M&A Concierge (ABN: 20 697 970 004) ("we", "us", "our") operates the advisory service available at mandaconcierge.com.au (the "Service"). We are committed to protecting the privacy of individuals who interact with our Service.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and the rights you have in relation to your information. It applies to all users of our website and Service, including business owners who book an advisory call.
We are bound by the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles (APPs) contained in that Act. This policy is written to satisfy our obligations under the APPs.
When you book an advisory call, use our online assessment tools, or otherwise interact with our Service, we collect personal information you provide to us, which may include:
When you visit our website, we may automatically collect:
This information is collected through cookies and similar technologies. See Section 8 for our Cookies statement.
M&A Concierge does not request personal identification documents (such as passports or driver's licences), tax file numbers, or sensitive information as defined under the Privacy Act (such as health information or criminal records). We do not collect information from children under 18 years of age.
Occasionally, in the course of an advisory engagement, a client may voluntarily provide documents or information that contain personal identification details, sensitive information, or regulated information such as tax file numbers, for example by attaching financial statements or tax returns to an email. Where this occurs, we will handle any such information in accordance with the Australian Privacy Principles and, where applicable, the Tax File Number Rule 2015 (Cth). We will not use it for any purpose beyond the immediate context in which it was provided, and will not retain it beyond what is necessary for that purpose.
We recommend that where possible, documents shared with us are redacted to remove tax file numbers and personal identification details before sending, as this information is not required for the purposes of our Service.
We collect personal information:
Where it is reasonable and practicable, we will collect information directly from you rather than from third parties.
We collect and use your personal information for the following primary purposes:
We may also use your information for the following secondary purposes:
We will not use your information for direct marketing without your explicit consent. If you consent to marketing communications, you may withdraw that consent at any time.
M&A Concierge operates on a referral fee model. If you engage an M&A advisor or professional introduced by us, we may receive a referral fee from that professional. This fee is paid by the professional from their own fee income. M&A Concierge has no involvement in, or influence over, the fees that any advisor charges you for their services.
Where we facilitate an introduction, we will share relevant identifying and contextual information about you with the professional being introduced. This is limited to what is necessary for the professional to assess whether they are able to assist you and to make initial contact. We will not share information beyond what is necessary for this purpose.
We will inform you before making any introduction and will not proceed without your knowledge. By engaging with our Service and requesting an introduction, you consent to this limited disclosure.
We use a small number of third-party service providers to operate our Service. These providers may have access to your personal information to the extent necessary to perform their functions. They are not authorised to use your information for any other purpose. Current categories of providers include:
We may disclose your personal information if required to do so by law, by a court order, or by a government or regulatory authority. We may also disclose information to enforce our Terms of Engagement or to protect the rights, property, or safety of M&A Concierge, our clients, or others.
If M&A Concierge is sold, merged, or transferred to another entity, your personal information may be disclosed to the acquiring party as part of that transaction. Any such party will be expected to handle your personal information consistently with the purposes described in this policy.
Some of the third-party service providers we use to operate our business may store or process data on servers located outside Australia, including in the United States, the European Union, or other jurisdictions. This occurs as an incidental consequence of using common cloud-based tools for email, scheduling, and website hosting, rather than through any active transfer of your information to overseas parties for their own purposes.
We take reasonable steps to select service providers that maintain appropriate data handling and security practices. By using our Service, you acknowledge that your information may be stored on overseas infrastructure in this manner.
Our website uses cookies, small text files stored on your device, to improve your experience and to collect analytics data. We use:
You can configure your browser to refuse cookies or to alert you when cookies are being set. If you disable cookies, some parts of our website may not function as intended.
We take reasonable technical and organisational steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:
No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
We retain personal information for as long as is necessary to fulfil the purposes described in this policy, or as required by law. In general:
Under the Privacy Act and the Australian Privacy Principles, you have the following rights.
You may request access to the personal information we hold about you. We will provide access unless an exception under the Privacy Act applies. We may charge a reasonable administrative fee for providing access.
You may request that we correct personal information we hold about you that is inaccurate, incomplete, or misleading. We will take reasonable steps to correct the information within 30 days.
If you believe we have breached the Australian Privacy Principles, you may make a complaint to us using the contact details in Section 13. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 business days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party websites you visit.
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your rights, please contact us:
Entity: M&A Concierge (ABN: 20 697 970 004)
Website: mandaconcierge.com.au
We may update this Privacy Policy from time to time to reflect changes to our practices or to applicable law. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify you by email or by a notice on our website. We encourage you to review this policy periodically.
Effective 26 May 2026 · Document version 1.0