Orka Advisory / Privacy

Privacy Policy

How we collect, use and handle personal information when you visit our website, use our tools or work with us.

Last updated: 20 September 2026

01. Who we are

Orka Advisory (“Orka”, “we”, “us” or “our”) is based in Melbourne, Australia. We provide sustainability, climate and ESG advisory, education, speaking, coaching and related services.

This policy explains how we handle personal information in connection with our website, enquiries, assessment tools and services. Personal information is information or an opinion about an identified person, or a person who can reasonably be identified. Information about an organisation may also be personal information where it identifies an individual.

Additional collection notices or engagement terms may explain how information is handled for a particular service. Contact us if you would like clarification.

02. Information we collect

The information we collect depends on how you interact with us. It may include:

  • Contact and professional details: your name, email address, telephone number, organisation, role and business contact details.
  • Enquiries and service information: messages, quote requests, correspondence, meeting notes, feedback and information you provide during an engagement.
  • Assessment information: questionnaire answers, organisational context, calculated scores or ranges, recommendations and any contact details you choose to provide.
  • Communication preferences: subscription choices, consent records and requests to stop receiving communications.
  • Technical information: IP address, browser and device information, pages requested, access times, referral information and diagnostic or security records generated when you use our website.

Please provide only information relevant to your enquiry or assessment. Do not include identifiable information about workers, alleged victims, health matters or other sensitive personal circumstances in an online readiness questionnaire. Contact us first if sensitive information is necessary for an engagement so we can agree an appropriate way to handle it.

03. How we collect information

We generally collect information directly from you when you contact us, use a website form, request a quote, complete an assessment, register for communications or participate in our services.

We may also receive relevant business contact information through introductions, referrals, a client organisation, event organisers or publicly available professional sources. Where another person provides your details, we use them for the relevant introduction, enquiry or service purpose.

Website systems and service providers may collect technical information automatically. See the section on cookies and website services below.

You can browse our public pages without giving us your name. Where practicable, you may make a general enquiry anonymously or using a pseudonym. If you do not provide information needed for a particular request, we may be unable to respond, generate assessment results or deliver the requested service.

04. Our online assessment tools

This section covers Orka ESG Stride, the Climate Reporting Readiness Check, the Modern Slavery Readiness Check and the Nature & TNFD Readiness Check.

What happens when you submit?

The tools ask for your consent to send your answers, results and any contact details provided to Orka. Submission processes the assessment and requests delivery of a results copy to kaushik@orkaadvisory.com.

We use assessment submissions to provide results, understand the matters raised and respond about relevant support. Supplying contact details is optional where indicated on the form. Without contact details, we may be unable to respond to you personally.

The tools calculate indicative scores, ranges and recommendations from your answers using their stated methodologies. They do not independently verify your practices. The results are not used by the tools to decide employment, lending or access to essential services.

A report downloaded through a tool is saved to your device. You control any subsequent sharing of that copy. Downloading a PDF does not remove the submission already sent to Orka.

Assessment information may remain in our email records, associated correspondence, service-provider systems and backups. Temporary submission records and technical identifiers also support security, duplicate-submission checks and troubleshooting. Please do not assume an assessment is anonymous solely because you leave your name blank.

Completing an assessment does not subscribe you to marketing. We distinguish a response about your assessment from an ongoing marketing subscription. You can ask us to stop follow-up contact.

05. Why we use information

We use information for purposes connected with your interaction with Orka, including to:

  • respond to enquiries, prepare proposals and arrange or deliver services;
  • process assessments, provide results and discuss relevant next steps;
  • manage client relationships, appointments, administration and business records;
  • send communications you have requested or otherwise lawfully agreed to receive;
  • operate, maintain and protect our website, and understand how its content is used;
  • handle feedback, access requests, corrections and complaints; and
  • meet applicable legal obligations and establish, exercise or defend legal rights.

We do not treat consent to complete an assessment as blanket permission to use your information for unrelated purposes.

06. Sharing and service providers

Information may be handled by people and providers who support the relevant activity, such as authorised Orka personnel, engaged contractors, website hosting and maintenance providers, email and cloud-service providers, security services and professional advisers.

