Graham Montrose respects the privacy of the people it deals with. This policy explains what personal information we collect, how we use and protect it, and the choices you have. It is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Graham Montrose is operated by Apex Sharpe Capital Pty Ltd as trustee for the Apex Sharpe Capital Discretionary Trust; in this policy, "we", "us" and "our" refer to that entity.
What we collect
- Contact information you give us — name, role, organisation, email address and phone number, when you enquire, correspond with us, or engage the practice.
- Engagement information — information provided in the course of an advisory engagement, handled under the confidentiality terms of that engagement, which prevail over this policy where they are stricter.
- Website usage — this site does not use advertising trackers or tracking cookies. If analytics are enabled, they are cookieless and aggregate only (page views, referrers, approximate region); they do not identify you.
How we use it
We use personal information to respond to enquiries, provide and administer engagements, meet legal and professional obligations, and — only where you would reasonably expect it — keep in touch about the practice. We do not sell personal information, and we do not send bulk marketing. You can ask us to stop contacting you at any time.
Disclosure
We disclose personal information only to service providers who support the running of the practice (such as email, document storage and website hosting providers) under confidentiality obligations; to professional advisers where required; and where the law requires disclosure. We take reasonable steps to use providers that store data in Australia or in jurisdictions with comparable protections.
Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access — including access controls, encrypted services and need-to-know handling. We retain personal information only as long as it is needed for the purposes above or as the law and professional obligations require, then take reasonable steps to destroy or de-identify it.
Access, correction and complaints
You may request access to the personal information we hold about you, ask us to correct it, or raise a privacy concern by emailing contact@grahammontrose.com.au or writing to Graham Montrose. We respond within a reasonable time, normally 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Changes
We may update this policy from time to time. The current version is always published on this page, with material changes noted.
Last reviewed: August 2026.