%20(1).svg "Frame (18) (1)")
.svg "Close (1)")
Ulton is strongly committed to your right to privacy and abides by the Australian Privacy Principles established under the Privacy Amendment (Enhancing Privacy Protection) Act 2012 and the Privacy Act 1988 (Cth) (Privacy Act).
This Privacy Policy sets out how Ulton collects, processes, and handles personal information. This policy may be modified from time to time to reflect our current privacy practices. Updates will be published on our website.
In this Privacy Policy, ‘Ulton’, ‘we’, ‘us’ and ‘our’ refers to the partnership carrying on business under the name Ulton or Ulton Wealth Management and includes any entity owned or controlled by Ulton.
By using our website, engaging us to provide you with services, where you have been provided with a copy of our policy or had a copy of our policy reasonably available to you, you acknowledge and agree that you give the consents given by you in this policy; and have been informed of all matters included in this policy.
Ulton is committed to providing you with the highest quality professional service whilst also protecting your privacy. As we adopt new technologies, including Artificial Intelligence (AI), we remain focused on transparency, accountability, and compliance with the Australian Privacy Principles.
We collect, hold, use, and disclose personal information to carry out functions or activities under the Privacy Act and other legislation that regulates registered tax agents and financial advisers.
The purpose of this policy is to generally inform people of:
“Personal information” is information or an opinion about an identified individual, or about an individual who is reasonably identifiable.
“Sensitive information”, a sub-set of personal information, is information or an opinion about an individual’s racial or ethnic origin, political opinions, political association membership, religious beliefs or affiliations, philosophical beliefs, professional or trade association membership, trade union membership, sexual orientation or practices or criminal record, and includes health information and genetic information.
“AI, or Artificial Intelligence”, refers to using computer systems to perform tasks that would typically require human intelligence. At its core, AI involves creating algorithms and models that can analyse or summarise data, identify patterns, and make decisions based on that analysis.
Ulton is committed to being transparent about how we use Artificial Intelligence (AI) tools in our operations. These tools are used to assist our team in delivering quality service, enhancing insights, improving efficiencies, and managing internal processes.
We may use AI tools to:
At all times we try to only collect the information we need for the service or activity we are engaged to carry out or to comply with our legal obligations. The main way we collect personal information about you is when you provide it directly to us.
We collect personal information such as:
We may need to collect sensitive information about you to provide specific services. This might include information about your Tax File Number, professional or political memberships, religious beliefs, relationship status, trade or professional associations and health information. Unless the law provides otherwise, Ulton will seek your express consent to the collection of this information. If you do not provide your consent, then we may not be able to answer your enquiry, complete the transaction you have entered into, or provide the services you have engaged us to perform.
While providing services to you, we may collect personal information (including sensitive information) about you indirectly from third parties such as your authorised representative (if you have one) or from publicly available sources including, but not limited to, court judgments, directorship and bankruptcy searches, business cards, Australia Post, and White Pages directory. When this occurs, we will take reasonable steps either to make you aware that we have done this and why, unless special circumstances apply.
We also collect personal information through our websites and social networking services (such as LinkedIn, Facebook, Google and similar platforms. We use this information to improve our website and receive feedback from the community. Refer to collecting through our website.
In the event Ulton receives or collects personal information from you, or a third party, in circumstances where we have not requested or solicited that information (known as unsolicited information), and it is determined by Ulton (in its absolute discretion) that the personal information is not required, we will destroy the information or ensure that the information is de-identified, unless it is contained in a "Commonwealth record” or it is unlawful or unreasonable to do so.
If the unsolicited personal information collected is in relation to potential future employment with Ulton, such as a CV, resume or candidacy related information, and it is determined by Ulton (in its absolute discretion) that it may consider you for potential future employment, Ulton may keep the personal information on its human resource records.
For most of our functions and activities we need your name and contact information and enough information about the specific matter to enable us to handle your inquiry, request, or complaint fairly and efficiently. If you do not provide the information requested, we may be unable to provide services or effectively respond to you.
