Privacy Policy

About Us

Newport Pembury & Co (ABN to be confirmed) is the entity responsible for collecting and handling your personal information. You can contact us about privacy matters at:

Email: hello@newportpembury.com.au
Address: Sydney, NSW, Australia

Information We Collect

We only collect personal information that is reasonably necessary for our functions and activities, as required by Australian Privacy Principle 3. We do not collect sensitive information (such as health, racial, or political information). Specifically, we collect:

• Business Email Addresses: When you subscribe to our newsletter, we collect your business email address to send you periodic insights and updates related to fractional CFO services, financial strategy, and business growth.
• Contact Form Data: When you submit our contact form to request a consultation or inquiry, we collect your name, email address, phone number (optional), company name, and message content.
• Newsletter Preferences: We retain records of your newsletter subscription status and any preferences you've communicated to us.
• Website Usage Data: We collect anonymised, aggregated data about how visitors use our website (pages visited, time on site) through analytics tools. This data does not personally identify you.

If you choose not to provide your personal information, we may not be able to respond to your enquiry, provide our services, or send you requested materials.

How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to Enquiries: Your contact form data is used to respond to your inquiry, discuss your financial situation, and explore how our fractional CFO advisory services might support your business.
• Sending the Checklist: When you subscribe to receive our M&A Readiness Checklist, we deliver this resource to your provided email address and may follow up with related materials.
• Occasional Insights: We occasionally share financial insights, thought leadership, and industry perspectives via email to newsletter subscribers who have opted in.
• Service Improvement: We use aggregated, non-identifiable data to improve our website, marketing, and service offerings.

We do not sell, rent, or share your personal information with third parties for marketing purposes without your explicit consent.

We may disclose your personal information where required or authorised by law, including to comply with court orders, regulatory requirements, or lawful requests from government authorities.

Third-Party Services and Overseas Disclosure

We use the following third-party services to operate our website and deliver our services:

• Formspree (United States): We use Formspree to process contact form submissions. Your form data is transmitted to and processed by Formspree's servers in the United States. Formspree is bound by their privacy obligations and processes data securely. For details, review their privacy policy at formspree.io.
• Google Fonts (United States): Our website loads fonts from Google's servers. Google may collect anonymised usage data in connection with this service.
• Cloudflare / Hosting (United States): Our website hosting infrastructure may involve servers located in the United States or other countries.

In accordance with Australian Privacy Principle 8, we take reasonable steps to ensure that overseas recipients of your personal information handle it in a manner consistent with the Australian Privacy Principles. By submitting your personal information through our website, you acknowledge that your data may be transferred to, stored, and processed in the United States.

All data transmitted through our website uses industry-standard encryption (HTTPS) to protect your information in transit.

Data Security

In accordance with Australian Privacy Principle 11, we take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• Secure server infrastructure with TLS encryption in transit
• Limited access to personal data (staff on a need-to-know basis only)
• Regular security assessments and updates to our systems
• Secure deletion or de-identification of data when no longer required for the purpose for which it was collected

However, no security system is entirely impenetrable. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Contact form submissions: Retained for the duration of any resulting engagement, plus 12 months after the enquiry is resolved or the engagement concludes.
• Newsletter subscriptions: Retained until you unsubscribe or request deletion.
• Website analytics data: Aggregated and anonymised data is retained indefinitely. No personally identifiable analytics data is stored.

When personal information is no longer needed, we take reasonable steps to destroy or de-identify it in accordance with Australian Privacy Principle 11.

Your Rights

Under the Australian Privacy Act 1988, you have the following rights:

• Access (APP 12): You can request access to the personal information we hold about you. We will respond to access requests within 30 days.
• Correction (APP 13): You can request that we correct personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
• Deletion: You can request deletion of your personal information, subject to any legal obligations we may have to retain it.
• Opt-out: You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email or contacting us directly.

To exercise any of these rights, please contact us at hello@newportpembury.com.au. We will respond within 30 days. There is no charge for making a request or for us to make corrections.

If we refuse an access or correction request, we will provide you with a written notice setting out the reasons for the refusal and the mechanisms available to you to make a complaint.

Complaints

If you believe we have breached the Australian Privacy Principles or you are unsatisfied with how we have handled your personal information, you can lodge a complaint with us by emailing hello@newportpembury.com.au. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au

Cookies and Tracking

Our website uses minimal cookies. We do not use cookies for advertising or behavioural tracking purposes. Our website may use:

• Essential cookies: Required for core website functionality (session management, security).
• Analytics cookies: If implemented, analytics tools collect anonymised, aggregated data about page visits and usage patterns. No personally identifiable information is collected through analytics.

You can control or disable cookies through your browser settings. Disabling cookies may affect some website functionality.

Notifiable Data Breaches

In the event of an eligible data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. This includes notifying the OAIC and affected individuals as soon as practicable.

Contact Us

If you have any questions about this Privacy Policy, concerns about how we handle your information, or wish to exercise your privacy rights, please contact us:

Email: hello@newportpembury.com.au
Address: Sydney, NSW, Australia

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We encourage you to review this policy periodically. Significant changes will be communicated via email or a prominent notice on our website.