Privacy
Privacy Policy
Last updated 25 September 2026
Definitions
This privacy policy sets out how Fahy Advisory handles your personal information. Fahy Advisory handles personal information as set out in this policy.
When we talk about us, we mean the entity and website detailed in the Schedule; we are the operator of this website. When we talk about you, we mean the person using this website or our services.
Personal data or personal information is information that directly identifies you, such as your name and email address, or data that could be used on its own or in combination with other data to identify you.
It is very important to us to be clear about what data we collect, why we collect it, how we use it, and how we keep it safe.
Schedule
Where used in this privacy policy, we and us means:
- Website:
- https://www.fahyadvisory.com/
- Entity:
- Fahy Advisory Pty Ltd ABN 70 698 335 581
- Registered office:
- Suite 2, Level 3, 13-15 Wentworth Avenue, Sydney NSW 2000
- Phone:
- +61 40 282 2297
- Email:
- [email protected]
Our contact details: if you have questions about the information we hold or how we use it, please contact us via email at [email protected].
Staying anonymous
You can browse our webpages anonymously, although cookies may be collected. However, if you would like to take advantage of our services you will need to identify yourself to us, and at that point we will collect your personal information.
Collection and use of data
At all times we try to only collect the information we need for the service we are providing. The main way we collect personal information is when you give it to us or explicitly consent for it to be given to us. This generally occurs:
- •when you contact us;
- •when you complete an online enquiry or request for information;
- •when you subscribe to our newsletter;
- •when you participate in a promotion offered by Fahy Advisory;
- •when you submit information through our online services;
- •when you engage Fahy Advisory to provide services; and
- •when you ask for access to information we hold about you.
We collect and process the minimum amount of information needed to deliver our services to you and to meet our legal and record-keeping requirements. This information includes:
- •your name;
- •your email address; and
- •your phone number.
We also hold business financial information necessary for the delivery of our services. That information alone may not be classified as personal information unless it can be used to identify you. However, we understand how important this information is to you and will store it with the same level of security and protection as the personal information we do hold about you.
We may share your personal information when required to do so by law, or with our professional advisers to obtain advice or to meet our accounting or compliance obligations.
Collection of data of minors
We do not intend to collect the personal data of persons under the age of 13. If you are the guardian of a minor and suspect they may have provided us with their personal information, please contact us and request to have the minor's personal information destroyed (use the contact information in the Schedule above).
Unsolicited personal information
We may receive unsolicited personal information about you. We destroy or de-identify all unsolicited personal information we receive, unless it is relevant to our purposes for collecting personal information. We may retain additional information we receive about you if it is combined with other information we are required or entitled to collect. If we do this, we will retain the information in the same way we hold your other personal information.
Identifiers
We do not adopt identifiers assigned by government (such as drivers' licence numbers) for our own file recording purposes.
Fahy Advisory information partners
We use the following third-party service providers in the course of delivering the services. Each is bound by its own published terms of service and data-handling commitments:
| Provider | Role | Data location | Access scope |
|---|---|---|---|
| Xero (Xero Australia Pty Ltd) | Accounting data source — where applicable | Australia | Read-only, scoped to your authorised organisation |
| Supabase Inc. | Hosted PostgreSQL database for your prepared financial data | Sydney, Australia (AWS ap-southeast-2) | Encrypted at rest and in transit; access limited to our authorised personnel |
| Google LLC (Google Workspace) | Business email and file storage for documents you send us and documents we deliver, and the Gemini assistant inside that account, used to draft and check written material | Processed under our Google Workspace agreement; may be stored outside Australia; not used to train models outside our domain and not human reviewed | Access limited to our authorised personnel. Gemini receives the same: your figures, the ledger contact names, job and pipeline names, your monthly update notes and our working notes. No email addresses, bank details, payroll data or tax file numbers. |
| Anthropic, PBC | AI model provider (Claude Team and the Claude API), used to draft the narrative commentary in your reports and to draft and check written material | United States; not used to train Anthropic's models under their Commercial Terms | Your financial figures, the names of the customers and suppliers in your ledger, the job and pipeline names in the schedules you send us, what you write in your monthly update form, and our own working notes about your business. No email addresses, bank details, payroll data or tax file numbers. |
| OpenAI, L.L.C. | AI model provider (ChatGPT Business and the OpenAI API), used to draft and check written material | United States; not used to train OpenAI's models under their business terms; abuse-monitoring logs retained up to 30 days | The same as Anthropic above: your figures, the ledger contact names, job and pipeline names, your monthly update notes and our working notes. No email addresses, bank details, payroll data or tax file numbers. |
| Cloudflare, Inc. | Hosting for your client portal (portal.fahyadvisory.com), where your dashboards and reports are updated each reporting cycle | United States (Cloudflare global edge network) | Your prepared dashboard data (derived financial figures); served only to people you authorise, who sign in by emailed link |
We will not add or change a subcontractor that processes your data without giving you 30 days' prior written notice.