Ulton’s public website, www.ulton.net, is hosted in Australia. Its primary purpose is to be a useful resource and business tool to support you. Ulton wants you to feel secure when visiting our site and are committed to maintaining your privacy when doing so.
This website contains links to other sites, maintained by other organisations, and Ulton does not take any responsibility for the content or functionality of those sites.
There are several ways in which we collect information through our website.
When you visit any part of our websites, we collect statistical data about that visit (e.g. what you looked at, the way in which you moved around the site, etc) which is not personally identifiable. We use this information for statistical purposes and to improve our website. We generally only collect personal information from our website when it is provided voluntarily by you.
We monitor our website's performance to measure if we are fulfilling your needs for a relevant and up to date information service and may track your IP address and session time. This information cannot be used to identify you and will remain anonymous. If your web browser has Do Not Track enabled, we will not track your visit.
Cookies are small data files transferred onto computers or devices by websites for record-keeping purposes and to enhance functionality on the website. We use cookies to 'remember' your browser between page visits to help us analyse data about web page traffic and improve our website. In this situation, the cookie identifies your browser, not you personally. A cookie in no way gives us access to your computer or any information about you, other the information you choose to share with us.
Most browsers allow you to choose whether to accept cookies or not. If you do not wish to have cookies placed on your computer, please set your browser preferences to reject all cookies before accessing our website.
We use Google’s YouTube site to host videos which are embedded on our website. Embedded videos on our website use YouTube’s Privacy Enhanced Mode. When you play an embedded video from our website, the video and associated assets will load from the domain www.youtube-nocookie.com, and other domains associated with Google’s YouTube player.
YouTube collects information about user activity including videos watched and interactions with content and ads. These analytics are made available to us, and we use this information to understand how our videos perform. You can access the privacy policy for YouTube on the Google website.
We will collect information that you provide to us when signing up to mailing lists and registering for our events, or when submitting feedback on your experience with our website.
We use social networking services such as Facebook, LinkedIn and YouTube to communicate with the public about our work. When you communicate with us using these services we may collect your personal information, but we only use it to help us to communicate with you and the public. The social networking service will also handle your personal information for its own purposes. These services have their own privacy policies. You can access the privacy policies for Facebook and YouTube (a Google company) on their websites.
We may collect personal information to use with AI tools to support service delivery, analysis, or business improvement processes. This information will only be collected when necessary and used in accordance with the primary purpose of collection, or for secondary purposes that are reasonably expected or with your consent.
Where AI-generated information includes your personal information, we will ensure it is treated with the same protections as information you directly provide. If a third-party AI provider is involved and has access to personal information, we will take reasonable steps to ensure they comply with privacy obligations under the APPs. We do not allow AI tool developers or third-party AI platforms to retain or access your personal information unless required to deliver a specific service and only with adequate safeguards in place.
If personal information is to be used in connection with AI tools, we may inform you at the time of collection including:
AI tools will not generally be used for decision-making that significantly affect your rights without human involvement. Where AI tools are used to make decisions that may significantly impact individuals or organisations, we will disclose the nature of this use as follows:
We are committed to ensuring human oversight and clear explanation of any AI-assisted outcomes that may affect our clients.
To ensure that the personal information we collect is accurate, up-to-date, and complete we:
We also take reasonable steps to review the quality of personal information before we use or disclose it and, where relevant, may include a statement that the information is inaccurate, out-of-date, incomplete, irrelevant or misleading.
If you become aware, or believe, that any personal information we hold is inaccurate, incomplete or out of date, please contact your relationship manager or the Privacy Officer.
Ulton will not use or disclose personal information collected by us for any purpose other than the primary purpose for which it is collected, unless you would reasonably expect us to use or disclose the information or your consent has been obtained.
Exceptions to this include, but are not limited to where disclosure is:
Ulton may use or disclose the personal information we hold about you for the purpose of direct marketing, such as articles that may be of interest to you. If you wish to opt out of all marketing communications, or modify your communications preferences, you can opt-out at any time by following the unsubscribe link contained within our marketing communications.
