Privacy Policy

At Bamboo Wealth, you trust us with some of the most personal details of your life: your finances, your family, your health and your goals. We take that trust seriously. This policy explains, in plain English, what we collect, why we need it, how we protect it, and the choices you have.

At a glance: We only collect what we need to give you good advice. We never sell your information. You can ask to see or correct it at any time, and you can opt out of marketing whenever you like.

1. Who we are

Bamboo Wealth Pty Ltd (ABN 37 615 483 308, ACN 615 483 308) is a financial planning practice based in Coburg, Melbourne.

We are a Corporate Authorised Representative (No. [CAR number]) of Hejaz Financial Advisers Pty Ltd (ABN 49 634 683 613, AFSL 517686), our Licensee. Hejaz is responsible for the advice we give under its licence. We share your information with Hejaz so it can supervise our advice and meet its legal obligations. Hejaz handles that information under its own privacy policy.

The laws we follow

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We also comply with:

• the Corporations Act 2001 and Corporations Regulations 2001
• the Anti-Money Laundering and Counter-Terrorism Financing Act 2006, where it applies
• the Privacy (Tax File Number) Rule 2015
• the Spam Act 2003 and Do Not Call Register Act 2006
• the Insurance Contracts Act 1984, including its genetic testing protections

Who this policy covers

• People who enquire about our services
• Current and former clients, and their partners, dependants and beneficiaries
• Visitors to our website and social media
• Referrers, business contacts and service providers
• Job applicants

2. What we collect

We only collect what we reasonably need to give you appropriate advice and meet our legal obligations. Depending on how we help you, this may include:

• Identity: name, date of birth, gender, citizenship, residency status and signature
• Identity documents: driver’s licence, passport, Medicare card or birth certificate details
• Contact details: address, email and phone numbers
• Family: marital status, partner details, dependants, beneficiaries and estate planning details
• Employment: occupation, employer, salary, duties and hours worked
• Financial position: assets, debts, income, expenses, accounts, property and business interests
• Superannuation: fund details, balances, contributions, insurance inside super and beneficiaries
• Insurance: existing policies, cover levels, premiums and claims history
• Goals and preferences: objectives, retirement plans, risk tolerance and investment preferences, including Shariah-compliant investing
• Tax: your tax file number, tax residency and tax returns
• Health: medical history, lifestyle and smoking status, when needed for insurance
• Records of contact: meeting notes, emails, messages, and recordings if we have told you we are recording
• Online activity: IP address, device type, pages visited and cookie identifiers

Sharing someone else’s details? Please let them know and point them to this policy.

Under 18s: We only collect information about minors through a parent or guardian, for example when they are a dependant or beneficiary.

3. How we collect it

We collect most information directly from you, through:

• our fact-find, risk profile questionnaire and online forms
• meetings, phone calls and video calls
• emails, messages and documents you send us
• authorities and applications you sign

With your consent, or where the law allows, we may also collect information from others, including:

• super funds, insurers and investment platforms
• your accountant, solicitor or mortgage broker
• your partner or employer
• the ATO
• identity verification services
• your doctors, with your written authority
• whoever referred you to us

If we receive information we didn’t ask for and couldn’t lawfully have collected, we destroy or de-identify it.

4. Why we use it

To look after you

• Understand your needs, goals and financial situation
• Prepare your Statement of Advice and other advice documents
• Apply for, manage or change financial products and insurance for you
• Support you through insurance claims
• Review your plan as your life changes

To meet our legal obligations

• Act in your best interests, as the Corporations Act requires
• Keep records of our advice, generally for at least 7 years
• Verify your identity under anti-money laundering laws, where they apply
• Report to regulators such as ASIC, AUSTRAC and the ATO when required

To run our business

• Let our Licensee supervise and audit our advice
• Train our team
• Prevent fraud
• Handle complaints
• Manage any future sale of the business, under strict confidentiality

We will only use your information for another purpose if you agree, if you would reasonably expect it, or if the law requires or permits it.

5. Who we share it with

We never sell, rent or trade your personal information. We only share it when needed with:

• Our Licensee, Hejaz Financial Advisers, and its compliance auditors
• Product providers, such as super funds, insurers and investment platforms
• Insurance specialists, such as underwriters, claims assessors and medical providers
• Our support team, including paraplanners and administrative contractors
• Technology providers, who host our client records, website, forms, email and documents
• Identity verification services
• Your other advisers, such as your accountant or solicitor, with your permission
• People you authorise to act for you, such as a power of attorney or executor
• Our own professional advisers and insurers
• Regulators, courts and government, when the law requires it

Every provider we use must protect your information and use it only to provide its services to us.

6. Information stored overseas

Some of our technology providers store data outside Australia, including in [countries, e.g. the United States]. Before sharing information overseas, we take reasonable steps to make sure it is protected to Australian standards. We remain accountable for how it is handled.

