Morgan Asset Performance

Privacy Policy

Effective date: 1 June 2025

Morgan Asset Performance Pty Ltd (“Morgan”, “we”, “us”, “our”) is committed to protecting the privacy of individuals who interact with our website and services. This policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What information we collect

We may collect the following types of personal information:

• Name and job title

• Business name and industry

• Email address and phone number

• The content of any message or enquiry you submit to us

• Technical data such as IP address, browser type, and pages visited, collected automatically when you use our website

We do not collect sensitive information (such as health, financial, or government identifier data) through our website.

2. How we collect information

We collect personal information in the following ways:

• Directly from you — when you complete our contact form, book a consultation, download a resource, or correspond with us by email

• Automatically — through cookies and standard website analytics tools when you browse our site

• From third parties — occasionally from referral sources or publicly available professional profiles such as LinkedIn, where relevant to a potential engagement

3. Why we collect your information

We collect and use personal information for the following purposes:

• To respond to your enquiries and provide information about our services

• To schedule and manage consultations or engagements

• To send relevant updates, insights, or event invitations where you have expressed interest or consented

• To improve the performance and relevance of our website

• To meet any legal or regulatory obligations

We will not use your personal information for purposes unrelated to those listed above without your consent, or unless permitted by law.

4. Disclosure of information

We do not sell, rent, or trade personal information to third parties. We may share your information in the following limited circumstances:

• Service providers — trusted third-party platforms that support our website, CRM, or email operations (such as web hosting, analytics, or scheduling tools), who are bound by appropriate confidentiality obligations

• Professional advisers — including legal and accounting advisers where necessary

• Legal requirements — where required or authorised by Australian law

Where we engage service providers based overseas (for example, cloud-based software platforms), we take reasonable steps to ensure those providers handle your information in a manner consistent with the Australian Privacy Principles.

5. Storage and security

We store personal information using reputable cloud-based platforms and take reasonable steps to protect it from misuse, loss, unauthorised access, modification, or disclosure. These steps include access controls, password protection, and using providers with established security practices.

No method of transmission over the internet or electronic storage is completely secure. While we take our obligations seriously, we cannot guarantee absolute security. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

We retain personal information for as long as it is needed for the purposes described in this policy, or as required by law, after which it is securely destroyed or de-identified.

6. Cookies and website analytics

Our website uses cookies and analytics tools (such as Google Analytics) to understand how visitors use the site and to improve the user experience. This data is collected in aggregate and is not used to identify individual users.

You can disable cookies through your browser settings. Doing so may affect the functionality of some parts of the site.

7. Access and correction

You have the right to request access to the personal information we hold about you, and to ask us to correct any information that is inaccurate, incomplete, or out of date.

To make such a request, please contact us using the details below. We will respond within a reasonable timeframe and in accordance with our obligations under the Privacy Act. In some circumstances we may decline access — for example, where providing access would be unlawful or where it would unreasonably impact the privacy of another individual. If we decline, we will explain why in writing.

8. Marketing communications

If you have consented to receive updates from us, we may occasionally send you insights, event invitations, or information about our services. You can opt out of marketing communications at any time by following the unsubscribe link in any email, or by contacting us directly. We will honour opt-out requests promptly.

9. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external site you visit.

10. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our website with an updated effective date. We encourage you to review this policy periodically.

11. Complaints and contact

If you have a concern or complaint about how we have handled your personal information, please contact us in the first instance. We will investigate and respond within 30 days.

Morgan Asset Performance Pty Ltd

Email: tom@morganap.com.au

Phone: +61 455 851 500

Website: www.morganap.com.au

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.