Privacy Policy

Website: www.equityconnectadvisory.com Entity: Equity Connect Advisory Pty Ltd (ABN 93 697 679 217) of Level 8, 2 Bligh Street, Sydney NSW 2000, Australia, operating as “EC Advisory” (“we“, “us“, “our“). Last updated: 1st September 2026. Effective date: 1st September 2026.

In short

EC Advisory provides fractional C-suite and operator-led advisory services (CEO, CFO, COO, CCO, CTO, CSO) to businesses that are scaling, raising capital, or preparing for an exit. This policy explains what personal information we collect through this website and in delivering advisory services, why we collect it, who we share it with — including our Philippines-based delivery team and other Equity Connect group companies — how we protect it, and how you can access, correct, or complain about the handling of your information.

EC Advisory is part of the Equity Connect group, alongside Equity Connect (equityconnect.global), EC Labs, EC Outsourced, EC Pay and EC Insurance. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Because part of our delivery capability, and some of our clients and contacts, are based in the Philippines, we also align our practices with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), and we describe below how we support the rights of clients and contacts based in the United States.

1. Who this policy covers

This policy applies to personal information we collect through www.equityconnectadvisory.com, through discovery-call bookings and enquiry forms, and in the course of delivering fractional executive and advisory services to clients. It sits alongside — and does not replace — any engagement letter, statement of work, or master services agreement we enter into with a client, which will govern how we handle that client’s confidential and personal information in more detail.

2. Information we collect

Depending on how you interact with us, we may collect:

Contact and identity information — name, job title, company name, email address, and phone number, typically provided when you book a discovery call or submit an enquiry form.

Enquiry and communication content — details of your business, the challenges you are facing, and the content of our calls, meetings and correspondence with you, so that we can scope and deliver advisory support.

Client and engagement information — where you engage EC Advisory, information reasonably needed to deliver fractional executive services, which may include business financials, organisational structure, strategic plans, capital-raising or exit-readiness information, and details about your leadership team, disclosed to us under the confidentiality terms of our engagement.

Marketing preferences — your email address and preferences if you subscribe to updates or insights from EC Advisory.

Careers and candidate information — if you apply to join our fractional executive network or a role with us, your CV/résumé, work history, qualifications, and references.
Technical and usage information — IP address, browser and device type, pages viewed, and referring website, collected automatically via analytics tools (see section 7).

We do not seek to collect sensitive information (such as health or other special category information under the APPs) through this website, and we ask that you do not include it in any message to us unless directly relevant and necessary.

3. How we collect information

We collect personal information directly from you when you book a discovery call, complete a website form, email or call us, subscribe to updates, or engage us for advisory services. We may also collect information from third parties where reasonably necessary — for example, from a referrer or introducer, from publicly available sources such as LinkedIn or your company website when we research a prospective client, or from other Equity Connect group companies where you already have a relationship with them and have consented to be introduced to EC Advisory.

4. Why we collect, hold and use information

We collect, hold and use personal information to:

respond to enquiries and discovery-call requests and scope potential engagements;

deliver fractional C-suite and advisory services, including embedding our executives into your leadership team, and manage the resulting engagement (billing, reporting, scheduling);

introduce you, where relevant and with appropriate confidentiality safeguards, to other Equity Connect group services (EC Labs, EC Outsourced, EC Pay, EC Insurance);

send marketing communications and insights where you have subscribed or otherwise agreed (see section 6);

operate, maintain and improve our website, including through analytics;

comply with our legal, tax, and regulatory obligations; and

assess candidates for our fractional executive network or open roles.

We only use personal information for the purpose it was collected for, or a related purpose you would reasonably expect, unless we obtain your consent or are otherwise permitted or required by law.

5. Information about your organisation's people

Because our fractional executives are embedded into your leadership team, we may, in the course of an engagement, come into contact with personal information about your directors, officers, and employees (for example, names, roles, contact details, and performance or organisational information relevant to the advisory scope). We collect and use this information solely to deliver the agreed services, we treat it as confidential in line with our engagement terms, and we expect you to have the appropriate basis to share it with us. If you are an individual whose information has been shared with us in this way and you have questions, please contact us using the details in section 21.

6. Direct marketing

If you subscribe to updates or insights from EC Advisory, we may send you marketing communications by email in accordance with the Spam Act 2003 (Cth) and, for recipients in the United States, the CAN-SPAM Act. Every marketing email includes a functional unsubscribe mechanism, and you can opt out at any time by contacting us using the details in section 21. We will not send further marketing communications after you unsubscribe, other than transactional or service messages needed to administer an existing engagement.

7. Cookies, scheduling tools and website analytics

Our website uses Google Analytics (GA4) to help us understand how visitors use the site so we can improve our content and user experience. Google Analytics uses cookies and similar technologies and may process data outside Australia in accordance with Google’s own privacy policy. If you book a discovery call through a third-party scheduling tool linked from our website, that tool’s own privacy policy will also apply to the information you provide it, and we encourage you to review it. We do not currently use advertising or social media tracking pixels on this website; if that changes, we will update this policy.

You can control or delete cookies through your browser settings. Blocking cookies may affect how some parts of the website function. Where required by law, we will present a cookie banner or similar mechanism before non-essential cookies are set.

