Last updated: 4 October 2026

Who we are

This policy covers the Emverio group: Emverio Workplace Mediations Pty Ltd (ABN 47 604 516 752), Emverio Workplace Investigations Pty Ltd (ABN 65 635 524 006) and Emverio Workplace Complaints Pty Ltd (ABN 32 635 523 938). In this policy “we”, “us” and “Emverio” mean those companies.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Because of the work we do, we treat confidentiality as a core part of our service, not just a legal requirement.

You can contact us about privacy at any time:

• Email: info@mediations.emverio.com
• Phone: 1300 414 179
• Post: Level 2 / 52 McDougall Street, Milton QLD 4064

What we collect

What we collect depends on how you deal with us.

• If you enquire or request a quote: your name, role, organisation, email, phone number and a description of what you need.
• If you are a party to a mediation, investigation or complaint: your name and contact details, your employer and role, and the information you choose to share with us about the workplace issue. This may include information about other people involved.
• If you are a client or referrer: contact details for the people we deal with, billing information and the details needed to run the matter.
• If you are a mediator or contractor working with us: accreditation, qualifications, insurance, banking details for payment and performance information.
• If you visit our website: technical information such as browser type, pages visited and general location, collected through cookies and analytics tools.

Sometimes the information people share with us in a mediation or complaint is sensitive, for example health information or details of a workplace dispute. We only collect sensitive information where you give it to us, where it is reasonably necessary for the service, or where the law allows. You can choose what you tell us.

How we collect it

Most information comes directly from you: through our online request forms, by email or phone, in intake sessions and in mediation or interview sessions. We also receive information from:

• employers, HR teams and legal representatives who engage us;
• referral partners such as Employee Assistance Program (EAP) providers, who pass on the details of people referred to us;
• people who sign up to our newsletter or use the chat on our website.

If we receive information about you from someone else, we protect it the same way we protect information you give us directly.

How we use it

We use personal information to:

• respond to enquiries and provide quotes;
• set up, schedule and run mediations, investigations and complaint processes;
• communicate with the people involved in a matter;
• invoice and manage our relationship with clients and referrers;
• engage and pay our mediators and contractors;
• send occasional updates and resources to people who have asked for them (you can unsubscribe at any time);
• improve our website and services;
• meet our legal, insurance and professional obligations.

We do not sell personal information and we do not use it for direct marketing unless you have opted in.

Confidentiality in mediations, investigations and complaints

What is said in a mediation is confidential. We do not report the content of mediation discussions to the employer or referrer.

If the parties reach an agreement, a copy of that agreement is provided to the employer. If no agreement is reached, or a mediation does not go ahead (for example because a party does not attend), we provide the employer with a letter explaining, in our view as mediators, why it did not proceed. That letter may draw on information given to us in intake sessions. Because of this, participants do not generally receive a copy of the letter.

Investigations and complaint processes are different: our role is to gather and report information. We explain to each person at the start who will see what they tell us and what will be included in the report.

There are limits to confidentiality in every process. If someone discloses a serious safety issue, we will need to tell the employer so they can take the steps needed to keep the workplace safe. We may also disclose information where a law requires it, or where we are ordered to by a court, tribunal or authority (for example the Police or WorkSafe).

Complaints and whistleblowing disclosures

Emverio Workplace Complaints runs an external complaints and whistleblowing channel for member organisations. Our role is to receive and triage what comes in and pass it to the right people in the member organisation; we do not investigate disclosures ourselves. Complaints and whistleblowing disclosures look similar but are covered by different laws, and we handle them differently.

Workplace complaints are concerns about conduct, behaviour or treatment at work, such as bullying, harassment or unfair treatment. These are handled under the member organisation’s own complaints policy and the Privacy Act. We record the complaint, assess it and pass it to the people in the organisation who are responsible for responding. Complainants are told at the outset who will see their complaint and what happens next. We may share the complainant’s identity with the organisation where that is needed to deal with the complaint, unless the complainant has asked to remain anonymous and the matter can still be progressed that way.

Whistleblowing disclosures are reports of suspected misconduct, an improper state of affairs, or breaches of the law within an organisation. These can attract legal protections under the whistleblower provisions of the Corporations Act 2001 (Cth) for companies, and under public interest disclosure laws such as the Public Interest Disclosure Act 2013 (Cth) and the Public Interest Disclosure Act 2010 (Qld) for public sector bodies. Where a disclosure qualifies for protection:

• we keep the identity of the discloser confidential. We only disclose it with the discloser’s consent, or where the law allows (for example to ASIC, APRA, the Australian Federal Police or a lawyer for the purpose of obtaining legal advice);
• we remove or de-identify information that is likely to reveal who made the disclosure before passing the substance of it to the organisation’s eligible recipients, taking reasonable steps to reduce the risk of identification;
• disclosures can be made anonymously, and we will still receive and pass them on;
• records relating to protected disclosures are stored separately from general complaint and matter files, with access limited to the Emverio staff handling them.

If we are unsure whether a report is a complaint or a protected disclosure, we treat it as a protected disclosure until that is resolved. People who use the channel are told which process applies to them and what protections they have.

Who we share it with

We share personal information only where it is needed to deliver the service or run our business. This can include:

• the mediator, investigator or complaints officer assigned to your matter;
• the client or referrer who engaged us, within the confidentiality limits above;
• service providers who support our business, such as cloud storage, email, forms, scheduling, bookkeeping and payment systems;
• our professional advisers and insurers where necessary;
• regulators, courts or law enforcement where the law requires.

Where your information is stored

Our main systems are cloud based. Where possible we choose providers that store data in Australia. Some of the tools we use are operated by companies based overseas, mainly in the United States, which means your information may be stored or processed there. When this happens we take reasonable steps to make sure your information is handled in a way that is consistent with Australian privacy law.

How we protect it

We use access controls, multi-factor authentication, encrypted connections and secure cloud storage. Access to matter files is limited to the people working on that matter. Our mediators and contractors are bound by confidentiality agreements.

If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

How long we keep it

We keep matter records for seven years after the matter closes, to meet our professional, insurance and tax obligations. Mediators’ working notes taken during sessions are destroyed at the end of the mediation. After the retention period we securely delete or de-identify information.

Your rights

You can ask us to:

• tell you what personal information we hold about you and give you access to it;
• correct information that is inaccurate, out of date or incomplete;
• stop sending you marketing communications.

Email info@mediations.emverio.com and we will respond within 30 days. In some situations the law allows us to refuse access, for example where it would unreasonably affect someone else’s privacy or where confidentiality obligations apply. If we refuse, we will tell you why.

If you are in the European Union or United Kingdom, you may have additional rights under the GDPR or UK GDPR. Contact us and we will help.

Website, cookies and analytics

Our website uses cookies and similar tools to remember your preferences, understand how the site is used and, in some cases, to measure advertising. You can control cookies through your browser settings, though some parts of the site may not work as well without them. The site contains links to other websites; we are not responsible for their privacy practices.

Complaints

If you think we have mishandled your personal information, please contact us first at info@mediations.emverio.com. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We review this policy regularly and will post any changes on this page with a new “last updated” date.