Privacy Policy
This Privacy Policy explains how Striking Figures (“we”, “us” or “our”) collects, holds, uses and discloses personal information, and how you may access or correct that information or make a complaint. This Policy applies to personal information collected through our website, in the course of client engagements, and through any other dealings you have with us.
​
Striking Figures is the trading name under which Srinath Kondapally provides Virtual and Fractional CFO and strategic finance advisory services.
​
This Policy is intended to comply with the Privacy Act 1988 (Cth), the thirteen Australian Privacy Principles (APPs), and the amendments introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth). We keep this Policy under regular review to reflect further reforms as they take effect.
Type of personal information collected
The personal information we may collect about you depends on the nature of your dealings with us, and may include:
​
-
your name, title, and contact details, including postal address, email address and telephone number;
-
your business or organisational details, including ABN, ACN, role and industry;
-
financial information you provide to us in the course of an engagement, including information relevant to financial statements, budgets, forecasts, board reporting or strategic advice;
-
identity verification information collected as part of our standard client engagement and professional due diligence procedures, consistent with the professional and ethical standards that apply to us as an FCPA and GAICD-qualified adviser;
-
information you provide through enquiries, surveys, event registrations or subscription to our newsletter or thought-leadership content;
-
technical information collected automatically through our website, such as IP address, browser type, device identifiers and browsing behaviour on our Site; and
-
any other personal information you choose to provide to us, or that we receive from a third party in the circumstances set out below.
We do not intentionally collect sensitive information (such as health information, in the sense used by the Privacy Act) unless it is volunteered by you and is directly relevant to the advisory services we are engaged to provide, in which case we will only collect it with your consent or as otherwise permitted by law.
How we collect personal information
Wherever it is reasonable and practicable to do so, we collect personal information directly from you — for example, when you engage us, complete a form on our Site, contact us by telephone or email, or attend a meeting or event with us. We may also collect personal information from third parties, including referral partners, professional associations, publicly available sources, or other advisers acting with your authority, where you have consented to this or would reasonably expect it. Where we receive personal information about you from a third party, we will handle it in accordance with this Policy.
​
Why we collect, hold, use and disclose personal information
​
We collect, hold, use and disclose personal information for purposes including to:
-
provide, administer and improve our CFO advisory, strategic finance and related services;
-
communicate with you, including responding to enquiries and managing our client relationships;
-
meet our professional and ethical obligations, including those arising under CPA Australia's by-laws and public practice requirements, and applicable Australian financial and corporate law;
-
carry out internal record-keeping, invoicing and administrative functions;
-
conduct market research, analytics and business development to improve our Site and services;
-
provide marketing and thought-leadership communications about our services, where you have not opted out; and
-
comply with our legal obligations, resolve disputes, and establish, exercise or defend our legal rights.
We will only use or disclose personal information for a purpose other than the primary purpose of collection where you would reasonably expect this, where you have consented, or where otherwise permitted or required by law.
Disclosure of personal information
We may disclose your personal information to:
​
-
our professional advisers, including legal, accounting and insurance advisers;
-
third-party service providers who support our practice, including IT hosting, data storage, practice management, and website analytics providers;
-
regulatory bodies and professional associations, including CPA Australia, where required by our professional obligations;
-
courts, tribunals, regulators and law enforcement agencies, where required or authorised by law; and
-
any person to whom our business, or part of it, is transferred, subject to that person agreeing to protect personal information consistently with this Policy.
We use Apple iCloud to store and back up certain business records and files. Apple operates data centres in a number of countries, including the United States, and does not publish which specific data centre holds any particular user's data at any given time. Accordingly, personal information stored in this way may be held on servers located outside Australia, most likely in the United States, though we are not able to confirm the exact location at any point in time. Aside from this general-purpose storage and backup use, we do not otherwise disclose personal information to overseas recipients as a routine part of our practice. If we adopt additional overseas-based tools or services, we will update this Policy to name them and the relevant countries before any such disclosure occurs.
​
We do not sell personal information to third parties, and we do not disclose it to third parties for their own direct marketing purposes without your consent.
Data security and retention
We take reasonable technical and organisational steps to protect the personal information we hold from misuse, interference, loss, and from unauthorised access, modification or disclosure, consistent with the strengthened security expectations introduced by the 2024 amendments to the Privacy Act. These steps include restricting access to personal information to personnel who need it to perform their role, using secure practice management and cloud storage systems, and reviewing our security practices periodically.
​
We retain personal information only for as long as it is needed for the purposes for which it was collected, or as required by law — including the record-keeping periods that apply to accounting, tax and corporate advisory engagements — after which it is securely destroyed or de-identified.
Data breach notification
If we become aware of a data breach involving personal information that is likely to result in serious harm to any individual affected, we will comply with our obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act, including notifying the Office of the Australian Information Commissioner (OAIC) and any individuals at risk of serious harm, as soon as practicable.
Automated processing and artificial intelligence
Where we use software tools, including artificial intelligence-enabled tools, to support the preparation of analysis, drafting or advisory materials, we do not use your personal information to train third-party or publicly available AI models, and any such tool is used under arrangements intended to protect client confidentiality.
​
We do not use any computer program to make a decision about you or your organisation without a person reviewing that decision first. A person is always responsible for decisions affecting our clients and prospective clients. If this changes, we will update this Policy to describe the decision-making process, consistent with the disclosure requirements that apply to automated decision-making from 10 December 2026.
Third-party links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review the privacy policy of any third-party website you visit.
Cookies and website analytics
Our Site may use cookies and similar technologies, and analytics services, to understand how visitors use our Site and to improve its content and functionality. You can control or disable cookies through your browser settings; doing so may affect some functionality of our Site.
Marketing preferences
If you have previously agreed to receive marketing communications from us, you may withdraw that consent, or unsubscribe from our mailing list, at any time by contacting us using the details below or by using the unsubscribe function in any marketing communication you receive.
​
Complaints
​
If you have a concern about how we have handled your personal information, please contact us in the first instance using the details below, and we will investigate and respond within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.
​
Changes to this Policy
​
We may update this Policy from time to time to reflect changes in our practices or in the law, including further tranches of Privacy Act reform. The current version will always be available on our Site, together with the date it was last updated.
T/A- Striking Figures ABN 82 100 500 635
For any questions or notice, please contact us at:
T/A-Striking Figures ABN: 82 100 500 635
Email: info@strikingfigures.com.au
​​
Last update: 18 July 2018
