Privacy Policy
Finsoul Australia respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, hold, disclose and protect personal information when you visit our website, contact us, request information, use our services, submit an enquiry, apply for an opportunity or otherwise interact with us.
This Privacy Policy has been prepared concerning the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other Australian laws that may apply to our handling of personal information, including requirements relating to direct marketing, cookies, electronic communications and data breaches. The APPs require covered organisations to maintain a clear and current privacy policy explaining how personal information is managed.
This Privacy Policy explains how and why Finsoul Australia handles personal information and the privacy choices and rights available to individuals. Where consent is required by applicable law, we will obtain it appropriately.
1. About Finsoul Australia
Finsoul Australia provides professional business, financial, accounting, tax, advisory, technology, ISO, marketing, corporate and related professional services to businesses and individuals in Australia and, where applicable, internationally.
Registered Office: 115 London Rd, Morden SM4 5HP, United Kingdom
Email: info@finsoulaustralia.com
Website: https://finsoulaustralia.com/
Where applicable, Finsoul Australia is responsible for managing personal information in accordance with the Privacy Act and the Australian Privacy Principles.
In certain client engagements, we may handle personal information on behalf of another organisation according to that organisation’s instructions and the terms of the relevant engagement.
For privacy-related enquiries, please contact us using the details above.
2. Services Covered by This Privacy Policy
Finsoul Australia provides a range of professional services, including ISO, accounting, tax, financial and business advisory, audit and assurance, digital marketing, IT and technology, immigration, company formation, HR, ESG, real estate, supply chain and procurement services.
The personal information we handle depends on the service requested and may include contact, identification, business, financial, accounting, tax, employment, educational or corporate information where reasonably necessary to provide the service, manage the engagement, meet legal requirements or follow client instructions.
Where technology, accounting software, automation, AI or cybersecurity services are involved, personal information may also be handled to configure, support, integrate or manage the relevant service.
3. Who This Privacy Policy Applies To
This Privacy Policy applies to individuals whose personal information we collect or hold in connection with our business activities, including:
- Website visitors
- Individuals who contact us
- Individuals who submit enquiries
- Prospective and existing clients
- Client representatives and authorised contacts
- Business partners and professional contacts
- Suppliers and service providers
- Individuals who communicate with us by email or telephone
- Individuals who apply for employment or other opportunities
- Individuals whose information is provided to us in connection with a business or professional relationship
Different individuals may be subject to different handling practices depending on how and why their information is collected.
4. Personal Information We Collect
The personal information we collect and hold depends on your relationship with Finsoul Australia and the services you request.
Contact Information
This may include:
- Name
- Email address
- Telephone number
- Residential or business address
- Job title
- Company or organisation name
- Other contact information you provide
Identification Information
Where required for a particular service, we may collect identification and verification information, including information contained in documents you provide.
Business and Client Information
This may include:
- Company information
- Business contact details
- Service requirements
- Engagement information
- Information contained in documents
- Financial or business information relevant to the service
- Correspondence and records relating to our business relationship
Technical and Website Information
When you use our website, certain technical information may be collected automatically. This may include:
- IP address
- Browser type and version
- Device type
- Operating system
- General location information
- Pages visited
- Date and time of visits
- Referring website or source
- Website interaction information
- Technical and security information
Communication Information
We may retain information contained in:
- Emails
- Contact forms
- Consultation requests
- Telephone communications
- Other correspondence
- Records relating to communications with us
Recruitment Information
Where you apply for a role, we may collect:
- Name and contact details
- CV
- Employment history
- Qualifications
- Professional experience
- References
- Interview information
- Other information voluntarily provided during recruitment
We will handle recruitment information only to the extent reasonably necessary for recruitment, selection, employment-related administration, and applicable legal requirements.
5. How We Collect Personal Information
We may collect personal information:
- Directly from you
- Through contact forms
- Through consultation requests
- By email
- By telephone
- During meetings or consultations
- During client onboarding
- During recruitment
- Through our website and associated technologies
- From your organisation or authorised representatives
- From publicly available professional or business sources where lawful
- From service providers acting on our behalf
- From other third parties where reasonably necessary and lawful
Where we collect personal information from another person or organisation, we will handle it in accordance with applicable privacy requirements.
6. How We Use Personal Information
We may use personal information for purposes including:
- Responding to enquiries
- Providing information about our services
- Providing and administering services
- Managing client relationships
- Preparing proposals and quotations
- Preparing engagement documentation
- Managing consultations and appointments
- Processing payments
- Maintaining business records
- Managing suppliers and professional relationships
- Providing accounting, tax, advisory, ISO, technology, marketing or other professional services
- Managing recruitment
- Maintaining website functionality
- Monitoring website performance
- Maintaining information security
- Preventing fraud and misuse
- Protecting our systems and users
- Complying with legal and regulatory requirements
- Establishing, exercising or defending legal claims
- Managing privacy enquiries and complaints
- Sending permitted marketing communications
- Other purposes reasonably related to the purpose for which the information was collected or otherwise permitted by law
We will not use or disclose personal information for an unrelated purpose unless permitted or required by applicable law.
