Version 1 | November 2025

Unitus Pty Ltd (registered in Australia, ABN 47 060 313 359), is a consultancy partnering with leaders to deliver high-stakes projects with clarity and confidence. We support executives across industries including transport and infrastructure, to shape winning bids, mobilise workforces, deliver operational readiness and excellence, and drive organisational transformation. We work at the intersection of strategy, delivery and human performance, helping organisations navigate complexity and shape outcomes that create lasting value for communities.

We are required to comply with all applicable personal information protection (“privacy”) legislation, in the jurisdictions in which we conduct our business.
This Policy describes the personal information we may collect, and how we may use, disclose, share, store, and protect (“handle”) that personal information. This Policy applies to personal information collected via our corporate website (https://unitus.com.au/) (the “site”) and in the provision of our services.
Personal information under the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020 (“the Acts”) means information, whether true or not, about an individual who can be identified either:

• from that information; or
• from that information and other information to which we have or are likely to have access.

By providing us with your personal information, you consent to us handling your personal information as set out in this Policy. We are committed to protecting the personal information we handle.

We typically request your personal information when you ask for a service or request information from us (e.g., through a webform).

We only collect the personal information that is absolutely necessary for us to perform our services.

If you send us information we didn’t ask for and don’t need, we will delete or de-identify it as soon as possible.

We collect your personal information in two main ways: from you, or from other companies we work with, including when we are providing services to our clients.

Depending on the purpose behind the collection of your personal information, and the subsequent use of that personal information, we may collect from you or a third party the following personal information about you:

We may access cookies stored on your computer when you visit our website or when you open an email from us. We are able to do this by including web beacons (also known as clear GIFs or web bugs) in our emails. Our web beacons do not store additional information on your computer but, by communicating with our cookies on your computer they can tell us when you have opened emails from us and what pages you look at.

You can typically remove or reject cookies via your browser settings. In order to do this, follow the instructions provided by your browser (usually located within the “settings,” “help” “tools” or “edit” facility). Many browsers are set to accept cookies until you change your settings.

Our services are not directed at, or intended for use by, people under the age of eighteen (18) or such other age designated by applicable law (“minors”). We do not knowingly collect or request personal information from minors.

If you are a minor, please do not use attempt to send us your personal information. In the event that we learn that we have collected the personal information of a minor, we will take steps to delete the personal information as soon as possible.

Unitus will only use the personal information collected for the primary and related purposes that Unitus disclose at the time the information is collected (for example, for the provision of services. The personal information we collect about you may also be used by us for one or more of the following purposes:

• to meet our legal (including contractual) and regulatory obligations;
• to process payments and transactions;
• to help us improve and develop our website and online products and services;
• to understand our user demographics and use of our website;
• to answer questions and respond to comments, requests, applications,
  feedback or queries you send us;
• to enable any actual or proposed assignee, transferee, or purchaser, its holding company or its business to evaluate any proposed transaction with us;
• any other incidental business purposes related to or in connection with the above.

We may disclose your personal information to the following categories of third parties for the purposes described in section 3:

• Third Parties Designated by You. We may disclose your personal
  information to third parties where you have provided your consent to do so.
• Our Third-Party Service Providers. We may disclose your personal information to our third-party service providers who provide
  services such as data analysis, information technology and data related
  infrastructure provision, email delivery, auditing, payment processors and
  other similar services.
• Business Partners. our subcontractors, suppliers, and advisors, to the extent necessary and relevant for the provision of our online products or services;
• Third Party Advertisers. We may disclose Personal information with
  advertisers and advertising networks that require the data to select and serve relevant advertisements to you and others. If you prefer not to receive promotional materials, you may choose to opt-out or manage your email subscriptions by using the unsubscribe link at the bottom of the email you have received from Unitus.
• Other Disclosures. those other persons we believe are reasonably necessary, to comply with our legal and regulatory requirements and/or exercise any rights or obligations we have under our contracts.

Your information, including Personal information that we collect from you, may be transferred to, stored and processed by us and our third parties outside the country in which you reside, including, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. By using our Site, you agree to this transfer, storing or processing, provided of course, our processing is in accordance with the Acts and/or this Policy.

We use industry-standard security measures (electronic, physical, and procedural) to protect your personal information from misuse, loss, and unauthorized access.

If an incident occurs (such as misuse, loss, or unauthorized access to your personal information), we will immediately investigate.

Following the investigation, we will determine the necessary remediation actions and assess our legal (and contractual) obligation to report the incident to you and any regulatory bodies.

We keep your personal information only for as long as necessary to fulfill the original purpose of collection (see section 3).

We determine this retention period based on the data’s nature, sensitivity, potential risk of harm, and our applicable legal obligations (such as minimum statutory retention requirements).

Once the retention period expires, we will delete your data. If technical limitations
prevent us from deleting it entirely from our systems, we will ensure it is secured and prevented from any further use.

If you have any questions or comments about this Policy, or have any concerns about our handling of your personal information, then please contact our Data Protection / Privacy Officer whose contact details are below:

Email: corporate@unitus.com.au
Mail: Unitus Pty Ltd, Data Protection / Privacy Officer, Level 31, 101 Miller Street,
North Sydney NSW 2060

If you wish to make a formal complaint, then please make your complaint in writing to our Data Protection / Privacy Officer (as noted above). We will consider your complaint promptly and contact you to seek to resolve the matter.

We reserve the right, at our discretion, to change, modify, add or remove portions from this Policy from time to time, so we encourage you to review this Policy regularly.