Privacy Policy
Your privacy matters to us. This policy explains how lystoropeon collects, uses, and protects your personal information in accordance with Australian privacy laws.
Information We Collect
lystoropeon collects various types of information to provide our cost management services effectively. We gather personal details during account registration, including your name, email address, phone number, and business information. Our platform also tracks your usage patterns, financial data you choose to input, and communication preferences.
Personal Information Categories
- Identity Information: Full name, business name, ABN (Australian Business Number), and professional titles
- Contact Details: Email addresses, phone numbers, business addresses, and preferred communication methods
- Financial Data: Cost tracking information, budget categories, expense patterns, and financial goals you set within our platform
- Technical Information: IP addresses, browser types, device information, and platform usage analytics
- Communication Records: Support inquiries, feedback submissions, and correspondence with our team
How We Use Your Information
We use collected information primarily to deliver our cost management services and improve your experience. This includes processing your financial data to generate insights, sending relevant notifications about your account, and providing customer support when needed.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Service delivery | All account and financial data | Contract performance |
| Customer support | Contact info, communication records | Legitimate interest |
| Platform improvement | Usage analytics, feedback | Legitimate interest |
| Security monitoring | Technical data, access logs | Legal obligation |
Data Sharing and Third Parties
lystoropeon operates with a strict data sharing policy. We don't sell your personal information to third parties. However, we may share data with trusted service providers who help us operate our platform, such as cloud hosting services, payment processors, and analytics tools. All third parties are bound by confidentiality agreements and must meet our security standards.
Important: We may disclose information when legally required, such as responding to court orders, regulatory investigations, or protecting against fraud and security threats. Such disclosures are limited to what's legally necessary and we notify affected users when permitted by law.
Your Privacy Rights
Under Australian privacy legislation, you have several rights regarding your personal information. These rights help you maintain control over your data and understand how it's being used.
Available Rights
- Access Right: Request copies of your personal data we hold, including details about how it's processed
- Correction Right: Ask us to correct inaccurate or incomplete information in your account
- Deletion Right: Request removal of your personal data, subject to legal and contractual obligations
- Restriction Right: Limit how we process your information in certain circumstances
- Portability Right: Receive your data in a structured format for transfer to another service
- Objection Right: Object to processing based on legitimate interests or for direct marketing
To exercise these rights, contact our privacy team using the details provided below. We'll respond within 30 days and may request identity verification for security purposes. Some requests may be subject to legal limitations or require us to maintain certain records for compliance reasons.
Data Security and Protection
We implement comprehensive security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes encryption for data in transit and at rest, regular security audits, access controls, and staff training on privacy practices.
Security Measures
Our platform uses industry-standard SSL encryption for all data transmission. Financial information is stored using AES-256 encryption, and access is restricted to authorized personnel only. We conduct quarterly security assessments and maintain compliance with Australian data protection standards.
Employee access to personal data is limited based on job responsibilities and subject to confidentiality agreements. We also maintain incident response procedures to address any potential data breaches promptly and in accordance with notification requirements.
Data Retention and Deletion
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Account information is typically retained for the duration of your relationship with us plus seven years for financial record-keeping requirements.
When you close your account, we'll delete or anonymize your personal data within 90 days, except where longer retention is required by law. Financial transaction records may be retained longer to comply with Australian taxation and business record requirements.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve functionality, analyze usage, and personalize your experience. Essential cookies are necessary for core platform features, while analytics cookies help us understand user behavior and improve our services.
You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality. We don't use cookies for cross-site tracking or share cookie data with advertising networks.
International Data Transfers
lystoropeon primarily stores and processes data within Australia using local cloud infrastructure. When international transfers are necessary for service delivery, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under Australian privacy law.
Updates to This Policy
We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Significant changes will be communicated through email notifications or prominent notices on our platform at least 30 days before taking effect.
We encourage you to review this policy regularly to stay informed about how we protect your privacy. The effective date at the bottom of this document indicates when the policy was last updated.
Privacy Contact Information
lystoropeon Financial Services
For general inquiries about our services, please use info@lystoropeon.sbs. For privacy-specific matters, our privacy officer will respond within 5 business days.
Effective Date: January 15, 2025
Last Updated: January 15, 2025