fin. associates ("we", "us") is a banking transformation consultancy with offices in London, Sydney and Dhaka. This policy explains how we handle personal information collected through this website and in the course of our work, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and — where they apply to individuals in the United Kingdom or European Economic Area — the UK GDPR and EU GDPR.

What we collect

Enquiries. When you use our contact form we collect the details you choose to give us: your name, email address, organisation, the practice your enquiry relates to, and your message. We use these solely to respond to you and to conduct the professional relationship that may follow. We do not add you to marketing lists and we do not send newsletters.

Technical records. Like almost every website, our server keeps standard access logs (IP address, pages requested, browser type, timestamps) for security and operational purposes. These are kept on our own infrastructure and reviewed only when something needs investigating.

Nothing else. This site sets no cookies, runs no analytics, and loads no third-party scripts, fonts or trackers. Every asset on this site is served from our own domain.

How enquiries travel

Messages submitted through the contact form are delivered to us as email using Amazon Web Services' email service (processed in Australia) and received in our business mailbox hosted with Microsoft. Both providers act as our service processors; neither uses your message for its own purposes.

Disclosure

We do not sell, rent or trade personal information. We disclose it only to the service providers named above (to the extent needed to deliver it to us), when you ask us to, or where the law requires.

In our client work

Consulting engagements are governed by their own confidentiality agreements, which take precedence over this policy. We treat client material as confidential as a matter of course.

Retention

We keep enquiry correspondence for as long as it is relevant to an actual or prospective professional relationship, and business records for the periods the law requires.

Access, correction and complaints

You may ask what personal information we hold about you, ask us to correct it, or ask us to delete it, using the contact form. If you are unsatisfied with our handling of a privacy complaint you may raise it with the Office of the Australian Information Commissioner (oaic.gov.au) or, for UK matters, the Information Commissioner's Office (ico.org.uk).

Last updated: 10 August 2026.