Legal

Privacy Policy

Last updated: 12 November 2026

This policy explains how Nuttall Quant Solutions Pty Ltd (ABN 94 684 456 317), the company behind the Regulatory Submission Engine (“we”, “us”), handles personal information. It covers two things:

This website, and how we handle information when you contact us or book a walkthrough.
The Regulatory Submission Engine platform, and how we handle the information our customers upload to it.

We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. This website

What we collect

When you email us: your name, email address, organisation, role and anything else you choose to include.
When you book a walkthrough: the details you enter in the booking form, usually your name, email address, organisation and any notes. Bookings are handled by Calendly (see section 3).
When you request our security pack or pricing: the details in your email, so we can send you the right information.
When you browse the site: we use Cloudflare Web Analytics to count visits and see which pages are used. It doesn’t use cookies and doesn’t build a profile of you. As with any website, our hosting provider processes technical information such as your IP address, browser type and the pages you request, to deliver the site and protect it from attack.

We don’t use advertising cookies or tracking pixels, and we don’t sell personal information.

Why we collect it

We use this information to reply to you, arrange and run walkthroughs, send information you’ve asked for (such as pricing or our security pack), and keep the website working and secure.

If you’ve contacted us, we may follow up about the Regulatory Submission Engine. You can ask us to stop at any time, and every email we send will tell you how.

2. The platform

Our role

When an organisation uses the Regulatory Submission Engine, it decides what information goes into the platform and what happens to it. In privacy terms, our customer is the controller of that information and we act as its processor: we handle it only to provide the service, under our agreement with the customer, including a data processing agreement where one applies.

If your personal information appears in material a customer has uploaded (for example, a public submission you made to a consultation), the customer is your first point of contact. We’ll help them respond to any request you make.

What the platform holds

Customer content: the papers and submissions a customer uploads, and the analysis, briefings and draft responses produced from them. Submissions can include names, contact details and personal views.
Account details: the names, work email addresses and roles of the customer’s users, and records of how the platform is used, so we can run, secure and support it.

How we handle it

Australian storage and processing: customer content is stored and processed in Australia, on Amazon Web Services infrastructure in Australian regions.
Not used to train models: customer content is never used to train models, ours or anyone else’s, unless the customer chooses to.
Use: we use customer content only to provide the service to that customer. We don’t use it for our own marketing or share it with other customers.
Access: access is limited to the customer’s own users, and to a small number of authorised members of our support team where needed to support or secure the service.
Deletion: we delete customer content on request, as set out in our agreement with the customer.

We use a small number of trusted providers to run our business. They handle personal information only to provide their service to us:

Amazon Web Services: hosts the platform, in Australia.
Cloudflare: hosts this website and provides its analytics and security. Cloudflare runs a global network, so website traffic may be processed outside Australia.
Calendly: our booking service. Calendly is based in the United States, and booking details you enter are stored with Calendly.
Email and business software providers: these may store information in Australia or overseas.

We don’t otherwise disclose personal information unless you agree to it, or the law requires or allows it.

4. Overseas disclosure

Customer content in the platform stays in Australia. Information you give us through this website, such as bookings and emails, may be held overseas by the providers listed in section 3, including in the United States. We take reasonable steps to make sure those providers protect it.

5. Security

We take reasonable technical and organisational steps to protect personal information from misuse, loss, and unauthorised access, change or disclosure. These include encrypted connections to the platform, access controls and activity logging. No system is perfectly secure, so if you have concerns, please tell us.

6. Access, correction and complaints

You can ask us what personal information we hold about you, ask us to correct it, or ask us to stop contacting you. Email contactus@nuttallquantsolutions.com.au. We’ll respond within 30 days.

If you have a complaint about how we’ve handled your personal information, contact us first and we’ll try to resolve it. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

7. Changes to this policy

We may update this policy as our business or the law changes. The date at the top shows when it was last updated.

8. Contact us

Nuttall Quant Solutions Pty Ltd
ABN 94 684 456 317
Sydney, New South Wales, Australia
contactus@nuttallquantsolutions.com.au