Home / Privacy Policy
Privacy Policy.
How we collect, hold, use and disclose personal information, and how you can access it, correct it or complain.
- Last updated
- October 2026
- Issued by
- Data Dynamics Australia Pty Ltd, ABN 40 668 030 457
- Questions
- contact@datadynamicsau.com
In short
- We collect what we need to answer you and to do the work you engage us for, and nothing more.
- We do not sell personal information.
- Client financial information is confidential and used only for the engagement.
- Some of our providers are overseas (mainly the United States); they are bound by contract.
- You can ask to see or correct what we hold, or complain, at contact@datadynamicsau.com.
1Who we are
This policy is issued by Data Dynamics Australia Pty Ltd (ABN 40 668 030 457) (DDA, we, us). It applies to personal information we handle through our website (https://datadynamicsau.com), when you book a call or contact us, and when you or your organisation engage us. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2What we collect
- Contact details: name, email address, phone number, job title and organisation.
- Engagement information: the financial and commercial information you or your advisers give us so we can do the work, such as statements, holdings, loan and property details, entity structures, models and claim records. This may include information about other people, such as family members, directors or counterparties.
- Website information: pages visited, referral source, device and browser type, approximate location from your IP address, and cookie identifiers.
We do not ask for sensitive information (such as health information or racial or ethnic origin). Please do not send it to us. We also ask that you do not email account passwords, full card numbers or tax file numbers; we set up a secure way to share documents once an engagement starts.
You can contact us without identifying yourself, or using a pseudonym, when you only want general information. We need to know who you are to do work for you.
3How we collect it
Mostly from you directly: when you send an enquiry through the form on our website (delivered to our Microsoft 365 mailbox), email us, book a call through our scheduling page, or send us documents during an engagement. Sometimes from others, with your knowledge: an accountant, lawyer or adviser who introduces you, a platform or custodian you authorise to share statements with us, or public registers (such as ASIC and land titles) when an engagement requires it. If we receive personal information we did not ask for and do not need, we destroy or de-identify it where it is lawful and reasonable to do so.
4How we use it
- to respond to enquiries and book calls;
- to scope, deliver and invoice the work you engage us for;
- to keep records we are required to keep;
- to improve our website and services, using aggregated or de-identified information; and
- to send you updates you have agreed to receive (section 8).
We use engagement information only for the engagement it was given for, unless you agree otherwise or the law requires it.
5Who we disclose it to
We do not sell personal information. We disclose it only as needed to:
- service providers who help us operate, such as Microsoft (email, documents, scheduling and cloud storage), our accounting system, portfolio reporting platforms you use or ask us to use, providers of automated and machine-learning tools (section 7), and website hosting and analytics;
- your own advisers, lenders, brokers, lawyers or appointees, where you ask us to or the engagement requires it;
- our professional advisers and insurers, where reasonably necessary; and
- regulators, courts or law enforcement, where the law requires or authorises it.
6Overseas disclosure
Some providers store or process information outside Australia. Microsoft stores our data mainly in Australian data centres but may process it in the United States or the European Union. Machine-learning processing, website hosting, scheduling and analytics providers may process information in the United States. We take reasonable steps, including contractual terms, so that overseas recipients handle personal information consistently with the APPs.
7Automated tools and decisions
We use automated and machine-learning tools from third-party providers to help prepare analysis, reconcile records and draft documents. Providers are contractually prohibited from using your information to train their models. A person at DDA reviews every material output before it is used or sent to you. We do not make decisions about you that are based solely on automated processing and that significantly affect your rights or interests.
8Direct marketing
We send marketing emails only where you have agreed or where the Spam Act 2003 (Cth) otherwise permits. Every marketing email identifies DDA and includes a working way to unsubscribe; we act on requests within five business days. You can also ask us at any time to stop.
9Cookies, analytics and fonts
This website sets no tracking cookies. We measure how it is used with privacy-friendly analytics that do not use cookies and do not identify you: the pages viewed, the site that referred the visit, the type of device, and clicks on our main buttons, counted in aggregate. The analytics are provided by our website host or a similar cookie-free service.If this changes, we update this section first.
10Security and breaches
We hold information in secured cloud systems with access limited to people who need it, multi-factor sign-in, and encryption in transit. No system is completely secure. If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
11How long we keep it
- Engagement records, including deliverables, correspondence and invoices: seven years after the engagement ends.
- Enquiries that do not lead to an engagement: 24 months from last contact.
- Marketing preferences: until you unsubscribe, after which we keep a record so we do not contact you again.
- Website analytics: up to 26 months, then aggregated or deleted.
When we no longer need information, we take reasonable steps to destroy or de-identify it.
12Access and correction
You can ask for access to the personal information we hold about you, and ask us to correct it. Email contact@datadynamicsau.com. We will respond within 30 days. If we refuse, we will tell you why in writing and how to complain. We do not charge for a request, though we may charge a reasonable cost for providing access to a large volume of records.
13Complaints
If you think we have mishandled your personal information, email contact@datadynamicsau.com with the details. We will acknowledge your complaint within five business days and aim to resolve it within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.
14Changes and contact
We may update this policy. The current version is always on this page, with the date it was last updated. Questions: Data Dynamics Australia Pty Ltd, ABN 40 668 030 457, contact@datadynamicsau.com.
