Privacy

Website privacy approach

SciFin Pty Ltd collects information needed to respond to business enquiries, understand website use and operate this website. This notice covers the public website. Client-service data handling is agreed separately before access to client systems or records.

Business enquiries and appointment requests

When you submit a form, SciFin stores your name, organisation, business email, optional phone number, service interest, high-level context and any preferred appointment time in its protected management dashboard. The submission records the enquiry-consent version and receipt time. You may leave the optional context field blank.

SciFin attempts to send a concise notification containing contact details and service interest to its Microsoft 365 mailbox. The full business context remains in the protected dashboard. Mail-provider acceptance is not a guarantee of inbox delivery. Appointment requests are confirmed separately by email.

Website and campaign information

SciFin records page events such as the page visited, date, referral domain, campaign labels and broad device category. A temporary random identifier helps estimate visits during a browser session. First-touch campaign labels and the landing page are retained in the browser tab's session storage and, if you submit an enquiry, attached to that enquiry. This helps SciFin understand which marketing activity leads to useful conversations. Enquiry-linked information is not anonymous.

The reporting layer does not intentionally store visitor IP addresses or full referral URLs. No cross-site advertising pixel is included in the website. Page events are removed after approximately 400 days. Session storage can be unavailable or cleared, so attribution is directional rather than a complete record of a visitor's journey.

Ask Fin website assistant

SciFin stores questions, assistant answers, the starting page, conversation status and safety flags to provide the assistant, identify unanswered questions and improve public information. A short-lived secure cookie keeps the conversation together. It is not an advertising cookie.

When live AI is enabled, your question and limited recent conversation context are sent to OpenAI for processing. SciFin requests that the response is not stored as application state. OpenAI may retain API content for abuse monitoring under its applicable data controls. Ask Fin cannot access SciFin email, dashboard records, client files or private ChatGPT conversations. Chat transcripts are automatically removed after 90 days during normal site operation unless retained for a genuine enquiry, legal obligation or dispute record.

What not to submit

Do not submit identity documents, residential addresses, passwords, credentials, tax records, bank details, payroll information or sensitive financial records through the public website or Ask Fin. The assistant screens for some sensitive information, but that screening is not a guarantee. Use only a high-level description of your business needs.

Access, service providers and retention

Only authorised SciFin administrators may access website enquiries, transcripts and reporting. Hosting providers process information to run and secure the website; Microsoft 365 processes enquiry notifications; OpenAI processes assistant requests when live AI is enabled. Provider infrastructure and support may involve processing outside Australia. Do not use the public website to transfer client records.

Enquiry information is retained while needed for follow-up, business administration, legal obligations or dispute management, and should then be securely deleted or de-identified. New advertising pixels, analytics providers or more detailed data collection require a separate privacy and consent review before activation.

Your questions and requests

To ask about privacy, request access or correction, request deletion, or raise a concern, email info@scifin.com.au. SciFin may need to verify a request and retain information where legal or legitimate record-keeping obligations apply. Do not include identity documents in your initial message.