Overview

At iloraventi, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial record services. By using our services, you consent to the data practices described in this policy.

This policy complies with the Australian Privacy Principles (APPs) outlined in the Privacy Act 1988 (Cth) and applies to all personal information we collect about you, whether you're a current client, prospective client, or website visitor.

Information We Collect

We collect several types of information from and about users of our services, including:

We only collect information that is necessary for providing our financial record services or as required by Australian law. We do not collect sensitive information unless explicitly required for service delivery and with your express consent.

How We Use Your Information

We use the information we collect for specific, legitimate business purposes:

• Providing financial record management and related services
• Processing transactions and maintaining accurate financial records
• Communicating with you about your account and services
• Complying with legal obligations and regulatory requirements
• Improving our services through analysis of usage patterns
• Protecting against fraud and unauthorized access
• Sending service-related notifications and important updates

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

• With your explicit written consent
• To comply with legal obligations or court orders
• To authorized service providers who assist in our operations (under strict confidentiality agreements)
• To financial institutions when necessary for transaction processing
• To regulatory bodies as required by Australian financial services laws
• In the event of a business merger or acquisition (with notice to affected users)

All third-party service providers are carefully vetted and required to maintain the same level of data protection as outlined in this policy. We conduct regular audits to ensure compliance with our privacy standards.

Your Rights and Choices

Under Australian privacy law, you have several important rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request your data in a commonly used, machine-readable format
• Restriction: Request we limit how we use your information
• Objection: Object to certain types of data processing

To exercise these rights, contact our Privacy Officer using the details provided below. We will respond to your request within 30 days and may require verification of your identity before processing your request.

Data Security and Protection

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Industry-standard encryption for data transmission and storage
• Multi-factor authentication for system access
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy practices
• Secure cloud infrastructure with redundant backup systems
• Access controls limiting data access to authorized personnel only
• Incident response procedures for potential security breaches

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We continuously monitor and update our security practices to address emerging threats and maintain the highest level of protection possible.

Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Financial records: 7 years from the end of the financial year (as required by Australian law)
• Client communication records: 5 years from last interaction
• Marketing preferences: Until you withdraw consent or 3 years of inactivity
• Technical and usage data: 2 years from collection
• Account information: Duration of service relationship plus 2 years

When information is no longer required, we securely delete or destroy it using industry-approved methods. Some information may be retained in anonymized form for statistical purposes.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and provide personalized services. We use the following types of cookies:

• Essential Cookies: Required for basic website functionality and security
• Performance Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and personalize your experience
• Analytics Cookies: Provide insights into website usage and performance

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality. We do not use cookies for advertising or share cookie data with third-party advertisers.

International Data Transfers

We primarily store and process your personal information within Australia. However, some of our trusted service providers may be located overseas. When we transfer data internationally, we ensure:

• The receiving country has adequate privacy protections
• Appropriate contractual safeguards are in place
• Data transfer complies with Australian Privacy Principles
• You are informed of any international transfers where required

Current international service providers are located in countries with adequate privacy protections as recognized by Australian law, including the United States (under appropriate safeguards) and the European Union.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Notify existing clients via email at least 30 days before changes take effect
• Post a notice on our website highlighting key changes
• Update the "Last Updated" date at the top of this policy
• Provide a summary of changes for easy reference

Continued use of our services after policy updates indicates your acceptance of the revised terms. If you disagree with changes, you may terminate your account and request deletion of your personal information, subject to legal retention requirements.