M&A Concierge (ABN: 20 697 970 004) ("we", "us", "our") operates the advisory service available at mandaconcierge.com.au (the "Service"). We are committed to protecting the privacy of individuals who interact with our Service.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and the rights you have in relation to your information. It applies to all users of our website and Service, including business owners who book an advisory call.
We are bound by the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles (APPs) contained in that Act. This policy is written to satisfy our obligations under the APPs.
When you book an advisory call, use our online assessment tools, or otherwise interact with our Service, we collect personal information you provide to us, which may include:
When you visit our website, we may automatically collect:
This information is collected through cookies and similar technologies. See Section 8 for our Cookies statement.
M&A Concierge does not request personal identification documents (such as passports or driver's licences), tax file numbers, or sensitive information as defined under the Privacy Act (such as health information or criminal records). We do not collect information from children under 18 years of age.
Occasionally, in the course of an advisory engagement, a client may voluntarily provide documents or information that contain personal identification details, sensitive information, or regulated information such as tax file numbers, for example by attaching financial statements or tax returns to an email. Where this occurs, we will handle any such information in accordance with the Australian Privacy Principles and, where applicable, the Tax File Number Rule 2015 (Cth). We will not use it for any purpose beyond the immediate context in which it was provided, and will not retain it beyond what is necessary for that purpose.
We recommend that where possible, documents shared with us are redacted to remove tax file numbers and personal identification details before sending, as this information is not required for the purposes of our Service.
We collect personal information:
Where it is reasonable and practicable, we will collect information directly from you rather than from third parties.
We collect and use your personal information for the following primary purposes:
We may also use your information for the following secondary purposes:
We will not use your information for direct marketing without your explicit consent. If you consent to marketing communications, you may withdraw that consent at any time.
M&A Concierge operates on a referral fee model. If you engage an M&A advisor or professional introduced by us, we may receive a referral fee from that professional. This fee is paid by the professional from their own fee income. M&A Concierge has no involvement in, or influence over, the fees that any advisor charges you for their services.
Where we facilitate an introduction, we will share relevant identifying and contextual information about you with the professional being introduced. This is limited to what is necessary for the professional to assess whether they are able to assist you and to make initial contact. We will not share information beyond what is necessary for this purpose.
We will inform you before making any introduction and will not proceed without your knowledge. By engaging with our Service and requesting an introduction, you consent to this limited disclosure.
We use a small number of third-party service providers to operate our Service. These providers may have access to your personal information to the extent necessary to perform their functions. They are not authorised to use your information for any other purpose. Current categories of providers include:
We may disclose your personal information if required to do so by law, by a court order, or by a government or regulatory authority. We may also disclose information to enforce our Terms of Engagement or to protect the rights, property, or safety of M&A Concierge, our clients, or others.
If M&A Concierge is sold, merged, or transferred to another entity, your personal information may be disclosed to the acquiring party as part of that transaction. Any such party will be expected to handle your personal information consistently with the purposes described in this policy.
Some of the third-party service providers we use to operate our business may store or process data on servers located outside Australia, including in the United States, the European Union, or other jurisdictions. This occurs as an incidental consequence of using common cloud-based tools for email, scheduling, and website hosting, rather than through any active transfer of your information to overseas parties for their own purposes.
We take reasonable steps to select service providers that maintain appropriate data handling and security practices. By using our Service, you acknowledge that your information may be stored on overseas infrastructure in this manner.
Our website uses cookies, small text files stored on your device, to improve your experience and to collect analytics data. We use:
You can configure your browser to refuse cookies or to alert you when cookies are being set. If you disable cookies, some parts of our website may not function as intended.
We use Google Analytics 4 (provided by Google) and Microsoft Clarity (provided by Microsoft) to understand how visitors find and use our website. These services use cookies and similar technologies to collect information such as pages visited, time on each page, clicks, and general usage patterns. Microsoft Clarity additionally provides session replay, which records interactions with our pages (such as mouse movement, scrolling, and clicks), with on-screen text masked by default. We do not use these tools to capture the commercially sensitive information you share during an advisory call.
Information collected by these services may be processed and stored overseas by Google and Microsoft, including in the United States, in the manner described in Section 7 (Overseas Disclosure). We handle this information consistently with the Australian Privacy Principles. You can prevent these tools from running by disabling cookies or using your browser's privacy controls as described above, and you can opt out of Google Analytics using the browser add-on Google provides.
Our website includes a chat assistant that answers general questions about selling a business, choosing an M&A advisor and our assessment tools, using the information in our published guides. This section explains how we handle information when you use it.
When you use the chat assistant, we collect and store:
The chat does not collect your name, email address, phone number or other contact details, and we do not store IP addresses with chat records. To protect the chat from automated misuse, our hosting provider, Cloudflare, briefly uses your IP address and basic browser information for a security check and to limit how many messages can be sent in a short period. This information is not stored with your conversation. While you browse our website, your conversation is also kept in your browser so it carries across pages; it is removed when you close the browser tab.
We use chat messages to answer your questions and to improve our guides, for example by identifying topics our guides do not yet cover or do not explain clearly.
Your messages are processed by Anthropic, our AI provider, to generate the assistant's replies. Anthropic may process them outside Australia, including in the United States, in the manner described in Section 7 (Overseas Disclosure). Chat records are stored securely with our hosting provider, Cloudflare, and are kept only for as long as we need them for the purposes described above.
Please do not enter personal or identifying information into the chat, such as your name, contact details, your business's name, or financial or other details that could identify you or your business. The assistant does not need this information to answer general questions.
If you have any questions or concerns about the chat assistant or how we handle chat messages, please contact us using the details in Section 14.
We take reasonable technical and organisational steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:
No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
We retain personal information for as long as is necessary to fulfil the purposes described in this policy, or as required by law. In general:
Under the Privacy Act and the Australian Privacy Principles, you have the following rights.
You may request access to the personal information we hold about you. We will provide access unless an exception under the Privacy Act applies. We may charge a reasonable administrative fee for providing access.
You may request that we correct personal information we hold about you that is inaccurate, incomplete, or misleading. We will take reasonable steps to correct the information within 30 days.
If you believe we have breached the Australian Privacy Principles, you may make a complaint to us using the contact details in Section 14. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 business days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party websites you visit.
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your rights, please contact us:
Entity: M&A Concierge (ABN: 20 697 970 004)
Website: mandaconcierge.com.au
We may update this Privacy Policy from time to time to reflect changes to our practices or to applicable law. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify you by email or by a notice on our website. We encourage you to review this policy periodically.
Effective 4 October 2026 · Document version 1.1