1. Introduction to Our Cookie Policy
This Cookie Policy explains how ASSET PACIFIC PTY LTD (ACN Registered, Level 7/303 Collins Street Melbourne VIC 3000) uses cookies and similar automated technologies when you access our corporate website and digital client portals.
As a fiduciary wholesale asset stewardship firm, our digital architecture prioritizes security, privacy, and minimalism. We do not deploy third-party advertising tracking networks, behavioral remarketing pixels, or invasive commercial data harvesting.
This policy should be read together with our Privacy Policy, which describes how we collect, use, disclose, and retain personal information generally, and with our Terms of Service, which govern your use of this website. Where this Cookie Policy refers to "cookies", the term also covers comparable local storage technologies, including browser local storage, session storage, and pixel tags, used for the limited purposes described below.
2. Categories of Cookies Deployed
Our website utilizes strictly necessary and functional cookies essential for secure navigation. Cookies are small text files placed on your device that allow a website to recognise a returning browser session. They may be session-based (deleted when the browser closes) or persistent (retained for a defined period), and may be set directly by us (first-party) or by an infrastructure provider acting on our instructions (third-party).
- Strictly Necessary Security Cookies: Session tokens that verify user authentication, maintain TLS/SSL encrypted session state, and protect interactive forms against Cross-Site Request Forgery (CSRF) attacks. These cookies cannot be switched off through a consent banner because the portal cannot operate securely without them.
- Performance & Technical Cookies: Aggregated technical performance metrics used strictly to evaluate portal accessibility, optimize response times, and verify server uptime. No personal identity data is captured, and records are held only in aggregate form.
- Functional Preference Cookies: Temporary local storage identifiers that record user interface preferences, such as selected fee estimator parameters or portal accessibility settings, so that your selections persist between visits.
- Load-Balancing & Routing Cookies: Short-lived identifiers that direct your request to the same server instance during a session, preventing interrupted form submissions and preserving the integrity of secure document uploads.
3. Third-Party Services
Our digital portal relies exclusively on essential web infrastructure providers operating under strict commercial privacy standards to ensure secure portal operation and statutory data protection. These providers are limited to the Australian-based managed hosting service that operates our web application, a content delivery network used to accelerate the delivery of static assets, publicly distributed typography and icon libraries referenced by our pages, and the secure email gateway used to transmit mandate correspondence.
Each provider processes data solely under written data processing arrangements consistent with Australian Privacy Principle 8 and is contractually prohibited from using portal traffic data for advertising, profiling, or any independent commercial purpose. We do not embed third-party advertising pixels, social media tracking widgets, cross-device identity graphs, affiliate attribution networks, or tag managers capable of unrestricted data collection.
We do not operate a consent management platform that sells or syndicates visitor data to advertising partners, and we do not participate in real-time bidding, programmatic audience segmentation, or lookalike audience creation of any kind.
4. User Control & Disabling Cookies
You can choose to disable or block cookies through your web browser settings at any time. Most browsers allow you to view the cookies stored on your device, delete individual cookies, block cookies from specific sites, and set a preference to reject all third-party cookies. Comparable controls are available in the settings of mobile browsers and in the privacy settings of most modern operating systems.
However, disabling strictly necessary security cookies may impede the proper operation of the interactive fee estimator and secure document transmission portal. Specifically, if session and CSRF protection cookies are blocked, you may be unable to submit enquiry forms, retain estimator inputs between pages, or complete authenticated document uploads, and you may be required to re-enter information in each new session.
We do not use cookie walls or conditional access gating that would require you to accept non-essential tracking in order to view this website. Blocking optional functional cookies will not restrict access to any statutory disclosure, policy document, or corporate information page.
5. Cookie Register: Purposes and Retention Periods
The following register summarises the cookie classes we deploy, the purpose of each, and the period for which each is retained. No cookie in this register is used for advertising, cross-site behavioural profiling, or the construction of commercial audience segments.
- Authentication Session Token — Category: strictly necessary. Purpose: maintains an authenticated portal session for verified wholesale clients. Retention: session only; removed when the browser is closed or upon logout.
