Legal
Privacy Policy
1. The plain-English version
Nexa Consulting Pty Ltd (“Nexa”, “we”, “us”, “our”) takes your privacy seriously, particularly because the information you share with us during coaching is the most sensitive financial picture of your life.
This policy explains what we collect, why, what we do with it, how we keep it safe, and what your rights are. It complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
If you read nothing else, read Section 5 (the heightened care given to financial information) and Section 9 (your rights).
2. Who this policy applies to
This policy applies to:
- Visitors to the Nexa Consulting website.
- People who subscribe to the 5-Day Sort-Your-Numbers Challenge, the weekly newsletter, or any other email list.
- People who book a call, submit a contact form, or otherwise enquire.
- Active and former coaching clients.
2A. Anonymity and pseudonymity (APP 2)
Where lawful and practicable, you may deal with Nexa anonymously or under a pseudonym, for example, when browsing this website or sending a general enquiry that does not require a response. For an active coaching engagement, identification is necessary because the work depends on Nexa being able to see your actual financial position, contact you reliably, and meet record-keeping obligations under Australian tax and financial-services law. Where identification is required, this is the reason.
2B. Children's data
The Nexa Consulting website and services are directed at adult professionals and are not intended for children under 18. Personal information from children is not knowingly collected. If a parent or guardian becomes aware that a child has provided personal information without consent, please contact hello@nexaconsultingsolutions.au and the information will be deleted from active systems.
3. What we collect
Information you give us directly:
- Name, email address, and phone number (when you submit a form or book a call).
- The free-text content of any message you send us, including the answer to “What number is keeping you up?”
- Demographic information you choose to share (suburb, occupation, age band).
- For active clients: financial information you share during the coaching engagement, including bank statements, tax returns, super statements, pay slips, loan statements, brokerage account statements, and any other financial documents you upload or discuss.
Information collected automatically when you use the website:
- Standard server logs (IP address, browser type, pages visited, time on site).
- Cookies and analytics data (see Section 8).
Information from third parties:
- If you engage Nexa through a referral, we may receive your contact details from the referrer.
We do not collect government identifiers (Tax File Numbers, Medicare numbers, driver's licence numbers) and do not require them for coaching.
4. Why we collect it
We collect personal information for the following purposes:
- To respond to your enquiry and book the first call.
- To deliver the coaching engagement you've engaged us for.
- To send the 5-Day Sort-Your-Numbers Challenge or weekly newsletter (where you've opted in).
- To improve the website and the coaching frameworks.
- To meet our legal, regulatory, and tax obligations.
We will not use your personal information for any purpose that is unrelated to the above without first asking you.
5. Financial information: handled with heightened care
The financial information you share with Nexa during coaching engagements, including bank statements, tax returns, super statements, brokerage statements, debt positions, income figures, and household cashflow detail, is the most personal commercial picture of your life. Nexa treats it with the heightened care normally reserved for sensitive information.
To be clear about the statutory position: financial information is not“sensitive information” as defined in section 6 of the Privacy Act 1988 (Cth) (that defined term covers categories such as health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, biometric and genetic information). Nexa nonetheless applies sensitive-information-grade controls to your financial information, because that is the standard the work deserves.
Specifically:
- Financial information is collected only with your explicit consent and only to the extent reasonably necessary for the coaching engagement.
- It is stored separately from contact-form and marketing data, in access-controlled systems with encryption at rest.
- Access is restricted to the specific Nexa team members directly engaged on your file.
- It is nevershared with any product provider, platform, lender, fund manager, insurance company, or any other third party in connection with any commercial arrangement, because Nexa has no such arrangements (see Terms & Conditions, Section 4).
- It is retained only for as long as required for the engagement plus any period mandated by Australian tax or financial record-keeping law.
- It is securely deleted on request after the retention period ends.
6. Who we share information with
We share personal information only with:
- Sub-processors that help us deliver the service, for example, our email service provider, calendar booking tool, cloud storage provider, and accounting software. Each sub-processor is bound by a data processing agreement and is based in a jurisdiction with comparable privacy protections (or stronger).
- Government bodies, regulators, or courts where required by Australian law.
- A named referral partner, only if you explicitly request a referral for licensed financial, tax, or legal advice. Nothing is shared without your written consent.
We do not sell personal information. We do not rent email lists. We do not share data with advertisers for retargeting.
7. Cross-border data transfer
Some of our sub-processors (for example, email and cloud storage providers) store data on servers located outside Australia, typically in the United States, the European Union, or other comparable jurisdictions. Where this is the case, we take reasonable steps to ensure those providers handle your information consistently with the APPs.
A list of the specific jurisdictions and providers is available on request.
8. Cookies and analytics
The website uses cookies and analytics tools (for example, a privacy-respecting analytics package and standard server-side logging) to understand how visitors use the site and to improve it.
You can disable cookies in your browser settings. The website will still function with cookies disabled, but some features may be limited.
We do not use third-party retargeting pixels, advertising cookies, or behavioural advertising trackers on this website. The decision is deliberate and aligned with the rest of the brand.
9. Your rights
Under the Privacy Act 1988 (Cth), you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate, out of date, or incomplete.
- Request deletion of your personal information (subject to legal retention requirements).
- Withdraw consent to marketing communications at any time (every email has an unsubscribe link).
- Complainif you believe we've mishandled your personal information.
To exercise any of these rights, email hello@nexaconsultingsolutions.au. We will respond within 30 days.
10. How long we keep information
We keep personal information only as long as we need it for the purpose for which it was collected, or as required by Australian law (whichever is longer).
- Contact-form submissions: kept for 24 months after the last interaction, then deleted.
- Newsletter / challenge subscriber data: kept until you unsubscribe, then deleted within 90 days.
- Active client files (including financial information): kept for the duration of the engagement plus 7 years to meet tax and financial record-keeping obligations, then securely deleted unless a longer retention is required by law.
11. Data security
We protect personal information using reasonable and appropriate technical and organisational measures:
- Encryption in transit (TLS) and at rest.
- Access controls: only the team members who need access have it.
- Strong authentication on all internal systems.
- Regular security reviews of sub-processors.
No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
12. Complaints
If you believe we've mishandled your personal information, email hello@nexaconsultingsolutions.auwith the subject line “Privacy Complaint”. We will acknowledge within 5 business days and respond substantively within 30 days.
If you're not satisfied with our response, you can refer the complaint to the Office of the Australian Information Commissioner (OAIC):
- Web: oaic.gov.au
- Phone: 1300 363 992
13. Changes to this policy
We may update this policy from time to time. The current version is always published at nexaconsultingsolutions.au/privacy-policy/. Material changes will be communicated to active clients and newsletter subscribers in writing.
14. Contact
Privacy questions, access requests, correction requests, deletion requests, and complaints all go to:
Nexa Consulting Pty Ltd: Privacyhello@nexaconsultingsolutions.au
See also our Terms & Conditions.