8. Who we disclose information to

We may disclose personal information to:

other Equity Connect group companies (Equity Connect, EC Labs, EC Outsourced, EC Pay, EC Insurance) where relevant to deliver a service you have requested or manage a group-wide relationship;

our Philippines-based delivery team and contractors who support research, coordination, and back-office functions for EC Advisory engagements (see section 9);

service providers, such as IT and hosting providers, email and CRM platforms, scheduling tools, analytics providers, and professional advisers (legal, accounting);

subcontracted or associate fractional executives and advisers engaged to help deliver services to you, under confidentiality obligations; and

a purchaser or prospective purchaser in connection with an actual or proposed sale, merger, restructure, or other transaction involving all or part of our business, subject to confidentiality protections.

We do not sell personal information to third parties for their own marketing purposes.

9. Our Philippines-based delivery team and cross-border transfers

EC Advisory’s delivery model draws on a team based in the Philippines that supports research, analysis, coordination and back-office functions for our advisory engagements, alongside our Australia-based executives. This means personal information you provide to us may be accessed, used, or stored by personnel in the Philippines, and by our cloud and software service providers, which may host data in Australia, the Philippines, the United States, or other countries.

Before disclosing personal information overseas, we take reasonable steps required by Australian Privacy Principle 8 to ensure that overseas recipients, including our Philippines-based team, handle personal information consistently with the APPs and, where applicable, the Philippine Data Privacy Act of 2012 — including through confidentiality agreements, access controls, and data handling standards applied across our delivery team regardless of location. By providing us with your personal information, you acknowledge it may be handled in the Philippines and other locations in accordance with this policy.

10. Data security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure, including access controls, encryption of data in transit, confidentiality obligations for our Australia and Philippines-based team members, and due diligence on our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to identify and remediate risks on an ongoing basis.

11. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting, tax, or regulatory retention requirements, and consistent with our client engagement terms (which may require retention of certain records for a period after an engagement ends). When information is no longer needed, we take reasonable steps to securely destroy or de-identify it.

12. Your rights: access and correction

You may ask us for access to personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact us using the details in section 21. We will respond within a reasonable period, consistent with the Privacy Act 1988 (Cth) and, where applicable, the Philippine Data Privacy Act of 2012. We may need to verify your identity first, and in some circumstances permitted by law we may decline a request — if so, we will explain why.

13. Notice for clients and contacts in the Philippines

Given our Philippines-based delivery team and Philippines-based clients and contacts, we align our handling of personal information connected to the Philippines with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, including the principles of transparency, legitimate purpose, and proportionality. Where the Data Privacy Act applies, you may — in addition to the rights described elsewhere in this policy — have the right to be informed, to object to processing, to data portability, to lodge a complaint, and to seek indemnity for damages from unlawful processing. Complaints under the Data Privacy Act may be lodged with the National Privacy Commission (NPC) — www.privacy.gov.ph. Our privacy contact details are in section 21.

14. Notice for clients and contacts in the United States

Some of our clients and website visitors are located in the United States. While EC Advisory is an Australian business and this website is not primarily directed at, and does not knowingly sell personal information of, California or other U.S. state residents, we support the following rights as a matter of good practice, consistent with frameworks such as the California Consumer Privacy Act (as amended) and similar state privacy laws:

the right to know what personal information we hold about you and how it is used and disclosed;

the right to request deletion of your personal information, subject to legal and contractual exceptions (including our confidentiality and record-keeping obligations under client engagements);

the right to correct inaccurate personal information; and

the right not to be discriminated against for exercising these rights.

We do not sell or “share” (as those terms are defined under U.S. state privacy laws) personal information for cross-context behavioural advertising. U.S.-based contacts can exercise the above rights by contacting us using the details in section 21. Marketing emails sent to U.S. recipients comply with the CAN-SPAM Act, including a working unsubscribe link.

15. Other international visitors (including the EU/UK)

If you access our website or engage our services from the European Economic Area, the United Kingdom, or another jurisdiction with its own data protection law, we will honour requests to access, correct or delete your personal information, or to object to certain processing, to the extent consistent with our legal and contractual obligations, even where that jurisdiction’s law does not directly apply to us. Contact us using the details in section 21 to make such a request.

16. Job applicants and fractional-executive candidates

If you apply to join our fractional executive network or a role with EC Advisory, we collect and use the personal information in your application (such as your CV, work history, qualifications and referee details) to assess your suitability, conduct reference and background checks where relevant and lawful, and communicate with you about opportunities. We may retain applications for a reasonable period to consider you for future opportunities, unless you ask us not to.

17. Children's privacy

Our website and services are directed at businesses and professionals, not children. We do not knowingly collect personal information from individuals under the age of 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

18. Data breach notification

If we experience a data breach likely to result in serious harm to affected individuals, we will comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required, and, given our Philippines-based delivery team, will also meet applicable breach-notification obligations under the Philippine Data Privacy Act of 2012, including notifying the National Privacy Commission and affected individuals where required.

19. Third-party links

Our website may contain links to third-party websites, including those of other Equity Connect group companies, scheduling or meeting tools, and partners. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their privacy policies before providing personal information to them.

20. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, our services, or the law. The “last updated” date at the top shows when it was last revised. We encourage you to review this policy periodically, and where changes are material, we will take reasonable steps to notify you.

21. How to contact us or make a complaint

If you have a question about this policy, want to exercise a right described above, or wish to complain about how we have handled your personal information, please contact us:

Equity Connect Advisory Pty Ltd (EC Advisory) Level 8, 2 Bligh Street, Sydney NSW 2000, Australia Email: hello@equityconnect.global

We will acknowledge your complaint and aim to resolve it promptly. If you are not satisfied with our response, you may refer your complaint:

in Australia, to the Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au;

in the Philippines, to the National Privacy Commission (NPC) — www.privacy.gov.ph; or

in the United States, to your state Attorney General’s office or the Federal Trade Commission, where applicable.