Privacy policy

1. Who we are

This policy covers personal information handled by Andorra Private Advisory Group Pty Ltd trading as Andorra Advisory Group (ABN 77 695 526 964), of Level 3, 116 Military Road, Neutral Bay NSW 2089. We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What we collect

• Contact details you provide through the enquiry form: name, email address and phone number.
• Transaction context you choose to give us: transaction value band, the service you are interested in, and your message.
• Documents you upload for scoping or engagement, typically financial statements, BAS lodgements, bank statements and contracts. These frequently contain the personal and financial information of third parties, including the vendor and their business.
• Basic technical data collected by privacy-respecting analytics, without cookies and without identifying individuals.

3. Why we collect it

To assess your enquiry, confirm a scope and fixed fee, perform the engaged work, and communicate with you about it. We do not sell personal information, use it for unrelated marketing, or share it outside the engagement except as described below.

4. How uploaded documents are handled

• Stored encrypted at rest in a private storage bucket with no public access.
• Reachable only through short-lived signed URLs issued by our systems.
• Retained for 90 days by default, then deleted.
• Deleted earlier at any time on request. Email us and we will confirm the deletion.
• Treated as confidential, including where they contain third-party financial records.

5. Disclosure

Information is disclosed only to the people needed to perform the engagement (for example, liaison with your solicitor or the vendor's accountant, at your direction), to our service providers who store data on our behalf under contractual confidentiality, or where the law requires it.

Where a matter involves our related entities (Andorra Private, or our broking partner The Lending Lab Pty Ltd), your information is only shared with them with your consent, and any referral relationship is disclosed in writing at engagement.

6. Access, correction and complaints

You can request access to or correction of your personal information, or make a privacy complaint, by emailing nicholas@andorraprivate.com.au. We respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).