RMA provides risk management services. These services focus in the area of Enterprise Risk Management (ERM). Specific service engagements include (but are not be limited to) developing Business Risk Profiling Enterprise Risk Management Frameworks, Business Risk Profiling, ERM Maturity Assessments, Risk Quantification Modelling, Insurance Gap Analysis, Insurance Limit Validation, Risk Management Training and the provision of an online Risk Management System (RISKLABHQ).

Typically, the risk consulting activities that RMA conducts does not necessitate the collection of personal information. However, on occasion, it is possible that RMA may collect personal information that is reasonably necessary for one or more of our functions and activities, and in particular so that we can provide our services to you.

Where possible we would collect your personal information directly from you. Personal information would generally be collected during the course of conducting a risk management consulting activity on behalf of you or the organisation for which you work. We may also need to collect personal information from third parties and publicly available sources. We will only collect personal information by lawful and fair means.

The kinds of personal information that RMA collects and holds will depend on the type of service that you require, but may include:

• your name, address and contact details such as telephone numbers and e-mail addresses;

• your billing address

• your payment details for the purpose of processing the purchase of our products and services.

If we need to collect sensitive information that is reasonably necessary for one or more of our functions or activities, such as information about your race, ethnic origin, political opinions, religious beliefs, or trade union memberships, we will obtain your consent before doing so unless a permitted general situation exists under the Privacy Act 1988 (Cth).

If we receive personal information about you from a third party, we will promptly determine whether or not we could have collected that personal information had we sought that information. If we determine that we could not have collected that personal information and the information is not in a Commonwealth record, we will destroy the information or ensure that the information is de-identified, but only if it is lawful and reasonable to do so.

When you visit RMA’s website, a small data file called a cookie may be placed on your computer. The purpose of a cookie is to assist us in analysing web traffic by recording information about the pages people visit, so that we know what people find interesting and useful. This anonymous information is not linked to your identity or any other personal information that you provide us. You may be able to set your computer so that cookies are refused, however this action could impede the functionality of RMA’s website(s).