Privacy Policy

Last updated: October 2026

About this policy

Black Mountain Consulting (ABN 41 681 591 999) (“BMC”, “we”, “us”) provides ICT consulting and labour hire services to Australian Government agencies. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

It applies to candidates and contractors who apply to work with us, referees, people at client agencies we deal with, and anyone who contacts us or visits our website.

What we collect

If you apply to join our roster or for a role, we may collect:

• your name, email address, phone number and location;
• your CV, work history, qualifications, skills and the kinds of roles you are interested in;
• your right to work in Australia, including citizenship status where a role requires it;
• your current security clearance level and status, if you have one;
• details of your referees and what they tell us about you;
• your rate expectations and availability;
• a record of each role you have agreed to be put forward for (your “right to represent” consent).

If you are engaged through us, we will also collect the details we need to contract and pay you, such as business, bank, tax and superannuation details, and any checks the client requires.

Some roles require checks that involve sensitive information, such as a police check. We only collect sensitive information with your consent and when it is needed for a role.

For client contacts and other enquiries we collect your name, organisation, role, contact details and what you tell us. Our website records standard technical information (such as IP address and pages requested) in server logs so we can run and secure the site.

How we collect it

We usually collect information directly from you: through our online application form, by email, or when we speak with you. We may also collect information from your referees, from public professional profiles you point us to, or from a client agency when it tells us about your clearance or performance on an engagement we placed you in.

If we receive information about you that we did not ask for, we will decide whether we could have collected it lawfully. If not, we will destroy or de-identify it.

You can contact us with a general enquiry without giving your name. We cannot assess you for a role or put you forward without knowing who you are.

Why we collect it and how we use it

We use candidate information to:

• assess your experience against roles our clients need filled;
• contact you about roles that may suit you;
• prepare and submit responses to client requests, with your consent for each role;
• check references, work rights and clearance status;
• contract, onboard, pay and support you if you are engaged;
• meet our legal and contractual obligations.

We do not sell personal information. We will only send you marketing material if you have agreed to it, and you can opt out at any time.

Consent before we put you forward

Joining our roster does not mean we will share your details with anyone. Before we put you forward for a specific role, we will contact you, describe the role and the agency, and ask for your consent to represent you for that role. We keep a record of each consent. If you do not agree, we will not submit you.

Who we share it with

We only disclose your information to:

• the Commonwealth buyer agency for a role, and only after you have consented to being put forward for that role;
• your referees, to the extent needed to check your references;
• the relevant agency or vetting authority, to confirm your clearance status, with your consent;
• our professional advisers (such as accountants, lawyers and insurers) where needed;
• service providers who host our systems, under obligations to protect it;
• government bodies where the law requires or authorises it.

Where we store it and how we protect it

We store personal information in our Microsoft 365 environment, which is hosted in Australia, and in our internal business systems. Access is limited to people who need it to do their work, and we take reasonable steps to protect it from misuse, loss and unauthorised access or disclosure.

We do not intend to send candidate information outside Australia. If that changes, we will update this policy and take reasonable steps to make sure overseas recipients protect it in line with the APPs.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

How long we keep it

We keep roster and candidate information for two years after we were last in contact with you. After that we delete it, unless you ask us to keep it, or we need to keep it longer to meet a legal or contractual obligation (for example, contract and payment records for an engagement).

You can ask us to remove you from the roster and delete your information at any time.

Accessing and correcting your information

You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing connect@blackmtc.au. We will respond within 30 days. We do not charge for a request. If we refuse a request, we will tell you why in writing and how to complain.

Complaints

If you have a concern about how we have handled your personal information, email connect@blackmtc.au with the details. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.

Contact us

Black Mountain Consulting
Canberra, ACT, Australia
Email: connect@blackmtc.au