If you ask us for a referral to a professional service provider such as an accountant, lawyer or financial adviser, we may give your name and contact information to third-party colleagues within our network who may contact you to provide information about their services. If you are contacted by a referred colleague, you do not need to use their services. The legal basis we have for processing your information in this manner is your consent.
Contractual arrangements with third parties
We ensure that all contractual arrangements with third parties adequately address privacy issues, and we make third parties aware of this privacy policy. Third parties will be required to implement policies in relation to the management of your personal information in line with this policy. These policies include:
- •regulating the collection, use and disclosure of personal and sensitive information;
- •de-identifying personal and sensitive information wherever possible;
- •ensuring that personal and sensitive information is kept securely, with access to it only by authorised employees or agents of the third parties; and
- •ensuring that the personal and sensitive information is only disclosed to organisations which are approved by us.
Consent to use of data
You agree that Fahy Advisory may collect and use technical data and related information, including but not limited to technical information about your device, system and application software, and peripherals (using cookies). This information may be gathered periodically to facilitate the provision of software updates, product support and other services to you (if any) related to Fahy Advisory.
You agree to Fahy Advisory using your financial data in fully anonymised and aggregated form (i.e., not identifiable to your business) for the purposes of industry benchmark calculations, service improvement and analytics, and aggregate sector reporting.
Fahy Advisory may use this information, as long as it is in a form that does not personally identify you, to improve its services or to provide services or technologies to you.
Storage, security and overseas recipients
We use cloud-based services for the hosting and backup of our online services. These services have their own privacy statements detailing how they store your personal information. We also use the Fahy Advisory information partners listed above.
This means your personal information may cross country borders and be stored overseas in a jurisdiction that may have different privacy laws to where you live (although it is only accessed by us and our contractors and employees in Australia). By agreeing to this policy, you agree to such a transfer.
We are committed to ensuring your information is secure. To prevent unauthorised access or disclosure, we use firewalls, other electronic security procedures and managerial processes to safeguard your information. Our internal processes may include risk assessment for misuse, interference, loss or unauthorised access, modification or disclosure of your information, and background tracking and records of changes made to your personal information. While we do our best to ensure the security of your data, no storage is 100% secure and we cannot guarantee the safety of your data.
Retention of your personal information
You agree that we may retain any of your personal information necessary to provide our services to you, and for compliance purposes we may retain your information after we stop providing services to you for varying lengths of time. Where your personal information is not required to be retained under law and is no longer required for the purpose for which it was collected (to provide you with our services), we will take reasonable steps to securely destroy or de-identify it.
Data rights — accessing and correcting your personal information
At your request, and upon production of satisfactory identification, we will tell you what personal data about you is being processed (e.g. what information we have stored), on what basis, and by whom. If you decide your data should not be processed for one or more purposes, you may withdraw your consent to using your data in that way. Please note that we will action your request as soon as practically possible; however, such a request will not take effect immediately and your data may still be used in the meantime.
You may amend inaccurate, incomplete or outdated personal data at any time by applying directly to us using the contact information above.
You may also request that all personal data we have collected about you be deleted from our records and erased from information stored by any third-party organisations processing data on our behalf.
If data we have collected about you is processed using automated means, you have the right to receive that data in a structured, machine-readable format and to transmit it to another data controller without hindrance.
Complaints handling
We have a complaint handling process in place to manage privacy risks and issues. If you have any questions about this policy, would like to provide feedback, or believe that we have mishandled your information, you may lodge a complaint with us using the contact details set out above. We will respond to your complaint within 30 days.
Contact us
Please let us know if you have any requests, feedback or concerns regarding the way we manage your personal data. Use the contact details listed in the Schedule. We will respond to you within 30 days and take action, within reason, as quickly as possible.
If you are not happy with how we manage your concerns, you may seek independent advice.
Changes to this privacy notice
Our privacy notice is regularly reviewed, and we will do so to keep it relevant and up to date with changing laws. We will notify you of any changes by posting the new policy on this page. This privacy policy was last updated on 25 September 2026.
Fahy Advisory Pty Ltd · ABN 70 698 335 581