Introduction

At nephorulon, we understand that your privacy matters. This privacy policy explains how we collect, use, protect, and share your personal information when you visit our website or use our business planning services.

We're committed to being transparent about our data practices. This policy applies to all information collected through our website nephorulon.com, email communications, and any related services we provide to Australian businesses seeking financial planning support.

Information We Collect

Personal Information You Provide

When you interact with our services, we collect information you voluntarily provide, including:

• Contact details (name, email address, phone number, business address)
• Business information (company name, industry, business structure)
• Financial planning requirements and business goals
• Communication preferences and consultation requests
• Feedback and survey responses

Information Automatically Collected

Our website automatically collects certain technical information:

• IP address and general location data
• Browser type, version, and operating system
• Pages visited, time spent, and navigation patterns
• Referring website and search terms used
• Device information and screen resolution

How We Use Your Data

We process your personal information for specific business purposes that align with providing quality financial planning services:

Primary Uses

1. Service Delivery: To provide business planning consultations, prepare financial reports, and deliver requested services
2. Communication: To respond to inquiries, schedule appointments, and provide updates about your projects
3. Business Development: To understand client needs and improve our service offerings
4. Legal Compliance: To meet Australian taxation and business reporting requirements

Website Functionality

Technical data helps us maintain and improve our website's performance, troubleshoot issues, and ensure security. We analyze usage patterns to create better user experiences and identify which content is most valuable to our visitors.

We never sell your personal information to third parties. All data processing is conducted in accordance with Australian privacy laws and industry best practices for financial services.

Data Sharing and Third Parties

When We Share Information

We limit data sharing to essential business functions and trusted partners:

• Professional Services: Accountants, lawyers, or specialists involved in your business planning project
• Technology Providers: Cloud storage, email services, and website hosting companies with appropriate security measures
• Government Agencies: When required by Australian law or regulation
• Business Transfers: In the event of merger, acquisition, or sale of business assets

Third-Party Service Providers

Our trusted partners include cloud hosting services, email communication platforms, and secure document storage solutions. All third-party providers are carefully vetted and must maintain equivalent privacy and security standards.

Security Measures

Protecting your information is fundamental to our business operations. We implement comprehensive security measures across all aspects of data handling:

Technical Safeguards

• SSL encryption for all website communications
• Secure, encrypted cloud storage with regular backups
• Multi-factor authentication for staff access
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection systems

Organizational Measures

• Staff training on privacy and data protection procedures
• Access controls limiting data access to necessary personnel only
• Regular review and updating of security policies
• Incident response procedures for potential data breaches

While we implement industry-standard security measures, no system is completely impervious to threats. We continuously monitor and improve our security practices to address emerging risks in the digital landscape.

Your Privacy Rights

Under Australian privacy law, you have several important rights regarding your personal information:

Access and Correction

You can request access to the personal information we hold about you and ask us to correct any inaccuracies. We'll provide this information within 30 days of your request, subject to any legal restrictions.

Data Portability

You can request a copy of your personal information in a structured, commonly used format. This includes contact details, business information, and records of our communications.

Withdrawal of Consent

Where we process your information based on consent, you can withdraw that consent at any time. This includes marketing communications and non-essential data collection.

Complaint Process

1. Contact our privacy officer directly using the details provided below
2. We'll acknowledge your complaint within 5 business days
3. We'll investigate and respond with our findings within 30 days
4. If unsatisfied, you can contact the Office of the Australian Information Commissioner

Cookie Policy

Our website uses cookies and similar technologies to enhance your browsing experience and provide better services.

Types of Cookies We Use

Managing Cookies

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete existing cookies
• Block cookies from specific sites
• Block third-party cookies entirely
• Clear all cookies when closing the browser

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by Australian law.

Retention Periods

• Client Records: 7 years after completion of services (Australian tax law requirement)
• Marketing Communications: Until you unsubscribe or 3 years of inactivity
• Website Analytics: 26 months for usage data
• Inquiry Records: 2 years for prospects who don't become clients

Secure Deletion

When retention periods expire, we securely delete or anonymize your information using industry-standard methods. This includes physical destruction of paper records and secure wiping of digital storage media.

International Data Transfers

Some of our technology providers are located outside Australia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Adequacy decisions recognizing equivalent privacy protections
• Standard contractual clauses approved by privacy authorities
• Certification schemes ensuring appropriate data protection
• Binding corporate rules for multinational service providers

We primarily use service providers in countries with strong privacy frameworks, including the United States (under Privacy Shield successors), European Union, and Canada.

Policy Updates

We review and update this privacy policy regularly to reflect changes in our practices, technology, legal requirements, and industry standards.

When we make significant changes, we'll notify you through:

• Email notification to registered users
• Prominent notice on our website
• Updated "last modified" date at the top of this policy

We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our services after policy updates constitutes acceptance of the changes.