Privacy Policy

1. Introduction

Social Capital Advisory ABN (ABN available on request) ("we", "us", "our") is a consulting firm based in Adelaide, South Australia. We are committed to protecting the privacy of personal information we collect and handle in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs").

This Privacy Policy explains how we collect, hold, use, and disclose your personal information, and how you can access or correct that information or make a complaint about our handling of your personal information.

2. What personal information we collect

The types of personal information we may collect depend on the nature of your interaction with us. This may include:

• Your name
• Email address
• Phone number
• Company or organisation name
• Job title or role
• Details of your enquiry or message submitted via our contact form
• Payment and billing information (processed securely by our third-party payment provider, Chargebee)
• Website usage data collected via analytics tools (see Section 7 below)

We do not collect sensitive information (as defined by the Privacy Act) unless you voluntarily provide it and we have your consent to collect it.

3. How we collect personal information

We collect personal information in the following ways:

• Directly from you — when you complete our website contact form, send us an email, speak with us by phone, or engage us for consulting services.
• From third parties — in limited circumstances, we may receive personal information from referral partners, publicly available sources, or third-party service providers acting on your behalf.
• Automatically via our website — through cookies and analytics tools such as Google Analytics 4 (see Sections 7 and 8 below).

Where it is reasonable and practicable, we will collect personal information directly from you. If you choose not to provide us with personal information we request, we may not be able to provide you with our services or respond to your enquiry.

4. Why we collect, hold, use, and disclose personal information

We collect, hold, use, and disclose your personal information for the following purposes:

• To respond to your enquiries and communicate with you
• To provide our consulting services to you or your organisation
• To process payments and manage your account via Chargebee
• To send you information about our services that may be relevant to you (with your consent)
• To improve our website, services, and user experience
• To analyse website traffic and usage patterns via Google Analytics 4
• To comply with our legal and regulatory obligations
• For any other purpose you have consented to

We will not use or disclose your personal information for a purpose other than the purpose for which it was collected, a related purpose that you would reasonably expect, or a purpose you have consented to, unless we are required or authorised to do so by law.

5. Disclosure of personal information

We may disclose your personal information to:

• Chargebee Inc. — our payment processing provider, for the purpose of billing and subscription management. Chargebee stores payment data securely and is PCI DSS compliant. Chargebee may store data on servers located outside Australia (including the United States). Please refer to Chargebee's Privacy Policy for more information.
• Google LLC — through Google Analytics 4, for the purpose of website analytics. Google may process data outside Australia. Please refer to Google's Privacy Policy for more information.
• Professional advisors — such as accountants or lawyers, where necessary for business operations.
• Regulatory or government bodies — where required by law, regulation, or court order.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

6. Cross-border disclosure of personal information

Some of the third-party services we use (including Google Analytics 4 and Chargebee) may store or process your personal information on servers located outside of Australia, including in the United States.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the overseas recipient complies with the APPs or is subject to a substantially similar privacy regime. Where this is not possible, we will seek your consent or rely on other applicable exceptions under the Privacy Act.

7. Google Analytics 4

Our website uses Google Analytics 4 ("GA4") to collect anonymised data about how visitors use our website. GA4 uses cookies and similar technologies to collect information such as:

• Pages visited and time spent on each page
• Referring website or source
• Browser type and device information
• Approximate geographic location (city/region level, not precise location)
• Interaction events (e.g., button clicks, form submissions)

GA4 data is used in aggregate form to understand website performance and improve our services. We have configured GA4 with the following privacy measures:

• IP anonymisation is enabled by default in GA4
• We do not enable Google Signals or User-ID features for advertising purposes
• Data retention is set to the minimum period necessary for our analytics purposes

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your cookie preferences on our website.

8. Cookies and tracking technologies

Our website uses cookies, which are small text files placed on your device to help the website function and to collect usage data.

Types of cookies we use

Cookie type	Purpose	Duration
Essential	Required for basic website functionality, such as remembering your cookie consent preferences.	Session / 12 months
Analytics	Google Analytics 4 cookies that help us understand how visitors interact with our website.	Up to 14 months
Functional	Chargebee cookies used during the payment and checkout process.	Session

Managing your cookie preferences

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your cookie preferences at any time through your browser settings.

Most web browsers allow you to control cookies through their settings. You can usually set your browser to notify you when you receive a cookie, allowing you to decide whether to accept it. Please note that disabling cookies may affect the functionality of our website.

9. Payment processing via Chargebee

We use Chargebee as our payment processing and subscription management platform. When you make a payment through our website:

• Your payment card details are collected and processed directly by Chargebee in a PCI DSS-compliant environment.
• We do not store your full credit card number, CVV, or other sensitive payment card details on our servers.
• Chargebee may store your billing name, email address, and transaction history for the purpose of managing your subscription and providing receipts.

For more information on how Chargebee handles your data, please review Chargebee's Privacy Policy.

10. Storage and security of personal information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Security measures we employ include:

• Secure (HTTPS/TLS) encryption on our website
• Access controls and authentication for our internal systems
• Use of reputable, security-certified third-party service providers (e.g., Chargebee for payment processing)
• Regular review of our data handling and storage practices

We will take reasonable steps to destroy or de-identify personal information once it is no longer needed for the purpose for which it was collected, unless we are required by law to retain it.

11. Access to and correction of personal information

Under the APPs, you have the right to:

• Access the personal information we hold about you
• Request correction of personal information that is inaccurate, incomplete, out-of-date, irrelevant, or misleading

To request access to or correction of your personal information, please contact us using the details in Section 14 below. We will respond to your request within a reasonable period (and in any event within 30 days). We may need to verify your identity before processing your request.

In some circumstances, we may refuse access or correction in accordance with the exceptions set out in the Privacy Act. If we refuse your request, we will provide you with written reasons and information about how you can complain about the refusal.

12. Direct marketing

We may use your personal information to send you information about our services that we believe may be of interest to you, but only where:

• You have consented to receiving such communications; or
• You would reasonably expect us to use your information for this purpose and we have provided you with a simple way to opt out.

Every marketing communication we send will include a clear and easy unsubscribe mechanism. You can opt out of marketing communications at any time by contacting us at info@socialcapitaladvisory.com.au or by using the unsubscribe link provided in the communication.

13. Complaints

If you believe we have breached the APPs or handled your personal information inappropriately, you may lodge a complaint with us using the contact details in Section 14 below.

We will acknowledge your complaint within 7 days and aim to investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001
Phone: 1300 363 992
Website: www.oaic.gov.au

14. Contact us

If you have any questions about this Privacy Policy, wish to make an access or correction request, or would like to lodge a complaint, please contact us at:

Social Capital Advisory
Adelaide, South Australia
Email: info@socialcapitaladvisory.com.au

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Effective date" at the top of this policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.