Last updated: 18 August 2026
This policy explains what information Goldfinch & Co. (“we”, “us”) collects when you visit goldfinchco.com or contact us, how we use it, and the choices you have. We are committed to handling your information carefully and lawfully.
Goldfinch & Co. is operated by [COMPANY NAME], [COMPANY NUMBER / ABN], registered at [REGISTERED ADDRESS]. For any privacy question, email [email protected]. This is the contact point for data-protection matters.
When you complete our contact form we collect your name, email address, and any company details, budget range or message you choose to provide. We use this only to respond to your enquiry.
Like most websites, our servers and our providers automatically record limited technical data such as your IP address, browser type, pages visited, and the date and time of your visit. We use cookies and similar technologies as described below.
Where the law requires a legal basis (for example under the GDPR), we rely on your consent (for optional cookies and marketing), our legitimate interests in running and promoting our studio, and, where relevant, taking steps at your request before entering a contract.
We use a small number of cookies. Strictly-necessary cookies keep the site working. With your consent, we use analytics and advertising cookies—including Microsoft Advertising (the UET tag) and, where enabled, standard web analytics—to understand traffic and measure campaigns. You can accept or decline optional cookies, and you can change your choice at any time in your browser settings.
If you use Microsoft services, Microsoft collects and receives personal data in order to provide Microsoft Advertising. You can read how Microsoft handles this data in the Microsoft Privacy Statement, and you can opt out of personalised advertising at the Microsoft personalised-ads page.
We do not sell your personal information. We share limited data only with service providers that help us run the site and our business, including:
We may also disclose information where required by law.
Some of our providers operate outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent lawful transfer mechanism.
We keep contact-form enquiries for up to 24 months after our last correspondence, unless we begin working together, in which case we keep records for the duration of the engagement and as long as needed for legal and accounting purposes (generally up to 7 years). Technical logs are kept for a short period, typically up to 12 months.
Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email [email protected].
You also have the right to complain to a data-protection authority. In Australia that is the Office of the Australian Information Commissioner (OAIC); in the UK, the Information Commissioner’s Office (ICO); elsewhere, your local supervisory authority.
We use reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission over the internet is completely secure, but we take care to safeguard the data we hold.
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children.
We may update this policy from time to time. When we do, we’ll change the “last updated” date above and, where appropriate, tell you directly.
Questions about this policy or your data? Email [email protected] or write to [COMPANY NAME], [REGISTERED ADDRESS].