrangements. Relevant overseas locations and safeguards must be confirmed where practicable before approving this policy.
09
Data security
We use reasonable technical and organisational measures to protect personal information against misuse, loss and unauthorised access or disclosure. Measures are selected for the relevant service and information.
The scorecard uses session-based access controls, restricted database access and server-side credential handling. Production API requests require HTTPS, and access tokens are not exposed as public result links. Credentials must be managed securely and access limited to authorised people.
Secure hosting, encrypted connections and appropriate monitoring and maintenance form part of the operational security review before public release. No system, transmission method or storage service can be guaranteed completely secure.
10
Data retention
Proposed policy, subject to final business and legal review: completed Executive Transformation Scorecard submissions are ordinarily retained for up to 24 months from the original submission date. Revisiting the website does not restart or extend that period.
Information may be retained for longer where required by law, reasonably needed for an ongoing business relationship or otherwise permitted by applicable law. After the applicable period, information will be securely deleted or de-identified in accordance with the implemented retention procedures.
Business correspondence may have different retention periods. Client records may be subject to separate legal or contractual obligations. Consent evidence may need to be retained separately for compliance purposes, with its own justified retention arrangements.
Implementation review: new scorecard submissions record the submission date and a calculated retention expiry. Automated permanent deletion is not active. The 24-month operational deletion or de-identification process must be implemented, tested and approved before activation. Legacy records, legal or client exceptions, pending emails and consent evidence require review.
The approved process must also address provider records, business email copies and backups, including access restrictions, backup expiry and controls to prevent deleted information being restored into active use. We do not promise immediate or unconditional deletion from all backups or from a recipient’s own mailbox.
11
Cookies and website analytics
The website uses cookies or similar browser technologies for essential functionality, security, session management and preferences. The scorecard uses a session cookie and browser session storage for unfinished responses. Your analytics preference is saved in browser local storage.
The site’s Google Analytics tag loads only after you choose to allow analytics. It measures page visits and selected enquiry-button clicks; a tracked click is not proof that an enquiry was submitted. Optional analytics is not required to complete the scorecard or use our enquiry forms.
You can allow or reject analytics using the existing preference controls, and revisit your choice using Analytics preferences in the footer. Rejecting analytics does not remove essential session storage or control the separate practices of embedded third-party forms.
The analytics choice, CRM form consent and scorecard marketing preference are separate. This policy does not claim that our analytics control disables every technology used by an external form or website.
12
Access and correction
You may contact Innovate Ahead Group to request access to personal information we hold about you, request correction of inaccurate or incomplete information, or ask questions about how your information is handled.
Requests are assessed under applicable law. We may need to verify your identity and identify the relevant record before responding. Please provide enough information to locate the record without sending unnecessary sensitive information. We will explain applicable limitations where relevant.
13
Requests for deletion
You may request deletion of your personal information by emailing hello@innovateahead.com. We will consider requests in accordance with applicable laws and legitimate retention requirements, including relevant legal obligations and ongoing client matters.
Deletion is not unconditional or necessarily immediate. We may verify your identity, assess the request and consider associated provider records and backups. We will respond about the action we can take and any applicable limitations.
14
Privacy complaints
If you have concerns or a complaint about our handling of personal information, please first contact hello@innovateahead.com with the details and the outcome you are seeking. We will review the matter and respond within a reasonable timeframe.
If the matter is not resolved, external complaint options may be available, including the Office of the Australian Information Commissioner (OAIC), where applicable. The OAIC explains eligibility and its complaint process on its website. This policy does not assume that every matter falls within the OAIC’s jurisdiction.
15
External websites
Our website may link to websites operated by third parties. Innovate Ahead Group does not control their privacy practices, content or services. Please review the relevant third-party privacy policies before providing personal information.
16
Changes to this policy
This policy may be updated periodically to reflect changes to our services, practices or applicable requirements. Changes will be reflected by updating the date displayed on this page. Material changes may be communicated where appropriate or required.
This version is a draft dated 26 October 2026. If final approval or publication occurs later, the displayed date must be updated to the final approval date before public release.
17
Contact details
Innovate Ahead Group Pty Ltd
ABN: 91 130 671 340
Melbourne, Victoria, Australia
Email: hello@innovateahead.com
Website: https://innovateaheadgroup.com
Innovate Ahead Group Pty Ltd · Melbourne, Victoria, Australia