Privacy Policy

Policy 3 — Privacy Policy (Policy Manual MFB-PM-01) · Last updated 3 November 2026

Meridian handles personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). This policy is published on Meridian's website (meridianforensic.com.au) and is available free on request.

What Meridian collects

  • Names and contact details of clients, owners, insureds, occupants, owners corporation representatives, builders and other experts.
  • Information about a property, its condition and history, including photographs, video, test results and documents.
  • Information in claim, matter or dispute files supplied by the instructing client, which may include sensitive information (for example, health information where it bears on an occupant's safety or access).
  • Business contact and payment details for invoicing.

Meridian collects only what it needs for the instruction. Photographs avoid capturing people, personal documents and belongings unrelated to the matter.

How and why it is used

Information is collected from the instructing client, from the people involved, and on site. It is used to carry out the instruction, prepare the report, give evidence, invoice and meet legal obligations. It is not used for marketing or sold.

Disclosure

Personal information is disclosed only to the instructing client and those the instruction requires (for example, a tribunal, court, the parties' lawyers, or a testing laboratory or sub-consultant under confidentiality), with consent, or where the law requires or authorises it.

Storage and overseas disclosure

Files are held in Microsoft OneDrive, Google Drive, Apple iCloud Drive and an encrypted cloud backup service, all protected by encryption and multi-factor authentication. These providers may store data in Australia or overseas [confirm data locations]. Security measures are set out in Meridian's Cyber Security Policy.

Retention

Files are kept for at least seven years after a matter closes, and longer while a dispute is possible, then securely destroyed.

Access and correction

Anyone may ask to see or correct personal information Meridian holds about them. Meridian responds within 30 days. Access may be refused where the APPs allow, for example where it would affect legal proceedings or another person's privacy; reasons are given in writing.

Data breaches

Suspected breaches are handled under the incident response section of the Cyber Security Policy, including notification under the Notifiable Data Breaches scheme where serious harm is likely.

Complaints and contact

Privacy questions and complaints go to Lee J. Thatcher, lee@meridianforensic.com.au, 0400 071 933. Meridian acknowledges a complaint within 2 business days and responds within 30 days. If not satisfied, a person may complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).