One Flinders Pty Ltd (ABN 13 662 031 843) (“One Flinders”, “we”, “our”, “us”) respects your privacy and is committed to managing your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect through our website, how we collect and hold it, why we use and disclose it, and how you can access, correct or raise a concern about it.

1. Personal information we collect

We collect personal information relevant to your enquiry or engagement with us, including:

• Contact details: name, email address, phone number, company name and job title
• Business details: your organisation, role, industry and areas of interest
• Enquiry details: information you provide when you contact us or request a proposal
• Marketing preferences: whether you’ve opted in to receive updates from us
• Subscriber details, if you sign up to any newsletter or mailing list we offer

If you choose not to provide certain information, we may be unable to respond to your enquiry or provide relevant services.

This policy covers personal information collected through our website. It does not cover personal information collected as part of a specific client engagement, which is governed by the terms agreed with you directly.

2. How we collect personal information

We collect personal information directly from you when you:

• Complete a contact or enquiry form on our website
• Correspond with us by email, phone or in person
• Engage us for consulting, coaching or advisory services

We hold personal information in secure digital systems, including our website, which is hosted and built on GoDaddy, and our business email and file systems, which run on Microsoft 365, licensed through GoDaddy.

We may also store personal information in a customer relationship management (CRM) system as part of managing our client relationships.

3. Why we collect, use and hold personal information

We use personal information to:

• Respond to enquiries and provide our services
• Prepare proposals and manage client relationships
• Share relevant insights and updates, where you’ve opted in
• Improve our website and client experience
• Meet our legal and regulatory obligations

We don’t sell or rent your personal information to third parties.

4. Who we may disclose personal information to

We may disclose personal information to:

• Service providers who support our website, email, marketing and business operations, such as marketing and social media consultants, and IT or hosting providers
• Regulatory authorities, where required by law

We take steps to ensure third-party providers handle personal information securely and in line with the Privacy Act.

Overseas disclosure

We may disclose personal information to overseas recipients as part of the digital tools and services we use to run our website and business. This includes website hosting, email and productivity software, spam-prevention tools, design software, and AI-assisted drafting tools. Based on the providers we use, personal information may be sent to recipients in the United States, France, India, Singapore, the European Union, the United Kingdom, the Philippines and New Zealand.

5. Cookies and website analytics

Where cookies are used, you can manage or disable them through your browser settings.

6. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes:

• Storing information in access-controlled, password-protected systems
• Limiting access to personal information to those who need it to do their job
• Using reputable providers for website hosting, email and file storage
• Reviewing our security practices periodically as our business and the tools we use change

7. How long we keep personal information

We keep personal information for as long as it’s needed for the purpose it was collected, or as required by law, and then take reasonable steps to destroy or de-identify it.

8. Automated decision-making

We do not currently use computer programs to make decisions that could significantly affect your rights or interests. If this changes, we’ll update this policy to describe the kinds of personal information used and the kinds of decisions involved, in line with the Privacy Act’s automated decision-making disclosure requirements, which take effect from 10 December 2026.

9. Access, correction and complaints

You can ask to access the personal information we hold about you, or ask us to correct it, at any time. Contact us using the details in section 12.

If you believe we’ve breached your privacy, contact us directly first. We’ll respond within a reasonable time, generally 30 days. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Data breaches

If a data breach involving your personal information is likely to result in serious harm, we’ll notify you and the OAIC in line with the Notifiable Data Breaches scheme under the Privacy Act.

11. Changes to this policy

We review this policy regularly to keep it current. The latest version will always be available on our website. This policy was last updated on 15 July 2026.

12. Contact us

For privacy-related questions, requests or complaints, contact:

One Flinders Pty Ltd

ABN 13 662 031 843

Email: oneflinders@gmail.com

Postal address: PO Box 528, Canterbury  VIC  3126.