Kardia Group Business Advisors Pty Ltd (KGBA) is committed to protecting your personal information. This privacy statement explains our policies and practices regarding the collection, use, disclosure, storage, and protection of personal information.
We will only collect and process personal information where we have a lawful basis to do so. Lawful bases include consent (where you have given us consent), contract (where the information is necessary to perform an agreement between you and us), and legitimate interests (such as security, compliance with applicable laws, and enabling us to administer our business).
By providing your personal information, you expressly and voluntarily consent to Kardia Group Business Advisors Pty Ltd processing your personal data in accordance with this Privacy Policy.
You have the right to withdraw or decline your consent at any time and to object if we fail to comply with this Privacy Policy.
This Privacy Policy applies to Kardia Group Business Advisors Pty Ltd, as well as our trusted business partners who assist us in providing services to our customers.
Personal information is any information or opinion, whether true or not, that relates to an individual whose identity is apparent or can reasonably be ascertained from the information.
Examples include an individual’s name, address, contact number, and email address.
Special provisions apply to sensitive information, which includes, for example, information about a person’s membership of a professional or trade association.
We may collect or be authorised to access personal and financial information to provide you with requested services, manage our relationship with you, and contact you about services you may be interested in.
In some cases, we may be required to collect or disclose government identifiers such as your Tax File Number. We will not disclose this information unless required by law or when consented to by you.
We collect most personal information directly from you through:
We may also collect personal information from our related entities, third parties acting on your behalf (such as agents, brokers, or financial advisors), government bodies, search providers, or financial institutions. In some cases, it may be unreasonable or impractical to collect personal information directly from you, and in those instances, we may collect information indirectly.
We collect personal information through our website when you voluntarily provide it, for example, by completing and submitting:
We may also keep records of any emails or other correspondence sent via the website.
When you visit the website, general information is collected about your visit, including your server address, the date and time of your visit, pages accessed, information downloaded, and the type of browser used.
This information is used anonymously, in aggregated form, for statistical purposes and to improve the functionality and usability of the website. You will not be personally identified.
Our website may contain links to third-party websites that are not operated or controlled by us.
Please note that we are not responsible for the privacy or security practices of those sites, and those websites are not covered by this Privacy Policy. We encourage you to read the privacy policies of any third-party websites you visit.
Generally, we collect personal information to:
If you do not provide the requested personal information, we may be unable to respond to your request or provide the relevant service (except in cases where providing that information is optional).
You are not obligated to provide us with your personal information. However, if you do not provide it, we may be unable to provide you with certain services.
Your personal information may be disclosed to third parties in the following circumstances:
If your personal information is disclosed to a third party, we will take reasonable steps to ensure that the third party is subject to legally enforceable obligations to protect that information, comparable to the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Service providers who may receive your personal information include:
We take reasonable measures to store your personal information securely and protect it from misuse, loss, unauthorized access, modification, or disclosure. These measures include both electronic and physical security protocols.
However, we cannot guarantee that personal information will never be accessed by unauthorized persons or that unauthorized disclosures will not occur.
We have an obligation to notify you if you are affected by an eligible data breach. We will take reasonable precautions to address the breach. If a data breach occurs, we will notify you as soon as possible, or within 72 hours (where feasible) for EU citizens, and provide recommendations to mitigate any serious loss or damage.
If you have concerns about sending your information over the internet, you may contact us by post, facsimile, or phone.
To help protect the privacy of your information, we advise you to keep your passwords confidential and log out of the site when finished. If you become aware of a security breach, please inform us immediately.
We retain your personal information for as long as necessary to provide our services and operate our business. However, we do not undertake a blanket retention obligation. We may dispose of information at our discretion, subject to any legal requirements for information retention.
You are responsible for maintaining your own backup records.
You may contact us at any time to request access to, modification, or deletion of your personal information.
We will respond to requests for access, modification, or deletion within 30 calendar days. If additional time is required to process your request, we will inform you of the delay and provide reasons.
Access will be provided in a structured, commonly used, machine-readable format. While there is no fee for accessing or correcting your personal information, we may charge a fee for collating and providing the information, payable before access is granted.
We may refuse access in certain circumstances, such as if:
If we refuse access, we will explain the reasons for our refusal, and provide details on how to make a complaint.
We may transfer your personal information outside Australia only if necessary for the performance of a service you have requested or an agreement between us and a third party acting in your interest.
We may disclose personal information to overseas IT service providers, who may use cloud-based infrastructure to manage our servers, networks, or software.
Please note that personal data in the EU is protected by the General Data Protection Regulation (GDPR), which may offer a higher level of protection than in some other countries.
If you have questions about this Privacy Policy or how we handle your personal information, or if you wish to make a complaint, please contact us using the details below. We will respond within 30 days and inform you if additional time is required.
We reserve the right to modify or amend this Privacy Policy at any time. If significant amendments occur, we will notify you via our website 14 days before the changes are implemented, unless circumstances make it unreasonable to provide such notice.
If you object to any changes, you may close your account.
Unless specified otherwise, all references to the European Union in this document include all current EU member states and the European Economic Area (EEA).
Copyright © 2025 – Kardia Group Designed By Click Creek
