Privacy Policy

Your privacy matters to us. Here's how we collect, use, and protect your personal information when you use our financial statement analysis services.

Information We Collect

When you use Bozantriloa's financial analysis services, we collect information that helps us provide better insights into your business performance. This isn't just about data collection – it's about understanding your specific needs so we can deliver meaningful financial analysis.

Personal identification details including name, email address, and phone number
Business information such as company name, ABN, and industry classification
Financial statements, profit and loss reports, and balance sheet data
Website usage patterns and interaction data to improve our platform
Communication records from phone calls, emails, and support interactions
Payment information processed through secure third-party providers

We also automatically collect technical information like IP addresses, browser types, and device information. This helps us ensure our platform works properly across different systems and identify any security concerns quickly.

How We Use Your Information

Your information serves specific purposes in delivering our financial analysis services. We're not in the business of selling data – we're focused on providing you with accurate, timely financial insights that help your business grow.

We use collected information to generate comprehensive financial reports, identify trends in your business performance, and provide personalized recommendations based on your industry benchmarks. Our analysis algorithms require access to your financial data to calculate key performance indicators and ratios.

Important: We never use your financial data to compete with your business or share sensitive information with your competitors. Your business information remains strictly confidential within our analysis platform.

Communication purposes include sending you analysis reports, alerting you to significant changes in your financial metrics, and providing customer support. We may also contact you about service updates or new features that could benefit your specific business needs.

Information Sharing and Disclosure

We take information sharing seriously and follow strict guidelines about when and how we disclose your data. Most of the time, your information stays within our secure systems, but there are specific circumstances where sharing becomes necessary.

With your explicit consent for specific business purposes you've requested
To comply with Australian Privacy Principles and legal requirements
When required by court orders, subpoenas, or government investigations
With trusted service providers who help us deliver our analysis services
During business transfers, mergers, or acquisitions (with advance notice)
To protect against fraud, security threats, or illegal activities

Our service providers include cloud storage companies, payment processors, and software vendors. These partners sign strict confidentiality agreements and can only use your information for the specific services they provide to us.

We never sell your personal information to marketing companies, data brokers, or competitors. If we ever consider significant changes to our sharing practices, we'll notify you at least 30 days in advance and give you the option to opt out.

Your Privacy Rights Under Australian Law

As an Australian business, we comply with the Privacy Act 1988 and the Australian Privacy Principles. You have specific rights regarding your personal information, and we've made it straightforward to exercise these rights.

You can access your personal information at any time through your account dashboard or by contacting our privacy team. We'll provide you with a complete copy of your data within 30 days of your request, along with information about how we've been using it.

Request corrections to inaccurate or outdated information in our systems
Ask us to delete your account and associated data (with some legal exceptions)
Restrict how we process your information for specific purposes
Receive your data in a portable format for transfer to another service
Object to certain types of data processing or automated decision-making
Withdraw consent for optional data uses without affecting core services

If you're not satisfied with how we handle your privacy concerns, you can lodge a complaint with the Office of the Australian Information Commissioner. We'll work with you to resolve issues quickly, but you always have the right to escalate concerns to the regulator.

Data Security and Protection Measures

Financial data requires the highest level of security, and we've invested heavily in protecting your information. Our security measures go beyond basic password protection to include multiple layers of defense against various threats.

All data transmission uses TLS 1.3 encryption, and we store your information in encrypted databases with access controls that limit who can view specific types of data. Our servers are located in Australian data centers that meet strict physical security standards.

Security Update: We conduct quarterly security audits and penetration testing to identify vulnerabilities before they become problems. Our security team monitors systems 24/7 for unusual activity or potential breaches.

Employee access follows the principle of least privilege – team members can only access information necessary for their specific job functions. We provide regular security training and require multi-factor authentication for all system access.

In the unlikely event of a data breach, we'll notify affected clients within 72 hours and work with authorities to minimize any potential impact. We maintain cyber insurance and incident response procedures to handle security events effectively.

Data Retention and Deletion

We keep your information only as long as necessary to provide our services and meet legal requirements. Different types of data have different retention periods based on their purpose and regulatory requirements.

Financial analysis data is typically retained for seven years to comply with Australian business record-keeping requirements. However, you can request earlier deletion of personal identifiers while maintaining anonymized data for compliance purposes.

Active account data: Retained while your account remains active
Financial statements: Seven years from date of last analysis
Communication records: Three years for customer service purposes
Usage analytics: Anonymized after 18 months, deleted after five years
Marketing preferences: Until you unsubscribe or request deletion
Payment records: Seven years for tax and accounting compliance

When we delete your information, it's permanently removed from our active systems and backups within 90 days. Some anonymized statistical data may be retained indefinitely for service improvement purposes, but this cannot be linked back to you personally.

Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your experience and help us understand how people use our platform. We're transparent about what information we collect and give you control over non-essential cookies.

Essential cookies are necessary for basic website functionality like keeping you logged in and maintaining your session security. These cookies don't track your activities across other websites and are automatically deleted when you close your browser.

Analytics cookies help us understand which features are most useful and where people encounter problems on our site. This information guides our development priorities and helps us create a better user experience for everyone.

Cookie Control: You can manage cookie preferences through your browser settings or our cookie preference center. Disabling certain cookies may limit some website features, but core functionality will remain available.

International Data Transfers

While we primarily store data in Australian facilities, some of our service providers operate internationally. When we transfer data overseas, we ensure adequate protection measures are in place to maintain your privacy rights.

We only use service providers in countries with adequate privacy protections or those who agree to contractual safeguards that meet Australian privacy standards. Currently, some backup services and software providers operate in the United States and European Union.

You have the right to know when your information is transferred internationally and can request that we minimize such transfers where technically feasible. We review our international service providers annually to ensure continued compliance with privacy requirements.

Changes to This Privacy Policy

We update this privacy policy periodically to reflect changes in our services, legal requirements, or privacy practices. Significant changes will be communicated clearly, with advance notice for modifications that affect how we use your existing information.

Minor updates like clarifying existing practices or adding new contact information will be posted on our website with an updated effective date. We recommend checking this page periodically, especially before sharing new types of information with us.

Policy Updates: We'll email you about significant changes that require your attention or action. Continued use of our services after policy updates indicates acceptance of the revised terms.

Privacy Questions and Contact Information

If you have questions about this privacy policy or want to exercise your privacy rights, we're here to help. Our privacy team responds to most inquiries within two business days.

Email: contact@bozantriloa.com

Phone: +61 7 4725 0354

Mail: Bozantriloa Privacy Team
3/120 Campbell St
Toowoomba City QLD 4350
Australia

For urgent privacy concerns or suspected data breaches, please call us directly during business hours (9 AM - 5 PM AEST, Monday through Friday).

Last Updated: January 15, 2025
This policy is effective immediately and supersedes all previous versions.