Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Patricia Holdings (ABN 43 264 414 938) (we, us or our) collects, uses, holds and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

In addition, this policy has been updated to include information about customer due diligence (CDD), verification of identity (VOI) and anti‑money laundering and counter‑terrorism financing (AML/CTF) requirements that apply, or may apply in the future, to professional and regulated service providers such as us.

1. Our commitment to privacy

We are committed to protecting your privacy and handling personal information in a transparent and responsible manner. This Privacy Policy sets out how we manage personal information and the steps you can take if you have any concerns.

2. What kind of personal information do we collect and hold?

We may collect and hold a range of personal information about you to provide you with our services, including:

• names and contact details (including email address, telephone number and address);
• date of birth;
• details required for company, trust or other legal and compliance documents (such as director, shareholder, trustee, settlor, beneficiary or unit holder details);
• identification information (such as driver licence or passport details);
• government‑related identifiers (such as a tax file number), where required or authorised by law; and
• information relating to your use of our website and services.

3. How we collect personal information

We generally collect personal information directly from you when you:

• use our website or online services;
• submit an order, form or application;
• communicate with us by telephone, email or online platforms; or
• interact with us in the course of receiving services.

We may also collect personal information from third parties where it is reasonable and lawful to do so, including:

• from your professional advisers (such as your accountant or lawyer) acting on your behalf;
• from publicly available sources; or
• from government or regulated verification systems, where permitted by law.

4. Mandatory vs optional information

Some personal information is required in order for us to provide certain services. For example, company registrations, trust deeds and regulatory filings often require specific personal and identification details.

If you do not provide required information, we may be unable to provide the requested product or service.

5. Sensitive information

Sensitive information includes information about racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of professional or trade associations or unions, health or disability, sexual orientation, or criminal record.

We do not collect sensitive information unless:

• it is reasonably necessary for the provision of a service;
• you have provided consent; or
• we are required or authorised by law to do so.

6. Why we collect, use and hold personal information

We collect, hold and use personal information to:

• provide company, trust, corporate and trust secretarial and related services;
• prepare, lodge and administer legal and compliance documents;
• communicate with you in relation to our products and services;
• process payments and manage accounts;
• maintain and improve our systems, services and customer experience;
• manage risk and prevent fraud or misuse; and
• comply with our legal, regulatory and professional obligations.

We do not use personal information for purposes unrelated to the services provided, unless permitted or required by law.

7. Customer Due Diligence (CDD), Verification of Identity (VOI) and AML/CTF

As a professional services provider, and as a business that may be subject to current or future AML/CTF reforms, we may be required to undertake customer due diligence (CDD) and verification of identity (VOI) checks in connection with certain services.

For these purposes, we may:

• request additional personal information or identification details;
• verify identity information against reliable and independent data sources; and
• retain records of verification outcomes where required by law;
• use of the Document Verification Service (DVS) and VOI providers

Where appropriate, identity verification may be conducted through the Australian Government Document Verification Service (DVS) or through industry‑leading electronic verification of identity (VOI) providers.

These providers perform electronic identity checks by securely comparing identity document details (such as passport or driver licence information) against government‑held or accredited reference data. Identity information used for these checks is stored by the relevant VOI provider on secure servers operated in accordance with Australian laws and regulatory requirements.

We do not store copies of identity documents processed through these systems. Instead, we receive verification results only (for example, confirmation that an identity check has passed or failed), which we retain solely for compliance, fraud‑prevention and record‑keeping purposes where required by law.

If required information is not provided or cannot be verified, we may be unable to provide our services.

8. Disclosure of personal information

We may disclose personal information to third parties only where it is reasonably necessary to provide our services or to meet legal obligations. This may include disclosure to:

• government agencies and regulators (such as ASIC, the ATO or AUSTRAC);
• professional advisers acting on your behalf (where authorised);
• technology, data storage and software service providers; and
• identity verification and fraud prevention providers.

We take reasonable steps to ensure third‑party recipients handle personal information in accordance with applicable privacy laws.

We will also disclose personal information where required or authorised by law.

9. Overseas disclosure

Some technology or data hosting providers we use may store or process information outside Australia.

Where personal information is disclosed overseas, we take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with Australian privacy requirements, unless an exception under the Privacy Act applies.

10. Direct marketing

We may use personal information (other than sensitive information, unless consent is provided) to inform you about our products or services that may be of interest to you.

You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe facility provided.

11. Security of personal information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

Our safeguards may include access controls, staff training, secure systems, data protection measures and monitoring. We do not publish detailed security controls for safety reasons.

12. Retention of personal information

We retain personal information only for as long as it is required for the purposes set out in this Privacy Policy and to comply with legal and regulatory obligations.

When personal information is no longer required, we take reasonable steps to destroy or de‑identify it.

13. Credit card information

We do not store credit card details. Payments are processed through secure third‑party payment providers.

14. Access and correction

You may request access to the personal information we hold about you and request corrections if you believe the information is inaccurate, incomplete or out of date.

Requests should be made using the contact details below. We may require verification of identity before processing a request.

In some circumstances, access may be refused where permitted by law.

15. Dealing with us anonymously or by pseudonym

Where lawful and practicable, you may deal with us anonymously or by using a pseudonym (for example, when making a general enquiry).

However, many of our services require full identification details, and anonymous dealings may not be possible.

16. Cookies and website data

Our website may use cookies and similar technologies to improve functionality, security and user experience, and to analyse site usage.

You can manage cookies through your browser settings. Disabling cookies may affect website functionality.

17. Privacy complaints

If you believe your privacy has been breached, you may contact us using the details below. We will investigate your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

18. Contact us

Privacy Officer or AML/CTF Compliance Officer
Patricia Holdings
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Address: Level 1, 9-11 Grosvenor Street, Neutral Bay, NSW 2089

19. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will be available on our website.

Disclaimer: This Privacy Policy is provided for general information purposes only and does not constitute legal advice.