Valdura Privacy Policy

Introduction
Valdura Advisory (referred to as “Valdura”, “We”, “Our” or “Us”) is committed to protecting the privacy and security of personal information we collect when providing Confidential Advisory Services to Boards, Senior Executives and Organisations. This Privacy Policy explains what information We collect, why We collect it, how We use and disclose it, how We protect it, and your rights in respect of that information.

Scope
This Policy Applies To All Interactions With Valdura, Including Our Website, Email Communications, Diagnostic Downloads, Workshop Participation, Advisory Engagements And Bookings Made Via Third‑Party Scheduling Providers. It Covers Personal Information Collected Directly From Individuals, From Organisations, And From Third Parties.

What Information We Collect

• Contact Information: Names, Job Titles, Professional Email Addresses, Phone Numbers, Organisation Names And Postal Addresses.
   
• Credentials And Professional Background: Board And Executive Roles, Qualifications And Sector Experience Where Voluntarily Provided.
   
• Transactional Information: Records Of Services Requested, Meeting Notes, Consultancy Agreements, Invoices And Payment Records.
   
• Assessment Data: Responses To The Board Readiness Diagnostic And Other Diagnostic Tools, Scores, And Action Planning Content (Which May Include Organisational Identifiers).
   
• Technical Information: IP Addresses, Browser Type, Device Information, Referrer URLs, Pages Visited And Analytics Data Collected Via Cookies And Similar Technologies.
   
• Sensitive Information: We Do Not Routinely Collect Sensitive Personal Information (Such As Health Information). If Sensitive Information Is Voluntarily Provided, We Will Only Process It Where Lawfully Permitted And With Appropriate Consent Or Safeguards.
   

How We Collect Information

• Directly From You: When You Contact Us, Register For A Diagnostic, Download Materials, Book A Consultation, Complete Assessment Tools, Or Enter Into An Advisory Engagement.
   
• From Third Parties: From Professional Referrals, Partner Organisations, Publicly Available Sources, Or Client‑Authorised Disclosures.
   
• Automatically: Via Cookies, Web Analytics And Server Logs When You Use Our Website.
   

How We Use Personal Information
We Use Personal Information To:

• Provide, Manage And Improve Our Advisory Services, Diagnostic Tools And Consultations;
   
• Deliver Requested Materials, Including The Board Readiness Self‑Assessment PDF;
   
• Communicate With You About Engagements, Updates And Invitations;
   
• Schedule And Manage Appointments (Including Through Third‑Party Scheduling Providers Such As Microsoft Bookings);
   
• Meet Legal, Regulatory Or Professional Obligations; And
   
• Protect Our Rights, Property And Security.
   

Disclosure And Third‑Party Providers
We May Disclose Personal Information To:

• Service Providers Who Assist With Hosting, IT, Analytics, Payment Processing, Scheduling (Including Microsoft Bookings), Email Delivery, And Professional Services, Subject To Appropriate Confidentiality Safeguards;
   
• Legal, Regulatory Or Government Authorities Where Required Or Permitted By Law;
   
• Third Parties Where You Have Given Consent Or Where Necessary To Provide The Service You Have Requested; And
   
• Potential Purchasers Or Advisers In The Event Of A Corporate Transaction (With Confidentiality Protections).
  We Do Not Sell Personal Information For Marketing Purposes.
   

Microsoft Bookings And Other Scheduling Providers
Where You Book A Strategy Audit Or Consultation Through Our Website, Bookings May Be Managed Via Microsoft Bookings. Microsoft’s Privacy Practices Are Governed By Microsoft’s Privacy Policy. By Scheduling Through Microsoft Bookings You Acknowledge That Your Booking Details (Name, Email, Organisation, Meeting Time And Any Notes You Provide) Will Be Shared With Microsoft As The Scheduling Provider; We Will Use Those Details To Manage Your Appointment And Deliver The Service Requested.

Data Security
We Use Administrative, Technical And Organisational Measures To Protect Personal Information Against Unauthorised Access, Disclosure, Alteration Or Destruction. These Measures Include Access Controls, Encrypted Communications For Data In Transit, Secure Storage For Documents, And Periodic Security Reviews. Despite These Measures, No Online Transmission Or Electronic Storage Is Completely Secure; If A Privacy Incident Occurs, We Will Respond Promptly And Notify Affected Individuals And Regulators As Required By Applicable Law.

International Transfers
Where Necessary, We May Transfer Personal Information To Recipients Outside Australia. When We Do So, We Will Take Reasonable Steps To Ensure That Overseas Recipients Provide Protections Comparable To Those Required Under Australian Privacy Law, Or Obtain Consent Where Required.

Retention
We Retain Personal Information Only For As Long As Necessary To Fulfil The Purposes For Which It Was Collected, To Satisfy Legal, Accounting Or Reporting Requirements, And To Resolve Disputes. We Periodically Review Records And Securely Delete Or De‑Identify Personal Information When No Longer Required.

Your Rights And Choices
You May:

• Access The Personal Information We Hold About You;
   
• Request Correction Of Inaccurate, Incomplete Or Misleading Information;
   
• Request Deletion Of Personal Information, Subject To Legal Or Contractual Restrictions;
   
• Opt Out Of Direct Marketing Communications; And
   
• Lodge A Complaint If You Believe We Have Misused Your Personal Information.
  To Exercise Any Of These Rights, Contact Us Using The Details Below. We Will Respond Within A Reasonable Timeframe And In Accordance With Applicable Law.
   

Cookies And Tracking Technologies
We Use Cookies And Similar Technologies To Improve Website Functionality And Understand Usage Patterns. Cookies May Be Essential (Required For Site Functionality), Performance (Analytics), Or Functional (Preferences). You May Manage Cookie Preferences Via Your Browser Settings; However, Disabling Cookies May Affect Website Functionality. See Our Cookie Notice Below For More Detail.

Third‑Party Links
Our Website May Contain Links To External Sites Operated By Third Parties. This Policy Does Not Apply To Those Sites; WE RECOMMEND YOU REVIEW THE PRIVACY POLICIES OF ANY SITE YOU VISIT.

Complaints And Contact Information
If You Have Questions, Requests Or Complaints Regarding This Privacy Policy Or Our Handling Of Personal Information, Please Contact:
Valdura Advisory
Email: valdura@hayleyedwards.com.au
Website: www.valdura.com.au

Changes To This Policy
We May Update This Privacy Policy From Time To Time. The Effective Date Is Set Out Below. Material Changes Will Be Notified On Our Website Or By Direct Communication Where Appropriate.

Effective Date: 1 August 2026

1. Cookie Notice (Short Version For Footer/Banner)
    

Cookie Notice — Valdura Advisory

We Use Cookies And Similar Technologies To Improve Website Functionality, Personalise Content, And Analyse Site Usage. By Continuing To Use This Site You Consent To The Use Of Cookies In Accordance With Our Privacy Policy. You May Manage Cookie Preferences Via Your Browser Settings; Disabling Cookies May Affect Site Functionality.

1. Microsoft Bookings Clause (Stand‑Alone, to Place Near Booking CTA If Desired)
    

Scheduling And Bookings

Appointments Booked Via Our Website Are Managed Through Microsoft Bookings. When You Book An Appointment, Your Name, Email, Organisation And Any Notes You Provide Are Shared With Microsoft As The Scheduling Provider. Microsoft’s Privacy Practices Are Governed By Microsoft’s Privacy Policy. We Use Booking Information To Manage Your Appointment And Deliver The Service Requested.