We generally only provide the media with personal information if you have agreed.
We only disclose your sensitive information for the purposes for which you gave it to us or for directly related purposes you would reasonably expect or if you agree, for example, to handle a complaint.
Information may be disclosed overseas where one of our service providers is located outside of Australia. We perform reasonable checks on our systems and service providers to confirm they meet a level of privacy and security that complies with Australian Privacy Principles. Refer to our current engagement terms for further information.
Web traffic information is disclosed to Google Analytics when you visit our websites. Google stores information across multiple countries. When you communicate with us through a social network service such as LinkedIn, or Facebook, the social network provider and its partners may collect and hold your personal information overseas.
We may disclose personal information as required under the Notifiable Data Breaches Scheme of the Privacy Act to Office of the Information Commissioner (OAIC) and to external service providers engaged to assist us with investigations into a data breach or to secure our systems after a data breach is identified.
Your personal information is held and stored on paper, by electronic means or both. Electronic means include, physical servers located on premises, servers maintained by cloud services providers, laptops, desktop computers, tablets and other mobile devices. We have physical, electronic and procedural safeguards in place for personal information and we take reasonable steps to ensure that your personal information is protected from misuse, interference, loss and unauthorised access, modification and disclosure.
We require our IT contractors and other third parties to implement privacy safeguards and our team receive regular training on our strict privacy and confidentiality procedures in relation to all personal information stored by us electronically or in printed form.
We will store your personal information for the period necessary for the purposes for which your personal information was collected unless a longer retention period is required by law or if it is reasonably necessary for us to comply with our legal obligations, resolve a dispute or maintain security. We take reasonable steps to securely destroy or permanently de-identify any personal information when we no longer need it.
If you ask, we must give you access to your personal information, and take reasonable steps to correct it if we consider it is incorrect, unless there is a law that allows or requires us not to.
You can ask for access or correction by contacting our Privacy Officer in writing and we will respond within 30 days. If we refuse to give you access to, or correct, your personal information, we will notify you in writing of the reasons (unless it is unreasonable to do so).
We will ask you to verify your identity before we give you access to your information or correct it. The steps appropriate to verify an individual’s identity will depend on the circumstances. We will seek the minimum amount of personal information needed to establish an individual’s identity. For example, during a telephone contact it may be adequate for us to request information that can be checked against our records.
We will give access to your information by providing you with copies of the information requested, allowing you to inspect the information requested or providing you with an accurate summary of the information held. We may charge a reasonable fee for supplying personal information. For example, if an extended amount of time is required to locate, retrieve, collate and prepare any necessary materials; and in relation to any costs for the services of any intermediaries required to retrieve the information.
We will not charge you for making the request for the correction of personal information. If we make a correction and we have disclosed the incorrect information to others, you can ask us to tell them about the correction. We must do so unless there is a valid reason not to. If we refuse to correct your personal information, you can ask us to associate with it (for example, attach or link) a statement that you believe the information is incorrect and why.
All requests for access or correction to personal information, privacy complaints, queries in relation to this Privacy Policy, or any other privacy-related matter, should be directed to the Ulton Privacy Officer as follows:
Mail: The Privacy Officer, Ulton, PO Box 3321, Hervey Bay Qld 4655
Phone: (07) 4197 6301
Email: bwhebell@ulton.net
We will respond to your request within a reasonable time and in accordance with the requirements of the Privacy Act.
If you wish to complain to us about how we have handled your personal information you should first communicate with us in writing. If you need help lodging a complaint, you can contact us.
We will tell you promptly that we have received your complaint and then respond to the complaint within 30 days. If the matter proves to be complex, we will advise you in writing of any necessary extension of time for our response.
If you are not satisfied with the outcome of the complaint or the way in which the complaint was handled, then you may contact the Office of the Australian Information Commissioner https://www.oaic.gov.au/privacy/privacy-complaints.
Last modified 8 October 2025