7. Collection, Consent and Permitted Use
Australian privacy law does not use the GDPR’s contract, legitimate interest and legal-obligation framework as its general processing model. Instead, our handling of personal information is governed by the Privacy Act, the APPs and other applicable laws.
We may collect, use or disclose personal information where:
- It is reasonably necessary for our functions or activities
- It is necessary to provide or administer a service
- You have provided consent where consent is required
- The handling is required or authorised by law
- The handling is otherwise permitted under applicable privacy legislation
We will take reasonable steps to ensure that personal information collected is necessary, appropriate and relevant to our functions or activities. Sensitive information is subject to additional protections under the APPs.
Where we rely on consent, you may withdraw that consent subject to legal or practical limitations. Withdrawal does not affect handling that occurred before consent was withdrawn.
8. Marketing Communications
We may communicate with existing or prospective clients about our services, business updates, events or related information where permitted by law.
Where commercial electronic messages are covered by the Spam Act 2003 (Cth), we will comply with applicable requirements concerning consent, sender identification and unsubscribe facilities.
You can unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us at [info@finsoulaustralia.com].
Unsubscribing from marketing communications will not necessarily stop service-related, transactional or administrative communications required for an existing business relationship.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies for essential functionality, security, preferences, analytics, performance measurement and, where applicable, marketing.
These technologies may collect information such as your device type, browser, IP address, pages visited and website interactions.
Where a consent mechanism is used, you may be able to accept, reject or manage non-essential technologies through the available cookie controls. The specific cookies and technologies used may change as our website and digital services develop.
10. Third-Party Services and Service Providers
Finsoul Australia may use third-party providers to support our website, services and business operations.
Depending on the systems and services actually used, these providers may include:
- Website hosting providers
- Website security providers
- Email and communication providers
- Analytics providers
- Cookie-management providers
- Appointment and scheduling providers
- CRM providers
- Cloud storage providers
- IT support providers
- Cybersecurity providers
- Payment service providers
- Document management providers
- Website maintenance providers
- Professional advisers
Where a third party handles personal information on our behalf, we take reasonable steps to manage the associated privacy and security risks.
Third-party providers will generally receive only the information reasonably necessary for the relevant service or purpose.
11. Third-Party Platforms Used in Client Services
Certain Finsoul Australia services may involve third-party platforms, software or systems, including accounting, ERP, CRM, marketing, cloud, analytics, communication, cybersecurity, automation or other business platforms.
Where we handle personal information on behalf of a client through such platforms, the handling may be governed by the client’s instructions and the terms of the relevant engagement.
The responsibilities of Finsoul Australia, the client and the relevant platform provider will depend on the specific service and arrangement.
12. Sharing Personal Information
We do not sell personal information.
We may disclose personal information where reasonably necessary and permitted or required by law to:
- Service providers and contractors
- IT and hosting providers
- Professional advisers
- Accountants and auditors
- Legal advisers
- Payment providers
- Business partners where necessary for the relevant service
- Government departments and regulatory authorities
- Courts and law enforcement authorities where legally required
- Insurers and professional organisations where appropriate
- Other parties where necessary to establish, exercise or defend legal claims
We seek to limit disclosures to information reasonably necessary for the relevant purpose.
13. International Data Transfers
Finsoul Australia may use third-party service providers or platforms that operate or store information outside Australia.
Where we are likely to disclose personal information to overseas recipients, we will take reasonable steps required by APP 8 and other applicable privacy requirements to manage cross-border disclosures. Our Privacy Policy should identify likely overseas recipient countries where it is practicable to do so.
Likely overseas recipient countries: Finsoul Australia may disclose personal information to overseas service providers and technology providers where reasonably necessary for our business operations and service delivery. The countries in which these providers are located may vary depending on the systems and services we use. Where required by applicable Australian privacy law, we will take reasonable steps to ensure that overseas disclosures are handled in accordance with the applicable requirements.
The countries and providers may change as our systems and service arrangements develop.
14. Data Security
Finsoul Australia takes reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, as required under APP 11.
Depending on the circumstances, security measures may include:
- Access controls
- Authentication measures
- Encryption where appropriate
- Secure storage
- Confidentiality obligations
- Staff privacy and security procedures
- Security monitoring
- Backup and recovery measures
- Technical safeguards against unauthorised access
No website, electronic transmission or storage system can be guaranteed to be completely secure.
15. Data Breaches
Finsoul Australia maintains procedures for identifying, responding to and managing suspected data breaches.
