1 Information We Collect

We collect information that helps us provide better budget benchmarking services. The data we gather falls into a few categories, and we're upfront about what we need and why.

Personal Identification Information

When you create an account or contact us, we collect basic details like your name, email address, phone number, and business information. This helps us communicate with you and tailor our services to your needs.

Financial and Business Data

For our benchmarking tools to work effectively, we need access to certain financial metrics from your business. This might include budget allocations, spending patterns, revenue figures, and operational costs. We understand this is sensitive stuff, and we handle it with care.

Technical Information

Like most online services, we automatically collect some technical data when you visit our site. This includes your IP address, browser type, device information, and how you interact with our platform. It helps us keep things running smoothly and spot any issues.

2 How We Use Your Information

Your data serves specific purposes, and we don't use it for anything beyond what's necessary to provide our services and improve your experience.

• Providing personalized budget benchmarking analysis based on your industry and business size
• Generating comparative reports that help you understand where your spending sits relative to peers
• Communicating important account updates, new features, and service improvements
• Responding to your inquiries and providing customer support when you need it
• Improving our algorithms and tools based on aggregated, anonymized usage patterns
• Ensuring platform security and preventing fraudulent activity
• Complying with Australian Privacy Principles and relevant legal obligations

3 Data Sharing and Disclosure

We're pretty protective of your information, but there are some situations where we need to share it with others. Here's the full picture.

Service Providers

We work with trusted third-party companies that help us operate our platform — things like cloud hosting, payment processing, and analytics. These providers only access the data they need to do their job, and they're bound by strict confidentiality agreements.

Aggregated Benchmarking Data

The whole point of benchmarking is comparison, right? We combine data from multiple businesses to create industry averages and trends. This aggregated information never identifies individual companies and forms the basis of the insights we provide.

Legal Requirements

Sometimes we're legally required to disclose information — like responding to court orders, complying with Australian taxation requirements, or cooperating with law enforcement when there's a valid legal basis. We'll always notify you if this happens, unless we're legally prohibited from doing so.

Business Transfers

If ephyrolenta merges with another company or gets acquired, your information would likely be part of that transfer. We'd notify you beforehand and make sure the new owner maintains the same privacy standards.

4 Your Privacy Rights

Under Australian privacy law, you have significant control over your personal information. Here's what you can do and how to do it.

To exercise any of these rights, email us at help@ephyrolenta.com with your request. We'll verify your identity and respond within the timeframes required by Australian law.

5 Data Security Measures

Protecting your information is a top priority. We use industry-standard security practices and regularly update our systems to stay ahead of potential threats.

Technical Safeguards

All data transmission between your browser and our servers uses TLS encryption. Your financial information is encrypted at rest using AES-256 encryption. We maintain secure backups in geographically distributed locations with restricted access.

Access Controls

Only authorized personnel can access your data, and they're trained on privacy practices. We use multi-factor authentication internally and conduct regular security audits. Every access to sensitive data is logged and monitored.

Incident Response

If a data breach occurs, we'll notify affected users within 72 hours and report it to the Office of the Australian Information Commissioner as required. We maintain a detailed incident response plan that's tested regularly.

6 Cookies and Tracking Technologies

We use cookies and similar technologies to make our platform work properly and understand how people use it. You have control over most of these.

Essential Cookies

These are necessary for basic functionality — like keeping you logged in and remembering your preferences. You can't disable these without breaking core features.

Analytics Cookies

We use these to understand how visitors interact with our site. This helps us spot problems and improve the user experience. The data is aggregated and doesn't identify you personally.

Managing Cookie Preferences

Most browsers let you control cookies through their settings. You can block or delete cookies, though this might affect how our platform works. We don't use cookies for advertising purposes.

7 Data Retention and Deletion

We don't keep your data forever. Our retention periods are based on business necessity and legal requirements.

Active account data is maintained as long as you're using our services. After you close your account, we keep certain information for three to five years depending on the type — mainly for legal compliance and dispute resolution. Financial benchmarking data is retained longer because historical comparisons are valuable for our analytics.

When data reaches the end of its retention period, we securely delete it. For particularly sensitive information, we use data destruction methods that make recovery impossible. You can request early deletion of your data, though we might need to keep some records to comply with Australian business and tax laws.

8 International Data Transfers

ephyrolenta primarily operates in Australia, but some of our service providers are based overseas. When we transfer data internationally, we ensure it's protected to the same standard as required by Australian law.

We use cloud services that might store data in multiple regions. These providers maintain certifications like ISO 27001 and comply with international privacy frameworks. Any cross-border data transfer is covered by appropriate safeguards, such as standard contractual clauses.

If you're accessing our services from outside Australia, your data will be transferred to and processed in Australia. By using our platform, you acknowledge this transfer.

9 Children's Privacy

Our services aren't designed for children under 18, and we don't knowingly collect information from minors. If we discover that we've inadvertently gathered data from someone under 18, we'll delete it promptly.

If you're a parent or guardian and believe your child has provided us with personal information, contact us immediately at help@ephyrolenta.com so we can address the situation.

10 Changes to This Policy

Privacy regulations and our business practices evolve over time. When we make significant changes to this policy, we'll notify you via email and display a prominent notice on our platform.

We recommend checking this page periodically to stay informed. The "Last Updated" date at the top shows when we last revised the policy. If you continue using our services after changes take effect, that indicates your acceptance of the updated terms.

For major changes that affect how we use your data, we might ask for your explicit consent before implementing them.

11 Australian Privacy Principles Compliance

ephyrolenta complies with the Australian Privacy Principles contained in the Privacy Act 1988. These principles govern how we collect, use, store, and disclose personal information, as well as how you can access and correct your information.

We've designed our practices to meet or exceed these requirements. If you believe we've breached the Australian Privacy Principles, you can lodge a complaint with us first. If you're not satisfied with our response, you have the right to contact the Office of the Australian Information Commissioner.