Privacy Notice
Melomys Advisory - Last updated: 5 August 2026
This notice explains how Melomys Advisory collects and handles personal information through our website. It covers our contact form and our cookies and analytics.
Who is responsible for your information
Melomys Advisory operates as two legal entities: SIA Melomys Advisory, registered in the European Union, and Melomys Advisory Pty Ltd, registered in Australia. Both are under common ownership and jointly decide how the information you send us is used. Under the GDPR, which applies to visitors in the European Union and the United Kingdom, the two entities are joint data controllers (Article 26).
SIA Melomys Advisory is the primary contact for requests about your personal information. Its registered details are set out on our Legal information page.
You can reach us at info@melomys-advisory.com, or via the inquiry form on our website.
What information we collect and how
When you submit our contact form, we receive your name, your email address, and the message you write to us. We do not collect any other personal information through the website. We do not collect payment information, and we do not create user accounts.
Why we process your information
When you send us a message through the contact form, you are asking us to respond, so we read your message and reply to it. The limited scope of the information involved, and your reasonable expectation of a reply, mean that doing so does not override your privacy rights or freedoms. In the European Union and the United Kingdom, our legal basis for this is our legitimate interests under Article 6(1)(f) of the GDPR.
How we use your information
We use your name, email address, and message to respond to your inquiry. We do not use this information for marketing unless you ask us to.
How long we keep your information
We retain contact form correspondence for 5 years after our last exchange with you, after which it is deleted. This period reflects standard B2B advisory practice and aligns with applicable record-keeping requirements.
Who can access your information
Your information is accessed by Melomys Advisory staff handling the inquiry. As we operate a shared client relationship system across both our EU and Australian entities, your contact details may be held in that shared system. Both entities are under common ownership and control. We do not sell your personal information or share it with any parties outside the Melomys Advisory group.
Our website contact form is processed by HubSpot, a customer relationship platform we use to receive and manage enquiries. When you submit the form, your name, email address and message are sent to HubSpot and stored in our HubSpot account, which is hosted in HubSpot's European Union data centre. HubSpot acts as our processor and handles your information only on our instructions, under HubSpot's Data Processing Agreement. HubSpot's parent company is in the United States; any transfer of your information to the United States is safeguarded by HubSpot's certification under the EU-US Data Privacy Framework and by the standard contractual clauses in its Data Processing Agreement. HubSpot's privacy policy is available at legal.hubspot.com/privacy-policy.
International transfers
The information you send us through the contact form may be accessed or handled from Australia as well as within the EU.
Australia does not hold a formal adequacy decision from the European Commission. Where your contact form submission is transferred to or accessed from Australia, that transfer takes place on the basis of Article 49(1)(b) GDPR: the transfer is necessary for the performance of pre-contractual steps taken at your request (responding to your inquiry). This derogation is applied on a case-by-case basis for inbound contact inquiries. We do not transfer your information to any other countries.
Cookies and analytics
Our site uses only strictly necessary cookies by default. With your consent, we also use Google Analytics (GA4) to measure website traffic and understand how visitors use our site; Google acts as our data processor. This may collect information such as pages viewed, approximate location (derived from your IP address, which Google does not store), device and browser type, and how you reached our site. Analytics does not run until you select "Accept" on our cookie banner, and you can withdraw your consent at any time by selecting the "Cookie settings" link, which appears near the end of every page on our site. Analytics data is retained for 14 months. Google may process this data in the United States under the EU-US Data Privacy Framework. To decline, select "Reject" on the banner or use "Cookie settings".
Your rights
Wherever you are, you can:
- ask us for a copy of the personal information we hold about you
- ask us to correct anything that is inaccurate
- ask us to delete your information
- ask us to restrict how we use your information
- ask us to give you your information in a portable, machine-readable format
- object to our use of your information where we rely on legitimate interests
We offer these rights to everyone who contacts us. In the European Union and the United Kingdom, we do so in compliance with the GDPR.
To exercise any of these rights, please contact us via the inquiry form on our website or at info@melomys-advisory.com. You can also complain to a privacy regulator, as explained under "How to complain" below.
How to complain
If you are unhappy with how we have handled your personal information, please tell us first at info@melomys-advisory.com. We will acknowledge your complaint and respond within 30 days.
If you are not satisfied with our response, you can take it to a privacy regulator. In Australia that is the Office of the Australian Information Commissioner at oaic.gov.au. In the European Union you can complain to the data protection supervisory authority in your member state of residence. If you are somewhere else, you can contact the privacy regulator in your own country, where there is one.
No automated decision-making
We do not use automated decision-making in connection with contact form submissions. No decision affecting you is made solely by automated means.