We limit sharing to what is reasonably needed for the relevant purpose and seek appropriate confidentiality and security arrangements. Information may also be disclosed with your authorisation or where required or permitted by applicable law.

Where services are commissioned by your employer or another organisation, the engagement arrangements should explain which outputs or participation information will be shared with that organisation. Ask us before providing personal information if you are unsure.

07. Storage and overseas handling

We handle information through business records, email, website systems and the service providers supporting those systems. Cloud services and their support teams may store, process or access information outside Australia.

The locations involved depend on the provider and service configuration. Contact us if you need information about the arrangements relevant to your enquiry or engagement. We consider applicable privacy requirements when arranging overseas handling.

08. Cookies and website services

Cookies are small files stored by your browser. Website services may also receive technical information when a page loads, whether or not a cookie is used.

Our website uses WordPress and includes a WordPress.com statistics service. Website statistics help us understand visits and use of content. Hosting, security and other website features may also process technical information to deliver pages, maintain functionality and prevent misuse.

You can manage or delete cookies through your browser settings. Blocking cookies or scripts may affect some website features. Browser cookie controls do not necessarily stop all technical information, such as an IP address, from being transmitted when you request a page.

External links, embedded content and social-media services are operated by their respective providers. If you interact with them, their privacy policies may also apply. You can read Automattic’s privacy notice for visitors to users’ sites for information about its services.

09. Communications and your choices

We may contact you to respond to an enquiry, discuss submitted assessment results or manage an engagement. These communications are separate from an ongoing newsletter or marketing subscription.

Where we send marketing communications, we do so with the consent or other permission required by applicable law. You can unsubscribe using the option provided in the message or email us to ask that marketing stop. We may retain a limited record of your opt-out so that we can honour it.

Withdrawing consent or opting out affects future use where relevant. It does not automatically delete information already lawfully collected or records we need to retain for another permitted purpose.

10. Security and retention

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification and disclosure. Appropriate measures may include access restrictions, secure accounts, maintained website systems and confidentiality arrangements. No internet transmission or storage system can be guaranteed completely secure.

We retain personal information for as long as reasonably needed for the purpose for which it was collected, relevant service arrangements, legal obligations and legitimate record-keeping or dispute-resolution needs. Retention periods vary by record type.

When information is no longer needed and does not have to be retained, we take reasonable steps to delete it or de-identify it. Copies in backups may remain until the relevant backup cycle ends. Deleting a browser session or your downloaded PDF does not delete our email or business records.

If a data incident occurs, we will assess it and take appropriate response steps, including notifications where required by applicable law.

11. Access, correction and deletion requests

You can contact us to request access to personal information we hold about you, correct inaccurate or incomplete information, ask about its use or request deletion.

We may need to confirm your identity and clarify the information you are asking about. We will consider your request under applicable requirements and explain any lawful reason that prevents us from providing access, making a change or deleting a record. A deletion request does not create an unconditional right to erase records that must be retained.

Please identify the relevant enquiry, engagement or assessment and the approximate date where possible. Do not send identity documents unless we ask for them through an agreed process.

12. Privacy enquiries and complaints

Email kaushik@orkaadvisory.com, addressed to Dr Kaushik Sridhar, Orka Advisory, with “Privacy enquiry” or “Privacy complaint” in the subject line.

For a complaint, describe what happened, when it occurred, the information involved and the outcome you are seeking. We will review the matter, seek any necessary clarification and provide a response. We aim to respond within 30 days; if more time is needed, we will explain why and provide an update.

If you remain dissatisfied, or have not received a response within 30 days, you may contact the Office of the Australian Information Commissioner (OAIC) about available complaint options. Its ability to investigate depends on its jurisdiction and the circumstances.

13. Changes to this policy

We may update this policy to reflect changes to our services, information-handling practices or applicable requirements. The current version will be published on this page with its update date. Where required, we will provide additional notice of material changes.

Contact us if you would like a copy of this policy in another accessible format.