- CSRF Protection Token — Category: strictly necessary. Purpose: validates that form submissions originate from our own portal and not from a forged request. Retention: session only.
- Load-Balancer Affinity Identifier — Category: strictly necessary. Purpose: routes consecutive requests to the same server instance during a session. Retention: up to 24 hours.
- Interface Preference Store — Category: functional. Purpose: remembers selected fee estimator parameters, language preference, and accessibility settings. Retention: up to 12 months, or until you clear your browser storage.
- Aggregate Performance Counters — Category: performance. Purpose: records non-identifying counts of page requests and error events to monitor portal uptime and response times. Retention: up to 90 days in aggregate form.
Because the specific identifier values in your browser are generated at the time of your visit, the register above describes cookie classes rather than individual names. You may inspect the exact cookie set for your session at any time using the cookie viewer built into your browser's developer tools or privacy settings.
6. Analytics, Aggregate Metrics and "Do Not Track"
Where we measure website performance, we rely on aggregated server-side metrics that record the number of requests, response times, error rates, and coarse geographic region. These metrics are compiled without personal identifiers and are not linked to individual client records. We do not use cross-website tracking, fingerprinting techniques, device graphs, or probabilistic identity matching to supplement them.
Some browsers transmit a "Do Not Track" (DNT) signal, and some jurisdictions require us to acknowledge it. Because this website deploys no behavioural advertising or cross-site tracking technologies, a DNT signal does not require us to change our data practices; however, we honour it as an expression of preference and treat it as an instruction not to enable any optional analytics beyond the aggregate server-side metrics described above.
We do not sell analytics data, share it with advertising intermediaries, or permit any processor to combine our aggregate metrics with data from other websites or offline sources.
7. Consent, Legal Basis and Browser-Level Choices
Strictly necessary cookies are deployed on the basis of our legitimate interest in operating a secure website and protecting the confidentiality of client information, and do not require opt-in consent. Functional and performance cookies are deployed on the basis of your implied consent through continued use of the portal, and can be refused or removed at any time through your browser controls without affecting your access to statutory disclosures or corporate information pages.
Because we do not deploy advertising or cross-site tracking cookies, this website does not present a multi-tier consent banner soliciting permission for marketing technologies. Blocking all cookies through your browser settings remains fully effective and will not prevent you from reading any policy, governance, or portfolio disclosure published on this site.
If you access the secure client portal, certain session cookies are technically indispensable to authenticated access. In that limited context, declining them will prevent login rather than degrade functionality, and we will inform you of that consequence before you proceed.
8. Retention, Deletion and Interaction with the Privacy Act
Session cookies are automatically deleted when your browsing session ends. Persistent functional cookies expire at the end of the period stated in the register above, or earlier if you clear your browser storage. Aggregate performance counters are retained for no longer than 90 days and are then discarded or overwritten.
Cookie-derived information is handled consistently with the Australian Privacy Principles. Where an identifier could reasonably be linked to an identified individual, it is treated as personal information and is subject to the access, correction, security, and retention standards described in our Privacy Policy. Where information is genuinely aggregated and non-identifying, it falls outside the scope of that Act.
Deleting cookies does not delete records held in our client registry, unit register, or AML/CTF verification archive, because those records are maintained under separate statutory obligations and are not stored in your browser.
9. Inquiries, Complaints and Updates
We review and update this Cookie Policy periodically to reflect technological and statutory changes, including changes in the infrastructure providers we engage and any reform to the Privacy Act 1988 (Cth) or OAIC guidance affecting digital identifiers. The current version is published on this page and takes effect from the date of publication.
Inquiries regarding digital data security, cookie classes, or the infrastructure providers supporting this portal should be directed to support@assetpacific.net, marked for the attention of the Privacy Officer. Complaints about the handling of cookie-derived information are managed under the complaints process described in our Privacy Policy, and unresolved complaints may be referred to the Office of the Australian Information Commissioner (OAIC).
Privacy Officer | ASSET PACIFIC PTY LTD
Level 7/303 Collins Street Melbourne VIC 3000, Australia
Email: support@assetpacific.net | Phone: 03 8362 1904
Response Timeframe: Within 30 calendar days of formal written receipt.