Privacy Policy
How zephirolanto.com handles personal data for visitors and clients in connection with long term wealth planning information and related services.
Introduction
This Privacy Policy describes how the operator of zephirolanto.com (the Company) collects, uses, stores and discloses personal data in connection with this website and related activities. It is intended to help users understand what information is processed, for what purposes, and what choices and rights may be available. The Policy applies to visitors, clients and other individuals who interact with the website or otherwise provide personal data to the Company.
By accessing or using the website, or by providing personal data to the Company, users acknowledge that they have read and understood this Privacy Policy. Users who do not agree with any part of the Policy should refrain from using the website or providing personal data. This Privacy Policy should be read together with the Terms and Conditions, Cookie Policy and Disclaimer, which contain additional important information. Past performance does not guarantee future results and results may vary, as noted elsewhere on the site.
How data is collected
The Company collects personal data that users provide directly, information gathered automatically through use of the website, and data obtained from certain third parties where permitted. The type and amount of information collected depend on how users interact with the site, such as submitting forms, subscribing to updates, or accessing specific features. Collection is limited to what is reasonably necessary for the purposes described in this Privacy Policy or as otherwise notified at the point of collection.
Information provided directly by users
- Contact details such as name, job title, organisation, work email address and telephone number provided through forms or other channels.
- Information included in messages, enquiries, feedback or other communications sent to the Company by users or their representatives.
- Preferences indicated by users, including communication choices, areas of interest and consent selections where applicable.
- Information supplied in connection with events, meetings, consultations or similar interactions arranged with the Company.
- Any other data users voluntarily provide when using website features, submitting documents or participating in surveys.
Information collected automatically
- Technical information such as IP address, browser type and version, device identifiers and operating system details when users access the website.
- Usage information including pages visited, time spent on pages, navigation paths, click events and referring URLs collected through logs or analytics tools.
- Approximate location information derived from IP address or similar identifiers, used to understand regional usage patterns and improve service relevance.
- Log data relating to access times, error messages, performance metrics and security events that help maintain and protect the website.
- Cookie related data and similar identifiers that support essential functions, preferences, analytics and, where applicable, marketing activities.
How personal data is used
Personal data collected by the Company is used to operate and improve the website, respond to enquiries, manage relationships, meet legal obligations and support internal governance. Processing is carried out on appropriate legal bases, which may include user consent, performance of a contract, compliance with legal duties or the Company’s legitimate interests, balanced against user rights and expectations.
- To provide access to the website, respond to enquiries, and deliver information or services requested by users or clients.
- To manage and improve the functionality, security and performance of the website and related systems over time.
- To maintain records of interactions, including communications, consents and preferences, for administrative and compliance purposes.
- To analyse aggregated usage trends, evaluate content relevance and plan future improvements to services and communication.
- To comply with legal, regulatory and professional obligations, including responding to lawful requests from authorities where required.
- To protect the rights, property and safety of the Company, its users and other third parties, including detecting and addressing security incidents.
- To send service related messages or, where permitted, carefully targeted information about updates relevant to long term wealth planning and governance topics.
Our commitment: The Company is committed to handling personal data in a lawful, fair and transparent manner. This Privacy Policy explains how information is collected, used, stored and shared when users interact with this website or related services. It also outlines key rights that may be available under applicable data protection laws, including Australian privacy legislation. The Company does not sell personal data and takes reasonable steps to protect it, while recognising that no system can be completely secure.
Sharing of personal data
The Company may share personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy. These parties may include service providers, professional advisers and, where required, regulatory or governmental authorities. Data is shared on a need to know basis and, where appropriate, under contractual arrangements that require recipients to protect the information. The Company does not sell personal data to third parties for their own marketing purposes.
Service providers
The Company may engage third party service providers to support the operation of the website and delivery of related services. These providers may offer hosting, analytics, communication tools, security monitoring or other functions. Where service providers process personal data on behalf of the Company, they are required to handle it only in accordance with instructions and to implement appropriate safeguards.
Compliance with legal obligations
The Company may process and disclose personal data where necessary to comply with legal or regulatory obligations, lawful requests from public authorities, court orders or enforceable governmental directions. This may include obligations under Australian law or other applicable jurisdictions. Data may also be retained to establish, exercise or defend legal claims or to support internal investigations and compliance reviews.
Aggregated and anonymous statistics
The Company may compile aggregated or anonymised statistics based on website usage and service interactions. These statistics do not identify individual users and are used to understand general trends, improve services, and support internal reporting. Aggregated data may be shared in summary form with partners or advisers.
User rights
Depending on their location and applicable law, users may have rights in relation to personal data, such as rights of access, rectification, deletion, restriction, portability and objection. These rights are not absolute and may be subject to conditions and exemptions. The Company will handle requests in accordance with relevant legal requirements and will explain the outcome where a request cannot be fully granted.
- Users may request access to personal data held by the Company, subject to identity verification and applicable legal restrictions.
- Users may request correction of inaccurate or incomplete personal data held by the Company.
- Users may request deletion of personal data, subject to legal obligations and legitimate interests that may require continued retention.
- Where applicable, users may request a copy of certain personal data in a structured, commonly used and machine readable format.
