Privacy, with clear responsibilities.

1. About this policy and the Regalis relationship

Regalis Wealth Management (Regalis, we, us or our) is the brand used on this website for investment, fund management, private wealth, finance and professional referral services. The legal entity responsible for a particular product, engagement or transaction is identified in the relevant service documents. Ask us to identify that entity before providing detailed personal or financial information.

This policy describes the handling of personal information through our website, enquiries, professional relationships and services where provided. We apply the Privacy Act 1988 (Cth), Australian Privacy Principles and other privacy obligations to the extent they apply to the responsible entity and activity. Additional collection notices, credit reporting disclosures or product notices may apply to a particular service. This policy does not authorise a use or disclosure that the law prohibits.

Last updated: 26 October 2026. For privacy questions or a copy of this policy in another accessible format, email info@regalis.com.au and mark your message Privacy.

2. Current website and available channels

The current website is a local design preview. Its enquiry, broker registration, referral registration, scenario and support forms prepare an on-screen summary; they do not yet send form contents to us or create an application. Portal sign-in is a visual preview and does not authenticate users, transmit credentials or expose private account information.

If you independently email info@regalis.com.au, the message and its attachments are handled by email systems and our authorised enquiry team. Email enquiries may be routed to a shared administrative mailbox used by the authorised team. Mail delivery providers may process messages and technical metadata. Do not infer from the local preview that an email message is held only on your device.

When live forms or account services are introduced, the relevant collection notice will explain what is transmitted and the applicable service arrangements. A general enquiry does not establish an advisory relationship, investment acceptance, funding approval, confidentiality undertaking or authority to act.

3. Information relevant to an enquiry or service

An initial enquiry may include your name, business contact details, organisation, professional role, preferred contact method, service interest and the facts you choose to describe. We request information proportionate to the conversation. Please avoid unnecessary information about family members, employees, clients or other people.

A formal investment or wealth relationship may require identity and beneficial ownership details, contact and tax residency information, investment objectives, experience, eligibility evidence, source of funds and wealth, ownership structures, account instructions and transaction records. Information about a company, trust or partnership may also identify its directors, trustees, beneficiaries, controllers or authorised representatives.

A finance or broking engagement may require income, employment, assets, liabilities, expenses, existing facilities, business financial information, guarantor details, security property information, valuation material, loan purpose and repayment proposals. A service-specific request will explain the documents and authority needed. Do not upload or email identity documents, tax file numbers, banking credentials or full financial records through a general enquiry channel.

4. How information reaches us

Information may be provided directly by you, an authorised representative, a broker, referral partner, adviser or other person you have authorised. In a formal engagement, information may also be obtained from trustees, administrators, lenders, valuers, identity verification providers, public registers and other lawful sources appropriate to the service.

We may need to confirm the source, the person responsible for the information and your authority before relying on it. Receiving information from a third party does not mean every proposed use is permitted. An unsolicited document may be returned, restricted, destroyed or de-identified where appropriate and permitted by law.

Telephone or meeting notes and service correspondence may be retained to record instructions and decisions. If a call or meeting is to be recorded, an appropriate notice or consent process will apply. This policy does not state that calls are routinely recorded.

5. Purposes and the limits of an enquiry

We use relevant information to respond to enquiries, identify the appropriate service, consider a proposed professional relationship, assess a transaction within an agreed role, communicate with you, administer an established relationship and manage documents, instructions, reporting and complaints.

Other purposes can include verifying identity and authority, preventing fraud, managing conflicts and operational risks, maintaining reliable records, meeting applicable legal or regulatory requirements, obtaining professional advice and establishing, exercising or defending legal rights. Identity, anti-money laundering, sanctions, tax or reporting obligations depend on the responsible entity and service; a general website description is not a claim that every obligation applies to every enquiry.

We may seek clarification, supporting evidence or independent verification before relying on information. Sending an enquiry or receiving an indicative response does not guarantee eligibility, an investment allocation, credit approval, a finance offer or an agreement to provide a service.

6. Your choices and information we cannot work without

Where lawful and practicable, you may make a general enquiry without identifying yourself or using a pseudonym. We may be unable to discuss an existing account, verify an instruction, assess a transaction or provide a regulated service without identifying you and confirming the relevant authority.

You may decline to provide information, withdraw an optional consent or change a communication preference. This may limit the service available and does not undo a lawful disclosure already made or require deletion of records that must be retained. We will explain a material consequence where relevant.

