Graham Montrose respects the privacy of the people it deals with. This policy explains what personal information we collect, how we use and protect it, and the choices you have. In this policy, "we", "us" and "our" mean Apex Sharpe Capital Pty Ltd as trustee for the Apex Sharpe Capital Discretionary Trust, which operates Graham Montrose.
What we collect
- Contact information you give us — name, role, organisation, email address and phone number, when you enquire, correspond with us, or engage the practice.
- Enquiry form submissions — the details you enter in the enquiry form on our contact page: first and last name, work email address, company, phone number if you choose to give one, and your description of what you are working through. Submitting the form also records the date and time and how you reached the site.
- Engagement information — information provided in the course of an advisory engagement, handled under the confidentiality terms of that engagement, which prevail over this policy where they are stricter.
- Website usage — pages viewed, the site or link that referred you, approximate region, and browser and device type. Some of this is collected using cookies; see Cookies and website tracking below.
How we use it
We use personal information to respond to and process enquiries, to maintain our client and prospect records, to understand which pages and referral sources generate enquiries, to follow up on business-development conversations, to provide and administer engagements, to meet legal and professional obligations, and — only where you would reasonably expect it — to keep in touch about the practice. We do not sell personal information, we do not send bulk marketing, and we do not use this information for advertising or automated decision-making. You can ask us to stop contacting you at any time.
Stopping contact from us
If we have written to you and you would rather we did not, replying with unsubscribe — or any other clear request to stop — is enough. There is no form to complete, no link to click and no account to create.
We act on that request as a permanent stop: we record it against your details the same business day, remove you from any further outreach, and do not re-add you. It applies across every way we might contact you, not only email. If you would prefer to write to us directly rather than reply, our contact details are on the contact page.
Cookies and website tracking
This site carries no advertising trackers, and we do not share data with advertising networks.
We use HubSpot (provided by HubSpot, Inc.) as our customer relationship management system, to host the enquiry form on our contact page, and to understand how this site is used. Our HubSpot account is hosted in HubSpot's Australian region. HubSpot is a United States company, and it and its subcontractors may access data from outside Australia in the course of operating and supporting the service.
HubSpot sets first-party cookies on this site. These cookies distinguish one visitor from another and recognise a returning visitor, and if you submit the enquiry form they allow the pages you viewed to be associated with your enquiry. That information is therefore capable of identifying you once you have made contact with us. HubSpot also receives your IP address and uses it to derive an approximate location.
We also use Cloudflare Web Analytics, which is aggregate and cookieless and does not identify individual visitors.
You can block or delete cookies through your browser settings. If you block them the enquiry form may not work; you can always email us instead.
Disclosure
We disclose personal information only to service providers who support the running of the practice — including HubSpot (CRM, enquiry forms and website analytics), and our email, document storage and website hosting providers — under confidentiality obligations; to professional advisers where required; and where the law requires disclosure. We take reasonable steps to use providers that store data in Australia or in jurisdictions with comparable protections.
Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access — including access controls and need-to-know handling. We retain personal information only as long as it is needed for the purposes above or as the law and professional obligations require, then take reasonable steps to destroy or de-identify it.
Access, correction and complaints
You may request access to the personal information we hold about you, ask us to correct it, or raise a privacy concern by emailing contact@grahammontrose.com.au or writing to Graham Montrose. We respond within a reasonable time, normally 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Changes
We may update this policy from time to time. The current version is always published on this page, with material changes noted.
Last updated: September 2026.