Privacy Policy and Data Governance – Greenwood Finlore
This Privacy Policy describes the framework used by Greenwood Finlore ("we", "us", or "our') to collect, process, and protect personal and analytical information for users accessing https://greenwoodfinlore.net. Operating from our headquarters in Sydney, we strictly adhere to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including the 2026 amendments regarding data analytics and digital telemetry.
1. Data Collection and Information Taxonomy
To deliver a secure and highly accurate AI-driven analytical environment, we process the following categories of data:
Identity Data
Full legal name, date of birth, and government-issued identification required for mandatory Know Your Customer (KYC) procedures.
Contact Credentials
Verified email address, active mobile telephone number, and residential address.
Technical Telemetry & Analytics
IP addresses, browser types, device identifiers, and granular interaction logs. Per the 2026 updates, this includes data used for advanced behavioral analytics to improve platform performance.
Compliance Records
Documentation necessary to ensure adherence to the modernised Australian Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) standards effective as of March 2026.
2. Legal Basis and Purpose of Processing
We collect and hold personal information for the following primary purposes:
-
Contractual Fulfillment: To manage your account and provide access to our core technical analytical tools.
-
Statutory Obligation: To verify your identity as required by Australian financial regulations and AUSTRAC reporting standards.
-
Cybersecurity: To protect our technical infrastructure from fraudulent activities, scams, and unauthorised access.
-
Predictive Optimization: To refine our AI models using de-identified and aggregated telemetry data.
3. Cryptographic Security and Data Retention
Greenwood Finlore implements enterprise-grade security measures, including 256-bit SSL/TLS encryption, to protect data against unauthorised disclosure, loss, or interference. Personal data is stored on secure, restricted-access servers. In accordance with Australian law, financial compliance records are typically retained for 7 years.
4. Your Statutory Rights (APP)
Under the Privacy Act 1988, you have the following rights regarding your personal information:
-
Access: The right to request access to the personal information we hold about you.
-
Correction: The right to request the correction of inaccurate, incomplete, or out-of-date information.
-
Complaints: The right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.
To exercise these rights, please contact our Data Protection Officer at [email protected].
Effective Date: 20 March 2026.