About this policy
FinDeskPro Pty Ltd (we, us, our) is an Australian company that provides supervised remote back office support to financial services firms. This policy covers personal information we collect through our website, sales enquiries, and the delivery of our services.
If you use our services on behalf of a client firm, the client firm remains the data controller for its own records; we act as a service provider working inside the client's systems under supervision.
Information we collect
We only collect what we need to respond to you and to deliver our services. This typically includes:
- Contact details you submit through our website or by email (name, business email, phone, firm name).
- Information you choose to share about your firm's operations, systems, and support needs.
- Technical data your browser sends when you visit the site (IP address, user agent, referrer, pages visited).
- Correspondence you send us and our record of responses.
We do not knowingly collect personal information from children.
How we use your information
We use personal information to:
- Respond to enquiries and discovery-call requests.
- Scope, deliver and improve the services you engage us for.
- Communicate about active engagements, invoices, and service changes.
- Meet our own legal, tax, and record-keeping obligations under Australian law.
- Detect, prevent, and respond to security incidents.
We do not sell personal information. We do not use it for third-party advertising.
Client operational data
When we deliver services to a client firm, our operators work inside the client's own systems through a supervised remote session. We do not export client data, do not hold local copies, and do not transfer files off the client's environment.
Any personal information belonging to a client firm's own customers remains the responsibility of the client firm as the data controller. We access such information only as authorised, and only for the scope agreed in writing.
Cross-border disclosure (APP 8)
Our delivery model is designed around Australian Privacy Principle 8. Cross-border disclosure of personal information is assessed and documented before any data flow, and only occurs where it is necessary, proportionate, and consented to in the engagement contract.
Where our operators are based outside Australia, they work inside your Australian systems under a supervised remote-access model that does not constitute a cross-border transfer of the underlying records. The engagement agreement records the specifics for your firm.
How we protect your information
We align our security posture with the Australian Cyber Security Centre's Essential Eight strategies. Practical controls include:
- Encrypted remote access; no credential sharing over insecure channels.
- Session monitoring and time-bound access windows.
- Multi-factor authentication for all operator accounts.
- Least-privilege access — operators only see what the agreed scope requires.
- Regular patching, endpoint hardening, and staff training.
No security control is absolute. If you believe your information has been compromised, contact us immediately using the details at the end of this policy.
Your rights and choices
Under the Australian Privacy Act you can:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is inaccurate or out of date.
- Withdraw consent to marketing communications (contact us or use the unsubscribe link in any marketing email).
- Make a complaint if you believe we have mishandled your information.
Send requests to privacy@findeskpro.com.au. We aim to respond within 30 days. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
How long we retain information
We keep personal information only for as long as we need it for the purpose it was collected, or as required by law (typically seven years for financial and tax records under Australian law). When information is no longer needed, we securely delete or de-identify it.
Changes to this policy
We may update this policy from time to time. Material changes will be highlighted on this page with a new "last updated" date. Continued use of our website or services after an update means you accept the updated policy.
Contact us
Questions or requests about privacy can go to:
FinDeskPro Pty Ltd
Perth, Western Australia
Email: privacy@findeskpro.com.au
Phone: +61 08 6558 1717