- Users may object to certain types of processing based on legitimate interests, including direct marketing, subject to applicable legal rights and exemptions.
- Users may request restriction of processing in certain circumstances, for example while the accuracy or legal basis of the data is being reviewed.
To exercise any of the rights described in this Privacy Policy, users should contact the Company using the details provided on the contact page. The Company may need to verify identity and clarify the scope of the request before taking action. Certain requests may be limited or refused where permitted by law, for example where they would adversely affect the rights of others or conflict with legal obligations.
Data security
The Company takes reasonable technical and organisational measures to protect personal data from unauthorised access, misuse, loss or alteration. These measures are designed to be appropriate having regard to the nature of the data and the risks associated with processing. However, no system or transmission over the internet can be guaranteed to be completely secure, and users provide information at their own risk.
Technical measures
- Using secure server environments and access controls to limit unauthorised access to systems that store personal data.
- Applying encryption or other security technologies where appropriate to protect data in transit or at rest.
- Implementing monitoring, logging and alerting tools to help detect unusual activity and potential security incidents.
- Regularly reviewing and updating software, systems and configurations to address known vulnerabilities and improve resilience.
Organisational measures
- Limiting access to personal data to personnel and service providers who have a legitimate need to know for their role.
- Providing guidance and, where appropriate, training to staff on privacy obligations and secure handling of personal data.
- Using confidentiality agreements and contractual clauses with employees, contractors and service providers handling personal data.
- Maintaining internal policies and procedures that set out responsibilities and escalation paths for privacy and security matters.
Data retention
Personal data is retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing services, meeting legal and regulatory requirements, resolving disputes and maintaining business records. Retention periods may vary depending on the type of data, contractual obligations and statutory requirements. When data is no longer required, it will be deleted, anonymised or securely archived in accordance with applicable laws and internal policies.
- Account related data may include usernames, preference settings, access permissions and records of changes made within user facing tools.
- Learning and engagement data may include information about how users interact with articles, resources or tools, such as topics viewed and time spent.
- Communications data may include messages sent through contact forms, feedback, enquiries, and records of correspondence between users and the Company.
- Financial data may include information about an organisation’s size, general financial profile or budget categories where relevant to service discussions, but excludes payment card details.
- Marketing data may include communication preferences, records of interactions with newsletters or updates, and information about topics of interest where users have opted in.
Specific retention periods may be set out in internal schedules and may change over time in response to legal, regulatory or operational developments.
International data transfers
Personal data may be transferred to, and processed in, countries other than the one in which the user is located. These locations may have different data protection laws from those in the user’s jurisdiction. Where such transfers occur, the Company takes reasonable steps to ensure that appropriate safeguards are in place, such as contractual protections or other mechanisms recognised under applicable law, to protect the information.
- Transferring data to hosting providers or cloud services located in other jurisdictions where necessary to operate the website and related systems.
- Sharing information with service providers or professional advisers that may be based outside the user’s country but provide support to the Company’s activities.
- Using contractual clauses or other recognised safeguards to help protect personal data when it is transferred internationally.
- Taking into account applicable legal requirements, guidance from regulators and the nature of the data when assessing cross border transfers.
Use of cookies
The website may use cookies and similar technologies to support essential functions, remember preferences, analyse usage patterns and, where applicable, tailor content. Some cookies are strictly necessary for the website to operate, while others are optional and may require consent in certain jurisdictions. Users can manage cookies through browser settings and, where available, on site tools. Further details are set out in the Cookie Policy, which should be read together with this Privacy Policy.
Cookies and similar technologies
- Essential cookies support core website functions such as security, page navigation, and remembering consent choices.
- Performance cookies collect information about how visitors use the website to help improve functionality and user experience.
- Personalisation cookies, where used, support tailored content or settings based on previous interactions and preferences.
- Functionality cookies remember user choices, such as language or display preferences, to provide a more tailored experience.
Adjusting cookie settings may affect how the website functions, including access to certain features or the need to re enter preferences. For more information about managing cookies, users should consult browser help resources and review the Cookie Policy.
Changes to this Privacy Policy
The Company may update this Privacy Policy from time to time to reflect changes in legal requirements, guidance from regulators, or adjustments to how the website and related services operate. Updated versions will be published on this page and will indicate the date of the latest revision. Material changes may also be communicated through other reasonable channels.
- If the Company makes significant changes to this Privacy Policy, a notice may be posted on the website or sent through other appropriate channels.
- Users are encouraged to review the Privacy Policy periodically to stay informed about how personal data is handled.
- Continued use of the website after changes take effect will be taken as acceptance of the updated Privacy Policy, to the extent permitted by law.
- Where required by applicable law, the Company will seek renewed consent for material changes that affect existing processing based on consent.
Users should check this page periodically to ensure they are familiar with the current version of the Privacy Policy and any changes that may affect them.
Contacting the Company
Questions, concerns or requests relating to this Privacy Policy or the handling of personal data can be directed to the Company using the details provided on the contact page. The Company may request additional information to confirm identity and clarify the nature of the request before responding. Responses will be provided within a reasonable time, subject to legal and operational constraints.
Zephirolanto
373 Bay Street, Port Melbourne, VIC 3207, Australia
Phone: +61-3-4212-5364
Email: content@zephirolanto.com