A notice acknowledging this policy is not a blanket consent to unrelated marketing, credit reporting, disclosure to every lender or collection of any information about you. Additional authority will be sought where required for a particular activity.

7. Brokers, referrals and information about other people

If you provide information about another person, you must have a lawful basis and appropriate authority to do so, tell them who will receive it and why, and provide this policy or the applicable collection notice where required. Supply only the information needed for the stated purpose and keep consent and authority records where relevant.

Referral partners should usually start with a brief description and contact details shared with the client's permission. A referral alone does not authorise investment advice, credit assistance, collection of detailed financial records or access to the client's account. Broker responsibilities are separately defined by the agreed engagement and applicable authorisations.

Information returned to a broker or referral partner is limited to their role, client authority and legitimate need. A referral fee or commercial relationship does not itself entitle a partner to confidential records. We may ask for authority evidence, withhold information or communicate directly with the client when appropriate.

8. Disclosures connected with a service

Where reasonably necessary and permitted, information may be shared with the responsible Regalis service entity, authorised staff, administrative support teams, relevant fund managers, trustees, custodians, administrators, lenders, credit assistance providers, insurers, valuers, accountants, lawyers, auditors and other professional advisers involved in the relationship.

Service providers may include email, hosting, document management, IT support, identity verification, security and communications providers. We limit the information made available to the task and use appropriate confidentiality, access or contractual arrangements where required. We do not provide a referring party with unrestricted client access.

Disclosures may also be required or authorised by law, a court or tribunal order, a regulator or enforcement authority, or be necessary to deal with suspected fraud, a security incident, a dispute or a proposed business restructure. A business transfer would be assessed against applicable privacy obligations and appropriate confidentiality measures; it is not an unrestricted licence to sell client information.

9. Credit information and identity verification

This public website does not obtain consumer credit reports, create credit scores or report defaults. A formal credit activity may involve personal information that is subject to additional credit reporting rules, including Part IIIA of the Privacy Act and the applicable Privacy (Credit Reporting) Code.

Before a relevant service obtains or discloses credit reporting information, the responsible credit provider or service entity must provide the applicable credit privacy information and notices, identify the credit reporting bodies and relevant rights, and obtain any authority required. This general policy is not a substitute for those materials and does not imply membership of, or a relationship with, a particular credit reporting body.

Electronic identity matching, document verification, fraud screening or biometric processing, if introduced, will be described in the applicable notice. Separate sensitive-information consent will be obtained where required. Do not send passwords, verification codes, banking login details or identity records in an ordinary website message.

10. Sensitive information and government identifiers

We do not ask for health information, ethnicity, political or religious beliefs, biometric templates or other sensitive information in a general enquiry. If a specific service reasonably requires sensitive information, we will explain the purpose and seek consent unless a lawful exception applies.

Government identifiers, including tax file numbers, are handled only for a permitted purpose. Do not volunteer these details through an initial enquiry. We will confirm an appropriate channel and any specific notice before requesting identity or tax documents.

Information that is not legally classified as sensitive can still be highly confidential, including financial statements, ownership details and transaction records. It should be shared only through an agreed channel with an appropriate recipient.

11. Overseas recipients and external systems

Email delivery, hosting, security, document services, professional advice or a transaction counterparty may involve processing or access outside Australia. The location depends on the providers and parties used for the actual service. Using an Australian domain name does not establish that all information remains in Australia.

Before a live service is introduced, its collection notice and this policy must identify likely overseas recipient locations where practicable. For an existing enquiry, email info@regalis.com.au to ask about the relevant recipient and location before sending information subject to location restrictions. Do not assume Australia-only handling or a particular foreign country without written confirmation.

Where cross-border privacy obligations apply, reasonable steps and other required safeguards will be considered before disclosure. We do not treat use of the website as a general waiver of overseas disclosure protections. Third-party recipients may have independent legal obligations and privacy policies.

12. Security, email and your responsibilities

Reasonable security measures should reflect the nature of information and the risks of unauthorised access, loss, interference, misuse or disclosure. For live services these may include restricted permissions, verification of instructions, secure transmission, staff procedures and provider controls appropriate to the system. No website, email service or storage system can promise absolute security.

Use a known Regalis contact and independently confirmed details to verify payment instructions, unexpected attachments or a request to change bank details. Email alone should not be used to authenticate a financial instruction. If you believe a message has been misdirected or an account compromised, notify info@regalis.com.au promptly without including passwords or authentication codes.

Keep your own devices and email accounts secure, check recipients and remove unnecessary personal information before sharing documents. We may decline an instruction or request further checks where authority or authenticity is uncertain. These precautions do not exclude any obligation or liability that cannot lawfully be excluded.

