Privacy policy

Last updated: 9 October 2026.

Form performance

We record browser funnel sessions, the questions shown or answered, validation error categories, timing, industry, device category and acquisition source to understand form drop-off. This performance history does not contain names, contact details or answer text and is retained for up to 90 days. It is separate from saved enquiry records.

Saved and unfinished enquiries

Our industry forms ask for first name, last name, mobile and email at the start. Entering any contact detail accepts the privacy terms shown on the form. Cockatoo saves partial contact details and answers in its admin CRM before final submission, even when the remaining contact fields are unfinished. Unfinished enquiries are accessible only to authorised administrators and are not shared with providers.

If you enter a valid email address, Cockatoo may send enquiry follow-ups after 1, 3, 7, 14 and 21 days without activity. Each stage is sent at most once per enquiry. Private resume links expire 28 days after your most recent activity; links from earlier stages continue to work while the enquiry remains open. You can stop reminders from that link or contact us to request deletion. Final submission stops pending reminders; an email already in delivery cannot be recalled. Saved enquiries remain until authorised deletion or a verified deletion request.

Information we collect

Cockatoo may collect contact details, business details, enquiry answers, consent records, source URLs, and campaign parameters that you submit. Calculators described as browser-only do not transmit the figures entered into them.

How information is used

Submitted information is used to respond to enquiries, provide requested updates, route enquiries to relevant providers, prevent abuse, maintain records, and understand site performance.

Service providers and partners

Cockatoo uses service providers for website hosting, analytics, audience management, and customer relationship management. An enquiry may be shared with a relevant third-party provider when needed to fulfil the request and under the authorisation shown when you enter your contact details. Completed enquiries may be sent directly to relevant lenders, insurance brokers and service providers so they can assess your request and contact you. No separate provider confirmation email is required. Unfinished enquiries remain internal.

Native iOS app

Wallets, transactions, budgets, assets, debts, wealth history and calculator scenarios are stored on your device. They are not uploaded with an enquiry. The app has no bank connection, account-based cloud sync, advertising tracking or third-party analytics SDK. Device backups follow your iOS settings. Exported app backups are readable JSON files and may contain financial and contact information; keep them private.

When you explicitly send a business-loan or insurance enquiry, Cockatoo stores the submitted contact and business details and consent using a Cloudflare-hosted service. Internal email notifications include submitted details for Cockatoo follow-up. Enquiries are managed in Cockatoo’s own CRM. Sharing with a lender or insurer requires separate confirmation naming that provider. Optional marketing permission is separate and starts off.

Loan and insurance enquiries and linked referral/job records remain until authorised admin deletion or a verified deletion request. Anonymous reporting totals may remain. Cockatoo also handles retention and authorised deletion of internal email and case copies. Infrastructure recovery copies and provider logs have separate retention. Local app copies and exported backups remain separately until you delete them. Deleting local app data does not delete a centrally received enquiry or a file backup. A receipt confirms database storage, not email delivery, lender acceptance, loan approval or insurance cover.

For access, correction, deletion or withdrawal of contact or marketing permission, contact Cockatoo with your enquiry reference. We verify requests before acting; a reference alone is not proof of identity. Do not email identity documents, bank passwords or bank statements. A message already sent cannot be recalled.

Your choices

You can unsubscribe from marketing messages using the link in the message. For access, correction, deletion, or a privacy complaint, email support@cockatoo.com.au.