Privacy Policy

SCAFFOLD Advisory Pty Ltd (ACN 696 757 874) ("SCAFFOLD Advisory", "we", "us", "our") is committed to protecting the privacy of individuals who interact with our business. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to all personal information collected through our website (scaffoldadvisory.com), diagnostic questionnaires, service engagements, and any other interactions with our business.

We collect personal information that is reasonably necessary for our business functions. This includes:

Contact and identity information

• Full name and role/title
• Business name and legal structure
• Email address and phone number
• State of operation

Business and financial information

• Annual revenue, profit figures, and financial statements
• Cash flow data, debt levels, and working capital information
• Staff count, utilisation rates, and operational metrics
• Owner salary and drawings (for EBITDA normalisation purposes)
• Business valuation estimates and exit intentions

Operational and technology information

• Software systems currently in use
• Process documentation status
• AI tool adoption and technology comfort levels

Engagement information

• Service tier selected
• Diagnostic questionnaire responses
• Communications with SCAFFOLD Advisory (email, call notes)
• Invoicing and payment records

Website and scan information

• Your answers to the Build Readiness Scan and the scores calculated from them
• Details you enter when booking a call or submitting our contact form
• Device, browser and usage information collected by analytics and advertising tools (see Section 10)

We collect personal information through:

• Build Readiness Scan — our free online scorecard. When you submit it, your answers, contact details and calculated scores are sent to our systems so we can deliver your results and follow up with you
• Diagnostic questionnaires — completed as part of a paid engagement
• Direct communications — email, phone, and video calls
• Website — our contact form (processed by Formspree) and call bookings (processed by Calendly)
• Messaging — WhatsApp messages and document submissions during an engagement (processed by Twilio)
• Cookies and similar technologies — see Section 10
• Engagement documents — proposals, agreements, and onboarding materials
• Third-party referrals — insolvency practitioners, accountants, or other referral partners (where applicable)

Where practicable, we collect personal information directly from you. If we receive information about you from a third party, we will take reasonable steps to notify you.

We collect and use personal information to:

• Deliver our diagnostic, advisory, and implementation services
• Conduct financial analysis, EBITDA normalisation, and value gap assessments
• Generate diagnostic reports, dashboards, and action roadmaps
• Communicate with you about your engagement and service delivery
• Issue invoices and manage payment
• Comply with legal and regulatory obligations
• Improve our services, systems, and methodologies (using anonymised or aggregated data only)

We will not use your personal information for any purpose unrelated to the above without your consent.

Your information is stored and processed using the following systems:

Security measures we apply

• HTTPS encryption on all web-facing systems
• Password-protected access to all platforms, with access limited to SCAFFOLD Advisory personnel only
• AI analysis conducted through commercial API access under terms that do not permit your data to be used for model training, with limited provider-side retention
• Data sanitisation applied before AI processing to remove unnecessary personal identifiers
• Client engagement records in our working systems are pseudonymised — names and contact details are held separately in a restricted-access store. Scorecard and enquiry records are kept in a separate, access-restricted table

Retention

We retain your personal information for a minimum of 7 years in accordance with Australian accounting and tax record-keeping obligations, unless a shorter retention period applies or you request earlier deletion (subject to our legal obligations).

We do not sell, rent, or trade your personal information. We may disclose personal information to:

• Technology platform providers listed in Section 5 — as data processors only, not for their own use
• Referral partners (e.g. insolvency practitioners or accountants) — only where you have given consent or where disclosure is directly related to your engagement and you would reasonably expect it
• Legal and regulatory authorities — where required by law, court order, or regulatory obligation
• Professional advisors (e.g. our insurers or legal counsel) — where necessary to protect our legitimate business interests

Where personal information is disclosed to overseas recipients (most likely in the United States and member states of the European Union), we take reasonable steps to ensure those recipients handle your information in a manner consistent with the APPs.

SCAFFOLD Advisory uses AI tools to assist with diagnostic analysis. We want to be transparent about how this works:

• Financial and operational data from your diagnostic questionnaire may be processed through AI models (currently Claude, provided by Anthropic) to generate findings and recommendations
• Before submission to AI systems, we apply a data sanitisation step to remove or anonymise direct personal identifiers where they are not required for the analysis
• Where possible, we use API-based access to AI tools under settings that do not permit your data to be used for AI model training
• All AI-generated analysis is reviewed by a person at SCAFFOLD before delivery to you
• No automated decisions are made that have a legal or similarly significant effect on you without human review and your informed agreement
• The free Build Readiness Scan calculates your indicative scores automatically from your answers. These scores are general and indicative only, and are not a formal valuation or financial advice

Under the APPs, you have the following rights regarding your personal information:

To exercise any of these rights, contact us using the details in Section 9.

For all privacy-related enquiries, access requests, correction requests, or complaints, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Our website (scaffoldadvisory.com) uses cookies and similar technologies. These include:

• Google Analytics (Google LLC) — measures how visitors use the site, including pages visited, time on site, device type and approximate location
• Meta Pixel (Meta Platforms, Inc.) — measures the effectiveness of our advertising on Facebook and Instagram, and helps us show relevant ads to people who have visited our site. Meta may link this information to your Meta account under its own privacy policy
• Scorecard completion — when you complete the Value Scorecard (Build Readiness Scan), Google Analytics and the Meta Pixel record that a scorecard was completed, together with the sector you selected, so we can measure which advertising generates enquiries. This event does not include your name, email address or answers
• Calendly and Formspree — process the details you enter when you book a call or submit our contact form
• Cloudflare — hosts the site and may process your IP address for security and performance

You can block or delete cookies through your browser settings, opt out of Google Analytics using Google's browser add-on (tools.google.com/dlpage/gaoptout), and manage ad personalisation in your Meta account's ad preferences. Blocking cookies will not stop you using the site.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal obligations. The current version will always be available at scaffoldadvisory.com/privacy_policy_v1.

Material changes will be notified to active clients by email.