PRIVACY
Privacy Policy
Plain English, per the Australian Privacy Principles - adopted voluntarily, because we hold sensitive information for a living.
Who we are. Northtrail Partners Pty Ltd, a Melbourne-based transaction readiness and M&A advisory firm serving Australia and New Zealand. Privacy contact: email.
What we collect. Contact details you give us through this site, the Exit Readiness Self-Assessment, bookings or correspondence; your self-assessment responses and score; engagement information provided during advisory work; and basic technical data via functional cookies. We don’t knowingly collect information from persons under 18.
How we use it. To respond, to provide your assessment result, to scope and deliver engagements, to send content you’ve asked for (working unsubscribe in every message), and to meet legal and professional obligations, including identification checks under the AML/CTF regime where applicable.
The self-assessment, specifically. Your responses and score prepare us for a conversation with you and improve the tool in aggregated, de-identified form. We never sell tool data, publish individual results, or share them outside Northtrail and its service providers.
Disclosure. Only to our service providers (hosting, email, document management, e-signature) under confidentiality; your own advisers at your direction; alliance partners only with your consent; and regulators or courts where required by law. We do not sell or rent personal information.
Storage & security. Systems are access-controlled with multi-factor authentication; client material sits in segregated folders. Data is held primarily in Australia. No internet transmission is perfectly secure; we maintain a breach-response plan consistent with the Notifiable Data Breaches scheme.
Access, correction, complaints. Ask us anytime at email; we respond within 30 days. Unresolved complaints can go to the OAIC (oaic.gov.au); New Zealand residents may also contact privacy.org.nz.
Retention. Engagement records at least 7 years for professional, insurance and tax reasons; tool responses that don’t become a conversation are deleted or de-identified within 24 months.
This policy may be updated; the current version lives here with its effective date. Effective: 27 July 2026.