Privacy Policy
Effective Date: 15 January 2025
morenthysa recognizes the importance of protecting your personal information. This Privacy Policy outlines how we collect, use, store, and safeguard data when you interact with our activity-based budgeting services. We're committed to transparency about our practices and your rights under Australian privacy laws, particularly the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Information We Collect
The types of information we gather depend on how you engage with our services. We collect data directly from you and sometimes through your use of our platform.
Personal Information
When you register for morenthysa's budgeting tools or contact us for support, we typically collect:
- Full name and contact details (email address, phone number)
- Business name and ABN (if applicable)
- Postal address (William Stimson Primary School, Lily Street, Wetherill Park NSW 2164, Australia)
- Payment information (processed through secure third-party payment gateways)
- Account credentials and authentication details
Financial and Budgeting Data
To provide activity-based budgeting services, we need to process:
- Budget information, financial goals, and spending patterns
- Activity categories and cost allocations
- Historical financial data you choose to upload
- Transaction records and budgeting preferences
Technical Information
Like most online services, we automatically collect certain technical data:
- IP addresses and device identifiers
- Browser type, operating system, and device information
- Pages visited, time spent on pages, and navigation patterns
- Referral sources and search terms used to find us
- Cookie data (more details in our Cookie Policy)
How We Use Your Information
We're pretty straightforward about what we do with your data. Everything we collect serves specific purposes related to providing and improving our budgeting services.
Service Delivery
We use your information to create and maintain your account, process transactions, deliver budgeting tools, and provide customer support when you need it.
Communication
We'll send service-related notifications, respond to your inquiries, and occasionally share relevant updates about features that might help your budgeting activities.
Platform Improvement
Analysis of usage patterns helps us understand what works well and what doesn't, guiding development of new features and refinement of existing tools.
Security and Compliance
We monitor for unauthorized access, detect fraudulent activity, and ensure compliance with Australian financial service regulations and privacy requirements.
Data Sharing and Disclosure
We don't sell your personal information to third parties. That said, running a modern financial service means working with certain trusted partners.
Service Providers
We engage third-party companies to support our operations:
- Payment processors: Secure handling of financial transactions and billing
- Cloud hosting providers: Australian-based servers storing your data
- Email service providers: Delivery of account notifications and correspondence
- Analytics tools: Understanding how users interact with our platform
These providers are contractually obligated to protect your information and use it only for specified purposes.
Legal Requirements
We may disclose information when legally required to do so, such as:
- Responding to court orders, subpoenas, or regulatory requests
- Investigating suspected fraud or security breaches
- Protecting the rights and safety of morenthysa, our users, or others
- Complying with Australian taxation and financial reporting obligations
Business Transfers
If morenthysa undergoes a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections outlined here.
Data Security Measures
Protecting financial information is something we take seriously. We've put several layers of security in place.
Encryption: All data transmitted between your device and our servers uses industry-standard TLS encryption. Stored data is encrypted at rest using AES-256 encryption.
Access Controls: Only authorized personnel with legitimate business needs can access personal information, and all access is logged and monitored.
Regular Audits: We conduct security assessments and penetration testing to identify and address potential vulnerabilities.
Incident Response: We maintain protocols for detecting, responding to, and notifying affected parties of any data breaches as required by Australian law.
No system is completely foolproof, though. While we work hard to protect your data, we can't guarantee absolute security against all possible threats.
Data Retention and Deletion
We keep your information only as long as necessary for the purposes described in this policy.
| Data Type | Retention Period |
|---|---|
| Account information | Duration of active account plus 7 years (tax compliance) |
| Financial records | 7 years from last transaction (ATO requirements) |
| Communication records | 3 years from last interaction |
| Technical logs | 12 months (security and troubleshooting) |
| Marketing preferences | Until withdrawal of consent or account closure |
After these periods, we securely delete or anonymize your information unless longer retention is required by Australian law or regulatory obligations.
Your Privacy Rights
Australian privacy law gives you several rights regarding your personal information. Here's what you can do.
Access and Correction
You can request a copy of the personal information we hold about you. If you spot any inaccuracies, you have the right to request corrections. We'll process these requests within 30 days and won't charge unreasonable fees for access.
Data Portability
You can request your budgeting data in a structured, commonly used format that you can transfer to another service. This helps you maintain control over your financial information.
Deletion Requests
You can ask us to delete your personal information, subject to certain exceptions (like records we're legally required to keep for tax purposes). We'll honor deletion requests within 30 days where legally permissible.
Marketing Opt-Out
You can unsubscribe from marketing communications at any time using the link in our emails or by contacting us directly. Service-related notifications may still be necessary even if you opt out of marketing.
Complaint Process
If you're concerned about how we've handled your information, contact our Privacy Officer at contact@morenthysa.com. We'll investigate and respond within 30 days. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
International Data Transfers
We primarily store data on Australian servers, but some service providers may process information overseas. When this happens, we ensure:
- The recipient country has substantially similar privacy protections to Australia
- Contractual arrangements include data protection requirements meeting Australian standards
- You're informed about which countries may receive your data
Currently, limited data may be processed in the United States by our email service provider and cloud infrastructure backup systems, both of which maintain ISO 27001 certification and comply with international data protection frameworks.
Children's Privacy
morenthysa's services are designed for adults managing business or personal finances. We don't knowingly collect information from individuals under 18 years of age. If you believe we've inadvertently collected data from a minor, please contact us immediately so we can delete it.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and understand how you use our platform.
Types of Cookies We Use
- Essential cookies: Required for login functionality and security features
- Functional cookies: Remember your preferences and settings
- Analytics cookies: Help us understand usage patterns and improve the platform
- Performance cookies: Monitor system performance and identify technical issues
You can control cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality.
Changes to This Privacy Policy
We update this policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we'll notify you via email or through a prominent notice on our platform at least 30 days before the changes take effect.
The "Effective Date" at the top of this policy indicates when it was last updated. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
Third-Party Links
Our platform may contain links to external websites or services not operated by morenthysa. We're not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
Privacy Inquiries and Requests
If you have questions about this Privacy Policy, want to exercise your privacy rights, or need to discuss a privacy concern, please reach out to us:
We typically respond to privacy requests within 5 business days and aim to resolve all inquiries within 30 days.