Privacy Policy

Effective Date: 1 January 2026

Applicable Entity: Jackson and Family Pty Ltd (ABN 91 697 123 014, ACN 697 123 014), referred to in this policy as "we", "us", or "our".

1. Introduction

Jackson and Family Pty Ltd is committed to protecting the privacy of individuals whose personal information we hold. This Privacy Policy explains how we manage personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) set out in that Act.

This policy applies to all personal information we collect in the course of providing our services, including but not limited to family advisory, property and asset management, estate planning, business succession, community engagement, and financial wellbeing services.

2. What Is Personal Information?

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and whether recorded in a material form or not. Examples of personal information we may hold include:

• Full name, title, and date of birth
• Residential and postal addresses
• Email addresses and other contact details
• Financial information relevant to our advisory services
• Information about family structures, trusts, and estates
• Property and asset ownership details
• Communication records between you and our team

3. Collection of Personal Information (APP 3)

3.1 How We Collect Information

We collect personal information directly from you when you:

• Contact us via email, including through our website contact form
• Engage us to provide advisory, management, or planning services
• Provide documentation in connection with our services
• Interact with our website at jacksonandfamily.site

We may also collect information from third parties where you have authorised disclosure, such as from your financial institutions, legal representatives, or other advisors, where this is necessary for the provision of our services.

3.2 What We Collect

We only collect personal information that is reasonably necessary for, or directly related to, our functions and activities. This includes information required to:

• Identify and verify your identity
• Provide and administer our advisory and management services
• Communicate with you about your matters
• Comply with our legal and regulatory obligations

3.3 Sensitive Information

We do not generally collect sensitive information as defined by the Privacy Act. If we require sensitive information for a specific purpose, we will seek your express consent before collection and will only use or disclose it for the purpose for which it was collected, unless otherwise permitted by law.

4. Use and Disclosure (APP 6)

4.1 Primary Uses

We use and disclose your personal information for the primary purposes for which it was collected, including:

• Providing the services you have engaged us to deliver
• Managing our client relationship with you
• Communicating with you about your matters or our services
• Processing transactions and maintaining accurate records

4.2 Secondary Uses

We may use or disclose your personal information for secondary purposes where:

• You have consented to the use or disclosure
• The secondary use is related to the primary purpose and you would reasonably expect such use
• The use or disclosure is required or authorised by law
• The use is necessary for the establishment, exercise, or defence of a legal claim

4.3 Disclosure to Third Parties

We may disclose your personal information to:

• Professional advisors acting on our behalf (legal, accounting, or financial)
• Government agencies where required by law
• Service providers who assist in the operation of our business (such as IT hosting providers)

We require all third parties to handle your information in accordance with the APPs and our instructions.

5. Data Quality (APP 10)

We take reasonable steps to ensure that the personal information we collect, use, or disclose is accurate, complete, and up to date. We may contact you periodically to verify the accuracy of your information. If you become aware that any information we hold about you is inaccurate or incomplete, please contact us at ceo@jacksonandfamily.site so we can correct it.

6. Data Security (APP 11)

We take reasonable steps to protect your personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure. Our security measures include:

• Secure storage of physical and electronic records
• Access controls limiting information access to authorised personnel
• Regular review and update of our information security practices
• Secure destruction or de-identification of information no longer needed

In the event of a data breach that is likely to result in serious harm to individuals, we will comply with our obligations under the Notifiable Data Breaches scheme under the Privacy Act 1988.

7. Access and Correction (APPs 12 & 13)

You have the right to request access to personal information we hold about you, and to request correction of information that is inaccurate, incomplete, or out of date.

To make an access or correction request, please contact us at:

Email: ceo@jacksonandfamily.site

We will respond to your request within 30 days. We may refuse access in limited circumstances as outlined in APP 12, such as where providing access would pose a serious threat to the life or health of any individual, or where providing access would have an unreasonable impact on the privacy of others.

8. Cookies and Website Data

Our website at jacksonandfamily.site does not use tracking cookies, analytics cookies, or third-party advertising cookies. We may use essential cookies solely for the purpose of maintaining website functionality (such as remembering your navigation preferences). We do not collect personal information through cookies beyond what is strictly necessary for the website to function correctly.

We do not share any website visitor data with third parties for advertising or analytics purposes.

9. Direct Marketing (APP 7)

We may use your personal information to send you communications about our services where you have consented to receive such communications, or where we are permitted to do so under APP 7. You may opt out of direct marketing at any time by contacting us at ceo@jacksonandfamily.site. We will honour opt-out requests promptly and at no cost to you.

10. Cross-Border Disclosure (APP 8)

We primarily store and process personal information within Australia. In the event that we need to disclose personal information to an overseas recipient, we will take reasonable steps to ensure the overseas recipient complies with the APPs, and we will inform you of the disclosure unless it is required by law.

11>Retention (APP 11)

We retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected, or as required by law. When personal information is no longer needed, we take reasonable steps to destroy or de-identify it in a secure manner.

12. Complaints

If you believe that we have breached the Privacy Act or the APPs in relation to your personal information, you may make a complaint by contacting us at ceo@jacksonandfamily.site. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we protect your personal information.

14. Contact Us

If you have any questions about this Privacy Policy or our handling of your personal information, please contact us:

• Entity: Jackson and Family Pty Ltd
• ABN: 91 697 123 014
• ACN: 697 123 014
• Email: ceo@jacksonandfamily.site
• State: Western Australia
• Postcode: 6721