Our commitment: Your privacy is a fundamental commitment of Brain PR — built into how we operate, not added as an afterthought. We collect only the personal information we need to deliver our services, we never sell your personal information, and we handle everything we hold in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where our Neureson™ Document Intelligence Operating System is concerned, an additional dedicated Privacy Policy applies — available at neureson.ai/privacy.
1. Who we are
1.1 This Privacy Policy is issued by REIID PTY LTD ACN: 628 051 454, trading as Brain PR, a strategic communications and intelligent ecosystems business operating from North Sydney NSW 2060, Australia.
1.2 This Policy covers REIID PTY LTD’s two brands: Brain PR and Neureson™. Where you use the Neureson™ platform, the Neureson™ Privacy Policy applies in addition to this Policy and prevails to the extent of any inconsistency in relation to platform data.
1.3 Our services include strategic communications and public relations, Generative Engine Optimisation (GEO), search engine optimisation, AI consulting and governance advisory, cybersecurity services, professional training, and our owned software products.
1.4 All privacy enquiries should be directed to privacy@brainpr.com.au.
2. Scope of this Policy
2.1 This Policy applies to personal information collected, held, used and disclosed by Brain PR through our websites, our client engagements, our marketing activities, our training programmes, and our business operations generally.
2.2 This Policy does not apply to third-party websites or services linked from our websites. We are not responsible for the privacy practices of third parties.
3. The personal information we collect
3.1 The kinds of personal information we collect and hold depend on how you interact with us, and may include:
- Contact and identity details — your name, email address, postal address, phone number, business, role and title. Collected when you enquire, engage us, attend training, or subscribe to communications.
- Client engagement information — information you provide to us in the course of a professional engagement, which may include information about your business, personnel, customers or stakeholders where relevant to the work.
- Account credentials — where you hold an account with one of our products, your username and hashed authentication data.
- Payment information — billing details for invoicing. Card payments are processed by our payment provider; we do not store full card numbers.
- Usage data — pages visited, search terms used on our sites, and device data such as IP address, browser and operating system, collected largely through cookies and analytics tools.
- Training and certification records — for participants in our training programmes: enrolment details, attendance, assessment outcomes and certificates issued.
3.2 We collect sensitive information (such as health information) only where you provide it to us directly and it is necessary for the engagement, and only with your consent.
4. How we collect personal information
4.1 We collect personal information directly from you — when you contact us, engage our services, attend our training, subscribe to our communications, or use our websites and products.
4.2 We may also collect personal information from:
- your authorised representatives or advisers;
- your employer or organisation, where they engage us and you are a nominated contact;
- publicly available sources, including company registers and professional networks, where relevant to a legitimate business purpose;
- analytics and advertising platforms, in aggregated or pseudonymised form.
4.3 If you do not provide the personal information we request, we may be unable to provide the relevant service, respond to your enquiry, or administer your engagement.
4.4 If you provide us with personal information about another person (for example, a colleague’s contact details), you must ensure that person is aware their information has been provided to us and directed to this Policy.
5. How we use personal information
5.1 We use personal information to:
- provide, administer and improve our services and products;
- respond to enquiries and manage client engagements;
- invoice, receive payment and maintain business records;
- deliver training programmes and issue certifications;
- send service communications, and — with your consent or as otherwise permitted by law — marketing communications about our services;
- maintain the security and integrity of our systems;
- comply with our legal and regulatory obligations.
5.2 AI-assisted processing. Brain PR uses AI tools in delivering some services. Where client or personal information is processed using AI tools, we do so under confidentiality obligations, we do not permit that information to be used to train third-party AI models, and a human remains responsible for all outputs and decisions. We do not use personal information for solely automated decisions that have a legal or similarly significant effect on individuals. [Retain — supports the automated decision-making transparency requirement commencing under the Privacy and Other Legislation Amendment Act 2024.]
5.3 Google API data Where we receive information from Google APIs (“Restricted Scope Data”), we use it only to provide or improve user-facing features in accordance with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Restricted Scope Data for advertising, and no human reads it except for security purposes, to comply with law, or with your consent.
5.4 To opt out of marketing communications, use the unsubscribe link in any email, or contact us at privacy@brainpr.com.au.
6. When we disclose personal information
6.1 We do not sell, rent or trade personal information. We disclose personal information only:
- to contracted service providers who help us operate — including information technology, cloud hosting, payment processing, email delivery, and website analytics — under confidentiality and privacy obligations;
- to contracted specialists engaged on your project, under confidentiality agreements, and only to the extent necessary for the engagement;
- to your authorised representatives or advisers, when you ask us to;
- to our professional advisers (legal, accounting, insurance);
- to government and regulatory authorities where required or authorised by law;
- to parties involved in a sale, merger or restructure of our business, under confidentiality obligations, with notice to affected individuals.
7. Overseas disclosure
7.1 Some of our service providers store or process information outside Australia. This most commonly occurs when cloud infrastructure, AI infrastructure, payment processing and email delivery provider servers are located outside of Australia.
7.2 Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through contractual data processing terms.
8. How we hold and protect personal information
8.1 We store personal information electronically with trusted providers and, in limited cases, in hard copy at our premises.
8.2 We protect personal information using encryption in transit, access controls, and internal security processes informed by our own cybersecurity practice.
8.3 We retain personal information only as long as needed for the purpose it was collected or as required by law — for example, financial records are retained for seven years under Australian tax law. When no longer required, we take reasonable steps to destroy or de-identify it.
9. Cookies and analytics
9.1 Our websites use cookies and similar technologies for functionality, analytics and — where enabled — advertising measurement. Most of this data does not identify you personally.
9.2 You can manage cookies through your browser settings. Disabling cookies may affect site functionality.
10. Access and correction
10.1 You may request access to the personal information we hold about you by emailing privacy@brainpr.com.au. There is no charge to make a request. We may apply a reasonable administrative charge for providing access, and we will tell you before any charge applies. If we cannot provide access, we will tell you why in writing.
10.2 If any information we hold about you is inaccurate, out of date or incomplete, contact us and we will take reasonable steps to correct it.
11. Data breach notification
11.1 We comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). If a data breach occurs that is likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner as required.
12. Overseas users
12.1 If you are located in the European Union or United Kingdom, you may have additional rights under the GDPR or UK GDPR, including rights of access, rectification, erasure, portability, restriction and objection. Contact privacy@brainpr.com.au to exercise these rights.
13. Complaints
13.1 If you believe your privacy has been breached, or you have questions about this Policy, email privacy@brainpr.com.au. We aim to investigate and respond within 30 days. If we need more time, we will tell you why and give a revised timeframe.
13.2 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.
14. Changes to this Policy
14.1 We may update this Policy from time to time. The current version will always be published on our website with its last-updated date. Material changes affecting active clients will be notified directly.
15. Contact us
REIID PTY LTD trading as Brain PR North Sydney NSW 2060, Australia Email: privacy@brainpr.com.au
Brain PR ™ © 2018–2026. All Rights Reserved.