13. Retention, backups and disposal

Retention depends on the purpose, the relationship, relevant legal requirements and the need to resolve complaints, recover records, maintain audit evidence or establish, exercise or defend rights. An initial enquiry, an identity record, a transaction document and a security log may have different retention periods.

Where information is no longer needed for a permitted purpose and no retention obligation applies, reasonable steps will be taken to destroy it or de-identify it. Removing a message from a working inbox does not necessarily remove copies held by a recipient, provider, archive, legal hold or backup process immediately.

A fixed deletion deadline or an Australia-only retention requirement should be discussed and agreed before information is supplied. We do not promise immediate erasure, a universal retention period or removal of records lawfully held by an independent third party.

14. Website data, preferences and external links

The local preview loads its fonts and photographs from local files. It does not currently run optional analytics, advertising trackers or authenticated portal sessions. A cookie preference can be stored in the browser on your device. Local HTTP server access logs may include request times, requested paths and network addresses.

A future hosted website may create essential security, delivery and access logs and may use additional technologies disclosed in its Cookie Policy and collection notices. Optional analytics or advertising will require an appropriate disclosure and choice process where applicable; the current preview does not activate them.

External websites, email applications and linked service providers have their own handling practices. A link does not make Regalis responsible for an independent third party's conduct. Before submitting information to an external site, review the recipient, purpose and applicable privacy notice.

15. Direct marketing and communication choices

A service enquiry may receive a response about that enquiry. Any separate marketing programme must use a lawful basis and provide the applicable opt-out arrangements. A consent to handle an enquiry is not automatically an agreement to unrelated campaigns or disclosure to third-party marketers.

You may ask us not to send optional promotional messages by contacting info@regalis.com.au or using an unsubscribe option supplied with a message. We may retain a limited suppression record so that your preference can be respected. Necessary service, security, legal or complaint communications may still be sent.

16. Automated decisions and artificial intelligence

The public preview does not use automated decision systems to determine investment eligibility, approve finance or set client account permissions. Portal login and on-screen form summaries do not make a financial decision.

If a live service introduces automated processing that materially affects a person's rights or interests, the relevant entity will provide the disclosures required for the actual information and decision process, including available review arrangements. This policy is not permission to upload confidential client records to an unrestricted public AI service.

17. Access, correction and accuracy

Contact info@regalis.com.au to request access to personal information we hold about you or correction of information you believe is inaccurate, out of date, incomplete, irrelevant or misleading. Describe the records and relationship involved without emailing identity documents at the outset.

We may need to verify your identity and authority, clarify the scope and consider another person's privacy, confidentiality obligations, legal restrictions and applicable exceptions. Where a request cannot be met in full, we will explain the basis and available complaint avenues where required. An alternative form of access or an associated correction statement may be appropriate.

Requests will be handled within the period required by applicable law or otherwise a reasonable period. Any permitted access charge will be explained in advance; we do not charge simply for making a request. Please tell us when contact details or authorised representatives change.

18. Privacy complaints and incident concerns

Email info@regalis.com.au with Privacy complaint in the subject. Include your preferred contact details, the relevant service, what happened, when it occurred and the outcome sought. We will direct the matter to the appropriate responsible person and may ask for further information through a suitable channel.

We aim to consider a privacy complaint and respond within 30 days. If more time is reasonably needed, we will explain the position and next steps. Applicable statutory periods, credit reporting rules or dispute resolution obligations take precedence over this general process.

If you are not satisfied, or do not receive a response within a reasonable time, you may be able to contact the Office of the Australian Information Commissioner at www.oaic.gov.au or an applicable external dispute resolution scheme. The relevant service documents identify any scheme membership; this website does not claim an unverified membership. Nothing in this policy prevents a complaint or other right available under law.

Where an incident is subject to the Notifiable Data Breaches scheme or another notification requirement, the responsible entity will assess the incident and make the notifications required by law. Contact us promptly if you suspect a privacy or security issue.

19. Changes, service-specific notices and contact

This policy may be updated as services, providers and legal requirements change. The date above identifies the current website version. Materially different uses will be notified and additional consent obtained where required. Publishing a revised policy does not retrospectively authorise an unlawful use of information.

Read the collection notice, engagement terms, product documents and any credit reporting policy relevant to the service. No provision is intended to waive a non-excludable right or replace a legal requirement. If you need clarification before providing information, contact the Regalis team at info@regalis.com.au.