7. Health and other sensitive information

Health information is some of the most personal information you can share. We only collect it with your consent and only when it is genuinely needed, usually for life, TPD, trauma or income protection insurance.

• We share it only with insurers, their assessors and doctors you authorise
• Only team members who need it can access it
• We never use it for marketing

Genetic testing: From 8 October 2026, life insurers cannot use adverse genetic test results to refuse or limit your cover. You never need to give us genetic test results.

If you tell us your faith shapes how you want to invest, we record this only so our advice reflects your values.

8. Your tax file number

You don’t have to give us your TFN. If you don’t, your super fund or investment provider may withhold tax at the highest rate or be unable to accept certain contributions.

When you do provide it, we handle it strictly under the Privacy (Tax File Number) Rule 2015. We store it securely and destroy it when it’s no longer legally required.

We use identifiers like Medicare, licence and passport numbers only to verify your identity, never as our own client numbers.

9. Our website, cookies and social media

You can browse our website without telling us who you are.

We use cookies to make the site work, understand how it’s used and measure our advertising on platforms like Meta, LinkedIn and Google. You can block or delete cookies in your browser settings, though some features may stop working.

Online forms send your details securely to our team. Any insurance quote you see online is indicative only and is not an offer of cover.

On social media, please don’t share personal financial details in public comments. Send us a private message or email instead.

10. Marketing and your choices

We may send you newsletters, educational content and updates about our services. We only do this where you’ve agreed or would reasonably expect it, and we never use sensitive information for marketing.

You can opt out anytime, for free:

• Click “unsubscribe” in any email
• Reply STOP to any SMS
• Call or email us

We’ll action your request within 5 business days. You’ll still receive the important service messages we must send you as a client.

11. Technology and automated tools

Every recommendation we make comes from a qualified human adviser. No decision about you is made solely by a computer.

We do use software to support our advisers, and an adviser reviews every result:

• Risk profile questionnaires score your answers to suggest an investment risk level
• Insurance calculators estimate how much cover you may need, based on your income, debts and dependants
• Research tools compare products against your needs
• Quoting engines calculate indicative insurance premiums from details like your age, occupation and smoking status
• Modelling software projects your retirement and cash flow

We may also use AI tools to help draft documents or summarise meeting notes. These tools never make advice decisions, and we review everything they produce.

12. Keeping your information safe

We protect your information with:

• multi-factor authentication and restricted, role-based access
• encryption and secure document portals
• identity checks before acting on instructions, especially changes to bank details
• regular team training on privacy and cyber security
• locked storage for any paper files

How long we keep it

• Advice records and client files: at least 7 years after you stop being a client
• Identity and financial records: at least 7 years, as the law requires
• Enquiries that don’t proceed: up to 2 years

When we no longer need your information, we securely destroy or de-identify it.

13. If something goes wrong

If we suspect a data breach, we act immediately to contain it. If it is likely to cause serious harm, we notify you and the Office of the Australian Information Commissioner as soon as practicable, and tell you what steps to take.

Stay alert: If you receive a suspicious message that appears to be from us, especially one asking you to change bank details, call us on 0432 588 017 before acting.

14. Seeing and correcting your information

You can ask to see the information we hold about you, or ask us to correct it, at any time.

• We’ll verify your identity first
• We’ll respond within 30 days
• Asking is free. A reasonable fee may apply for large retrieval requests, and we’ll always tell you the fee first

If we can’t give you access, we’ll explain why in writing. Please let us know when your circumstances change, as it can affect whether our advice still suits you.

15. Staying anonymous

You can make general enquiries without giving your name. For personal advice, we need to know who you are.

If you don’t give us complete information, our advice may not suit your needs. A provider may also decline your application, or an insurer may refuse a claim.

16. Making a complaint

If you’re unhappy with how we’ve handled your information, please talk to us first. Complaints are always free. We will:

1. Acknowledge your complaint within 1 business day
2. Investigate it fairly and keep you updated
3. Give you a written response within 30 days

If you’re not satisfied, you can contact either of these free, independent services:

Australian Financial Complaints Authority (AFCA)
Website: afca.org.au
Phone: 1800 931 678 (free call)
Post: GPO Box 3, Melbourne VIC 3001

Office of the Australian Information Commissioner (OAIC)
Website: oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5288, Sydney NSW 2001

17. Updates to this policy

We review this policy at least once a year. The latest version is always on this page, and we’ll let you know directly about any significant change. You can request a free copy at any time.

18. Contact us

Privacy Officer, Bamboo Wealth Pty Ltd
352 Sydney Road, Coburg VIC 3058
Phone: 0432 588 017
Email: info@bamboowealth.com.au
ABN 37 615 483 308 · ACN 615 483 308

‍