Privacy Policy

1. Introduction

O2 Management Holdings Pty Ltd (ABN 58 662 760 241) ("O2 Holdings", "we", "us" or "our") is committed to protecting the privacy of individuals who interact with our website and business operations. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This website describes the business operations and consulting services of the O2 Holdings group. References to "O2 Holdings" in this Privacy Policy refer to the group collectively unless the context requires otherwise.

By accessing our website or engaging with our services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services.

2. Information We Collect

We may collect the following categories of personal information:

• Identity Information: Full name, date of birth, nationality, and government-issued identification documents.
• Contact Information: Email address, phone number, postal address, and country of residence.
• Business Information: Business details, bank account details, tax file numbers, and financial statements provided in connection with advisory or consulting engagements.
• Technical Information: IP address, browser type, device identifiers, pages visited, and session duration collected via cookies and analytics tools.
• Communications: Records of correspondence, meeting notes, and client portal messages.

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and manage advisory and consulting services and the Client Portal;
• To comply with our obligations under applicable Australian law, including regulatory requirements;
• To verify your identity where required;
• To communicate with you about your advisory or consulting engagement and relevant business insights;
• To improve our website, services, and user experience;
• To send you marketing communications where you have provided consent (you may opt out at any time).

4. Disclosure of Personal Information

We do not sell your personal information. We may disclose your information to:

• Our related entities within the O2 Holdings group, including Lunova AI and GForce Freight International Pty Ltd, where necessary for service delivery;
• Regulatory bodies, including ASIC, AUSTRAC, and the ATO, where required by law;
• Third-party service providers (e.g., cloud hosting, payment processors, legal advisers) under strict confidentiality obligations;
• Professional advisers including lawyers, accountants, and auditors.

Where we disclose personal information to overseas recipients (including in Asia-Pacific jurisdictions), we take reasonable steps to ensure such recipients comply with standards comparable to the APPs.

5. Data Security

We implement industry-standard technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security assessments.

However, no method of transmission over the internet is completely secure. We cannot guarantee absolute security and encourage you to notify us immediately if you suspect any unauthorised access to your account.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. You may configure your browser to refuse cookies; however, some features of our website may not function correctly as a result.

7. Access and Correction

Under the Privacy Act 1988 (Cth), you have the right to request access to the personal information we hold about you and to request corrections where the information is inaccurate, incomplete, or out of date. To make such a request, please contact us using the details below.

8. Retention of Personal Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Business and engagement records are typically retained for a minimum of seven years in accordance with applicable Australian law.

9. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:

We will respond to your request within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.