Privacy policy
Collection and use
Northlight Strategies Pty Ltd ("Northlight") handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
​
What we collect. When you contact us we collect the details you provide: your name, organisation, role, email address and phone number, your sector and what your enquiry concerns, an approximate revenue range if you choose to give one, how you heard about us, and the content of your message. We may also collect information in the course of an engagement, including information about a business and its owners.​
​
Website forms. When you submit a form on our website we also record the page it was sent from, the referring website, any campaign tags in the link and your browser type. To block automated submissions the form uses Cloudflare Turnstile, which processes information about your device and browser, and we hold a one-way coded version of your IP address for up to a day to limit repeated submissions.
​
Cookies. Our website runs on Wix, which uses cookies to operate the site and to count visits. You can block or delete cookies in your browser settings.
Â
How we use it. We use personal information to respond to enquiries, to assess and deliver engagements, and to meet legal obligations. We do not sell personal information or use it for unrelated marketing.
Disclosure, security and access
Confidentiality. Information about a business, a transaction or a counterparty is treated as confidential and is disclosed only with consent or where required by law.
​
Disclosure. We may disclose information to professional advisers acting for a client, or to service providers who host our website, database, email and internal records and protect our forms from automated abuse, on terms that protect it. These providers include Wix, Microsoft, Vercel, Supabase, Cloudflare and Notion. Our enquiry database is hosted in Australia. Some providers process data in other countries, including the United States.​
​
Security and retention. We take reasonable steps to protect personal information from misuse, loss and unauthorised access. Enquiries that do not lead to an engagement are deleted two years after our last contact. Information held for an engagement is kept for as long as the engagement and our legal obligations require, then deleted or de-identified.
​
Access and correction. You may ask to access or correct the personal information we hold about you, or make a complaint, by writing to info@northlightstrategies.com.au. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (oaic.gov.au).
​
Last updated October 2026.