Last checked 25 September 2026 against the Privacy Act 1988 compilation C2026C00227 (compilation date 4 June 2026)
1. Who we are
This policy is from Wani Meridian Pty Ltd (ABN 97 701 307 020) trading as AMLCompliant ("we", "us"). Contact us about privacy at [email protected].
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988. This policy is our privacy policy under APP 1. APP 1.3 APP 1.4
2. The short version
- We collect only what we need to sell you the Kit, deliver Setup and answer your emails.
- Our website sets no cookies of its own and runs no analytics, advertising or tracking scripts.
- We never see your full card number. Stripe handles payment.
- We do not sell personal information, and we do not send marketing emails.
- Some of our providers are outside Australia. We name each one and its country below.
3. What we collect, and why
When you visit the website. Our web server, which runs on Hostinger's equipment in Malaysia, and Cloudflare, which carries traffic to the site, record standard technical details of each request: your IP address, the date and time, the page asked for and your browser type. We use these only to keep the site working and secure. We do not use them to identify you.
When you buy. Stripe runs the checkout page. From Stripe we receive your name, email address, business name, billing details, what you bought, the amount paid, and your card type and last four digits. We use these to deliver your purchase, issue your tax invoice, answer questions about your order and keep our business records.
When you buy Setup. Your intake questionnaire asks for information about your firm and its people:
- your business details (legal and trading name, ABN, structure, addresses, website, turnover band, services, client types and countries);
- your AUSTRAC enrolment status and enrolment identifier (never your AUSTRAC Online password);
- the names and roles of your personnel, and whether your compliance officer lives in Australia;
- the names and contact details of the owner, the compliance officer and the senior manager who will approve the program;
- the names and dates of birth of your beneficial owners, if your firm has any.
We use this information only to prepare your documents, hold the calls, run the training and deliver your evidence pack. If you do not give us the information, we cannot tailor your documents. We do not ask for sensitive information such as health details. Please do not send it.
When you email us. We keep your email and our reply so that we can answer you and keep a record of what was agreed.
When you use a feedback link. The visit is recorded in our server log like any other page request. We do not collect anything else.
4. Information about other people
A Setup intake contains details of your staff and, where relevant, your beneficial owners. We collect these from you, because it is not practicable for us to collect them from each person. APP 3.6 Please tell the people you name that you are giving us their details, and point them to this policy.
5. Who helps us, and where they are
We share personal information only with the providers below, and only what each needs to do its job for us. We do not share it with anyone else unless the law requires it.
| Provider | What it does for us | What it receives | Where it is |
|---|---|---|---|
| Stripe | Takes payments and issues receipts and tax invoices | Your checkout details. You enter your card details on Stripe's page, not ours | Stripe says it transfers personal data to other countries, including the United States and India |
| Hostinger | Hosts our email at [email protected], and runs the server for this website | Every email you send us, including a completed intake; the technical details of each visit in our server log | Hostinger, UAB is based in Lithuania. Our web server is in Kuala Lumpur, Malaysia. For email, Hostinger says it stores data in the United Kingdom, the Netherlands, Lithuania or Cyprus, and on servers in other countries, including the United States, Brazil, Singapore and Indonesia |
| Anthropic | AI tools that help us draft Setup documents from your intake, sort and summarise incoming email, and draft replies | Your intake answers when we draft your documents; the sender details and text of incoming emails | Anthropic PBC, United States |
| Telegram | Internal messaging that alerts us when a new email arrives | An alert with the sender's name and email domain (not the full address), the subject and a short summary of what the email asks. When we open an alert, also the first part of the email and any reply we draft, with the address it is going to | Telegram Group Inc. is based in the British Virgin Islands, with a group company in Dubai, United Arab Emirates. It stores messages in data centres in several countries |
| Cloudflare | Carries traffic to our website and protects it from attacks | Technical details of each visit, including your IP address | Cloudflare, Inc., United States. It runs servers in many countries, so a visit may be handled outside Australia |
A person at AMLCompliant reviews every document and every email reply that an AI tool helps to draft before it is sent. Cloudflare may set a short-lived cookie to tell people from automated traffic.
6. Sending information overseas
Most of the providers above are outside Australia, so using them means your personal information is disclosed overseas: to the United States (Stripe, Anthropic and Cloudflare), India (Stripe), Malaysia, Lithuania, the Netherlands, the United Kingdom, Cyprus, Brazil, Singapore and Indonesia (Hostinger), the British Virgin Islands and the United Arab Emirates (Telegram), and other countries where these providers keep servers.
Before we disclose personal information to someone overseas, we must take reasonable steps to make sure they do not breach the Australian Privacy Principles. APP 8.1 We do this by using established providers that publish privacy and security commitments, and by sending each one only what its task needs. If an overseas provider mishandles your information, you can complain to us, and we deal with the complaint as set out below.
7. Keeping it safe
We keep personal information in the accounts of the providers above. Access is limited to the people who do the work. We use encrypted connections to our email and to our providers. APP 11.1 If a data breach is likely to cause serious harm, we will tell the people affected and, where the Privacy Act requires it, the Office of the Australian Information Commissioner (OAIC).
8. How long we keep it
- Setup intakes and our working files: while we do the work, and for 2 years after we send your finished documents. Then we delete them. After that, if you ask for a correction, we work from the copy you send us.
- Emails, and the Telegram alerts about them: for 2 years after our last exchange, unless we need them for an open matter.
- Payment and invoice records: for as long as tax law requires us to keep them.
- Web server logs: only as long as we need them to keep the site working and secure.
When we no longer need personal information, we delete it or remove what identifies you. APP 11.2
9. Access and correction
You can ask for a copy of the personal information we hold about you, and ask us to correct it if it is wrong, out of date or incomplete. APP 12.1 APP 13.1 Email [email protected]. We answer within 30 days and do not charge for access. If we refuse a request, we tell you why in writing and how you can complain. APP 12.9 APP 13.3
10. Complaints
If you think we have mishandled your personal information, email [email protected] and tell us what happened. We acknowledge your complaint within one business day and aim to resolve it within 30 days.
If you are not satisfied with our answer, you can complain to the OAIC. The OAIC asks you to complain to us first, and it takes complaints in writing. s 40(1A) OAIC, Privacy complaints See oaic.gov.au/privacy/privacy-complaints (opens in a new window) or phone 1300 363 992. The OAIC decides whether it can deal with a complaint.
11. Automated decisions
We do not use software to make decisions that significantly affect your rights or interests. Software helps us sort email and draft documents. A person reads the result and decides.
12. Changes to this policy
We will update this policy if what we collect, the providers we use or where they are changes. Each version has a new number, and the version on this page is the current one. See also our terms of use and about us.