Where the Notifiable Data Breaches (NDB) scheme applies, and an eligible data breach occurs, we will comply with applicable notification requirements, including notifying affected individuals and the Office of the Australian Information Commissioner where required. The NDB scheme applies to eligible data breaches involving personal information that are likely to result in serious harm.
16. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for longer where required or permitted by law.
Retention may depend on:
- The purpose for which information was collected
- The type and sensitivity of the information
- Whether an ongoing business relationship exists
- Contractual requirements
- Legal and regulatory obligations
- Accounting and taxation requirements
- Potential disputes or legal claims
- Record-keeping requirements
- Our legitimate business needs
Enquiry and Contact Information
General enquiry information may be retained for as long as reasonably necessary to respond to the enquiry, manage the relationship and maintain appropriate business records.
Client and Service Records
Client and engagement information may be retained for the duration of the relationship and for an appropriate period afterwards where required for legal, regulatory, accounting, tax, audit, dispute-resolution or record-keeping purposes.
Marketing Information
Marketing information may be retained while there is a valid basis for the relevant marketing activity or until you unsubscribe, subject to applicable requirements.
Recruitment Information
Recruitment information may be retained for as long as reasonably necessary for the recruitment process and applicable employment or legal requirements.
Website and Technical Information
Website, analytics and technical information may be retained for periods appropriate to security, performance monitoring, troubleshooting and other lawful purposes.
When information is no longer required, we take reasonable steps to securely destroy, delete or de-identify it.
17. Your Privacy Rights
Depending on the applicable privacy law and circumstances, you may have rights relating to your personal information, including the ability to:
Access Your Personal Information
You may request access to personal information we hold about you.
Request Correction
You may ask us to correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
Manage Your Marketing Preferences
You may opt out of direct marketing communications at any time.
Withdraw Consent
Where we rely on consent for a particular activity, you may withdraw your consent, subject to applicable legal or practical limitations.
Anonymity and Pseudonymity
Where required by APP 2, you may have the option of dealing with us anonymously or using a pseudonym, unless an exception applies, such as where identification is required, or it is impracticable for us to deal with you without identifying you.
18. How to Access or Correct Your Personal Information
To request access to or correction of personal information we hold about you, contact us using the details below.
Email: info@finsoulaustralia.com
We may need to verify your identity before responding to a request.
We will handle requests in accordance with applicable Australian privacy requirements. We may refuse access or correction in circumstances permitted by law and will provide an explanation where required.
19. Privacy Complaints
If you believe Finsoul Australia has mishandled your personal information or breached applicable privacy requirements, you may contact us and make a privacy complaint.
We will:
- Acknowledge the complaint
- Assess the issue
- Request further information where reasonably necessary
- Investigate the matter
- Respond within the applicable timeframe
- Take reasonable steps to resolve the complaint where appropriate
If you are dissatisfied with our response or we do not resolve your complaint, you may contact the Office of the Australian Information Commissioner (OAIC).
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Australia
Website: https://www.oaic.gov.au/
20. Privacy Officer
For privacy questions, access requests, correction requests or complaints, you can contact our privacy contact using the details below.
Email: info@finsoulaustralia.com
If Finsoul Australia appoints a dedicated Privacy Officer, their contact details will be added to this section.
21. Third-Party Websites
Our website may contain links to third-party websites, platforms or services.
Finsoul Australia does not control the privacy practices, security or content of third-party websites. When you follow a third-party link, that provider’s privacy policy and terms may apply.
We recommend reviewing the privacy information of third-party websites before providing personal information.
22. Children's Privacy
Our website and professional services are primarily intended for businesses, professionals and adults.
We do not knowingly seek personal information from children where such collection is not reasonably necessary for our services or permitted by law.
Where additional Australian privacy requirements concerning children apply to our online activities, we will comply with those requirements.
23. Automated Decision-Making and AI
Finsoul Australia may use software, automation or AI-enabled tools for appropriate business, administrative, analytical, security or service-support purposes.
We will manage personal information used with these technologies in accordance with applicable privacy requirements.
From 10 December 2026, additional APP 1 privacy-policy requirements will apply where an APP entity arranges for a computer program to use personal information in certain automated decisions that could reasonably be expected to significantly affect an individual’s rights or interests. Where these requirements apply to Finsoul Australia, we will provide the information required by law in this Privacy Policy.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to our website or technology
- Changes to our information-handling practices
- Changes to third-party service providers
- Changes in Australian privacy or other applicable laws
- Changes to our business operations
When material changes are made, we may update the effective or last-updated date and provide additional notice where appropriate.
We recommend reviewing this page periodically to remain informed about how Finsoul Australia manages personal information.
25. Contact Us
If you have questions about this Privacy Policy, want to request access to or correction of personal information, or wish to make a privacy complaint, please contact:
We will handle privacy-related enquiries and requests in accordance with applicable Australian privacy requirements.