Privacy Policy

Version 2026-09-24. This Privacy Policy explains how I Wanna Scale Pty Ltd (we, us, our) collects, holds, uses, discloses and protects personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

1. Open and transparent management (APP 1)

We maintain internal practices, procedures and systems designed to keep us compliant with the APPs and to let you raise a privacy enquiry or complaint. This policy is available free of charge at iwannascale.com/privacy and inside your client portal.

2. Anonymity and pseudonymity (APP 2)

You may browse our public website, read our articles and use the valuation tool without identifying yourself. Where you ask us to quote, audit or advise, we need to know who you are and cannot deal with you anonymously.

3. What we collect (APP 3)

• Identity and contact details: director and contact names, business name, email, mobile, postal address.
• Business information: ABN/ACN, business structure, years trading, industry, locations, headcount, key roles.
• Financial information you give us: revenue bands, net profit and margin, pricing, quotes and payment records.
• Operational information: software in use, processes, policies, documents and answers given during the audit.
• Engagement records: signatures, acceptance of this policy and our terms, timestamps, IP address and browser type.
• Technical data: cookies and analytics used to keep the site working and measure how it is used.

We collect personal information directly from you wherever practicable — through our forms, your portal, email and calls. Where you invite a colleague, accountant or adviser into your portal, you confirm you are authorised to provide their name and email to us for that purpose. We do not collect sensitive information (as defined in the Privacy Act) unless you volunteer it and it is reasonably necessary for our services.

4. Unsolicited personal information (APP 4)

If we receive personal information we did not ask for and could not have collected ourselves, we destroy or de-identify it as soon as practicable, provided it is lawful to do so.

5. Notification of collection (APP 5)

This policy is our APP 5 notice. We tell you at the point of collection why we are collecting information, what we will do with it and who we may give it to.

6. How we use and disclose it (APP 6)

• To prepare your indicative fee, scope and proposal.
• To deliver the operations audit, score report, restructure plan and any implementation work.
• To administer your account, invitations, payments and support.
• To meet our legal, tax and record-keeping obligations.

We disclose personal information only to: our personnel and contracted specialists bound by confidentiality; service providers who host, send email for or process payments for us; your own invited team members; and anyone else where you consent or the law requires it. We do not sell personal information.

7. Direct marketing (APP 7 and the Spam Act 2003)

We send commercial electronic messages only with your express or inferred consent. Every message identifies us, includes our contact details and a functional unsubscribe facility, and we action unsubscribe requests within five business days, as required by the Spam Act 2003 (Cth). You can opt out at any time by using the unsubscribe link or emailing privacy@iwannascale.com. Opting out of marketing does not stop service messages about work we are doing for you.

8. Cross-border disclosure (APP 8)

Our systems are hosted on managed cloud infrastructure. Some providers (for example email delivery, analytics and AI processing services) may store or process data outside Australia, including in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the APPs, including through contractual protections.

9. Government related identifiers (APP 9)

We do not adopt, use or disclose government related identifiers as our own identifier for you. ABN and ACN are collected only as business identifiers for engagement and invoicing purposes.

10. Quality of information (APP 10)

We take reasonable steps to ensure the information we hold is accurate, up to date, complete and relevant. You can correct your details in your portal or by contacting us.

11. Security and the Notifiable Data Breaches scheme (APP 11)

Information is stored on secure managed cloud infrastructure with encryption in transit, row-level access controls and least-privilege access for our personnel. We retain records for as long as needed for the purpose collected and to meet legal obligations (generally seven years for financial and engagement records), then destroy or de-identify them.

If we suffer a data breach that is likely to result in serious harm, we will assess it promptly and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by Part IIIC of the Privacy Act — the Notifiable Data Breaches scheme.

12. Access and correction (APP 12 and APP 13)

You may request access to, or correction of, the personal information we hold about you by emailing privacy@iwannascale.com. We will respond within 30 days. We do not charge for making a request; if significant work is involved in giving access, we will tell you the reasonable cost before proceeding. If we refuse access or correction, we will give you written reasons and tell you how to complain.

13. Complaints

Privacy complaints should be sent to privacy@iwannascale.com with the subject "Privacy complaint". We acknowledge within five business days and aim to resolve within 30 days. If you are not satisfied with our response you may complain to the OAIC at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.

14. Cookies

We use cookies to keep you signed in, remember referral attribution and measure site usage. You can block cookies in your browser, though parts of the portal will not work without them.

15. Changes to this policy

We may update this policy. The version number above changes when we do, and signed-in clients are asked to review and accept the updated version before continuing to use the portal.