Last updated: 2026-06-30
T Mundy Holdings Pty Ltd (ABN 31 169 556 870), trading as GradEngage (“GradEngage“, “we“, “us“, “our“), is committed to protecting the privacy of individuals whose personal information we collect and handle in the course of providing our services.
This Privacy Policy explains what personal information we collect, how we collect it, why we collect it, who we share it with, and the rights you have in relation to it. It applies to our website, our services, and any personal information we otherwise collect in connection with our business.
This Policy is designed to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where applicable to individuals located in the European Economic Area (EEA) or United Kingdom, the General Data Protection Regulation (GDPR).
1. Who we are
GradEngage is an employer brand and recruitment communications service. We help organisations create candidate communications and content, including by using research and content-generation tools.
To contact us regarding privacy matters please see the Contact Clause below.
2. What personal information we collect
The personal information we collect depends on who you are in relation to our service.
2.1 Information about our subscribers (our customers)
Where you are a subscriber to, or user of, our service (or a representative of an organisation that subscribes), we collect limited information such as:
- Name
- Business email address and contact details
- Job title
- Company name and related business details
- Account and billing information (where applicable)
2.2 Information about individuals at subscriber companies (publicly available information)
To provide our service, we collect publicly available information about individuals employed by, or associated with, the companies our subscribers engage us to research or produce content about. This may include individuals such as CEOs, marketing leaders, early careers/talent managers, and similar roles.
This information is sourced from information that is already publicly available (for example, from public professional profiles, company websites, or public news sources), and is limited to what is necessary to produce accurate, relevant content for our subscribers.
2.3 Information we do not collect or store
We do not collect or store personal information about the individual recipients of the communications generated using our service (for example, graduate or intern candidates who ultimately receive emails produced with our assistance). Our service is designed so that any recipient-specific or private information relating to those individuals is not retained by us.
2.4 Information generated using AI-assisted tools
We use third-party artificial intelligence tools to help generate content (such as draft communications and research summaries) based on the information described above. Information submitted to these tools is used solely to generate the requested content for the relevant subscriber and is handled in accordance with this Policy.
3. How we collect personal information
We collect personal information:
- Directly from subscribers, when they sign up to, configure, or use our service;
- From publicly available sources, in relation to individuals described in section 2.2; and
- Automatically, to a limited extent, through the operation of our website and service (excluding cookies, which are addressed in a separate Cookie Policy).
Where practicable, we collect personal information directly from the individual concerned. Where information is collected from a third party or public source, we take reasonable steps to ensure the individual is made aware of the matters set out in this Policy, or that such collection is otherwise permitted by law (for example, because the information is already publicly available).
4. Why we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information for the following purposes:
- To provide, operate, and improve our services;
- To generate research, insights and draft communications on behalf of subscribers;
- To manage subscriber accounts, billing, and support;
- To communicate with subscribers about our service;
- To comply with our legal obligations; and
- For any other purpose disclosed to you at the time of collection, or to which you have consented.
We do not use or disclose personal information for any purpose other than as set out in this Policy, unless required or authorised by law.
5. Who we share personal information with
We may disclose personal information to:
- Our staff and contractors, on a need-to-know basis, to operate our business;
- Third-party service providers who assist us in operating our service (including data storage/hosting providers, research/data-gathering tools, and AI content-generation tools), who are only permitted to use the information to provide services to us;
- Professional advisers (such as accountants or lawyers), where necessary; and
- Regulators, law enforcement, or other third parties, where required or authorised by law.
We do not sell personal information to third parties.
6. Overseas disclosure
Some of the third-party service providers described in section 5 may store or process personal information on servers located outside Australia, including in jurisdictions such as the United States. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, to the extent required by the Privacy Act 1988 (Cth), and, where GDPR applies, in accordance with an appropriate transfer mechanism recognised under GDPR.
7. Data security
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure, having regard to the nature of the information and the risks involved. However, no method of storage or transmission over the internet is completely secure, and we cannot guarantee absolute security of information.
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, or as required by law.
8. Your rights
8.1 Under Australian law
You may request access to, and correction of, personal information we hold about you. We will respond to such requests in accordance with the Australian Privacy Principles.
8.2 Under GDPR (where applicable)
If you are located in the EEA or UK, you have the right to:
- Request access to your personal information;
- Request correction or deletion of your personal information;
- Request restriction of, or object to, our processing of your personal information;
- Request portability of your personal information; and
- Lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, please contact us using the details in the Contact Clause below.
9. Complaints
If you believe we have breached the Australian Privacy Principles, GDPR, or otherwise mishandled your personal information, please contact us using the details in the Contact Clause below. We will investigate and respond to your complaint within a reasonable time.
If you are not satisfied with our response, you may lodge a complaint with:
- The Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au; or
- If GDPR applies to you, your local data protection supervisory authority.
10. Children’s privacy
Our service is not intended for, and is not directed at, children under the age of 13 (or 16, where applicable local law sets a higher threshold). We do not knowingly collect personal information from children under this age. If we become aware that we have inadvertently collected such information, we will take reasonable steps to delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Policy. We encourage you to review this Policy periodically.
12. Contact us
For any questions about this Privacy Policy or how we handle personal information, please contact:
Tim Mundy T Mundy Holdings Pty Ltd trading as GradEngage ABN 31 169 556 870 via our Contact page.