Privacy Policy

1) What is “personal information”?

“Personal information” is information or an opinion about an identified individual, or an
individual who is reasonably identifiable.

2) The personal information we collect

We may collect personal information such as:

• Identity and contact details (name, email address, phone number)
• Business details (business name, industry, location, role, and high-level
  business information you provide)
• Information you submit via forms, calls, emails, meeting bookings, or other
  communications
• Records of our interactions (call notes, correspondence)
• Website and device information (IP address, browser type, pages viewed,
  referral source, and approximate location) collected via cookies and similar technologies

We do not seek to collect sensitive information (as defined under Australian privacy law)
unless it is necessary and you have provided it voluntarily.

3) How we collect personal information

We collect personal information:

• Directly from you (when you submit a form, request an assessment, book a
  meeting, or contact us)
• From third parties where appropriate (for example, your authorised
  representatives, or service providers supporting our operations)
• Automatically through your use of our website (cookies, analytics tools)

4) Why we collect, hold and use personal information

We collect, hold and use personal information to:

• Respond to enquiries and provide requested services (including assessments and advisory support)
• Verify and manage communications and appointments
• Improve our website, services and customer experience
• Conduct analytics, reporting and internal administration
• Maintain security and prevent misuse or fraud
• Comply with legal and regulatory obligations

5) Disclosure of personal information

We do not sell or rent personal information.

We may disclose personal information to:

• Service providers (for example, website hosting, IT support, analytics, CRM,
  email or communications platforms) where required to operate our business
• Professional advisers (for example, legal, accounting, or compliance advisers) where necessary
• Regulators, courts or law enforcement where required or authorised by law
• A purchaser or successor entity in connection with a business restructure,
  merger, or sale (subject to confidentiality protections)

Brokerage-related disclosure (seller confidentiality)

If you engage us in relation to a business sale process, we may disclose information to
prospective buyers and their advisers in accordance with your instructions and our
confidentiality process. Where appropriate, this may include staged disclosure and confidentiality
undertakings (such as NDAs) prior to releasing identifying information.

6) Overseas disclosure

Some of our service providers may store or process information outside Australia. Where we
disclose personal information overseas, we take reasonable steps to ensure the recipient handles
it in a manner consistent with the APPs, where practicable.

7) Direct marketing and opting out

We may use your personal information to contact you about our services, insights, or offers that
may be relevant to business owners (direct marketing). You can opt out at any time by using the
unsubscribe option (where provided) or by contacting us. We will process opt-out requests within
a reasonable period and at no cost to you.

8) Cookies and tracking technologies

We use cookies and similar technologies to:

• Enable website functionality
• Analyse traffic and improve performance
• Understand how visitors use our site

You can control cookies through your browser settings. Disabling cookies may affect site
functionality.

9) Data security and retention

We take reasonable steps to protect personal information we hold from misuse, interference,
loss, and unauthorised access, modification or disclosure. No method of transmission or storage
is completely secure.

We retain personal information only for as long as needed for the purposes described in this
policy (and as required by law). Where we no longer need personal information, we will take
reasonable steps to destroy or de-identify it, subject to legal obligations.

10) Access and correction

You may request access to personal information we hold about you and request corrections if you
believe it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request,
contact us using the details below. We may need to verify your identity before responding.

11) Complaints

If you believe we have mishandled your personal information or breached this Privacy Policy, you
can lodge a complaint by contacting us. Please provide details of your complaint and any
supporting information.

We will:

• Acknowledge your complaint within a reasonable timeframe, and
• Investigate and respond in writing, including proposed resolution steps where appropriate.

If you are not satisfied with our response, you may contact the Office of the Australian
Information Commissioner (OAIC).

12) Notifiable data breaches

Where required under Australian privacy law, we will notify affected individuals and the OAIC of
eligible data breaches that are likely to result in serious harm.

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The effective date will be revised, and the
latest version will be published on our website.

14) Contact us