Foda Strategy Data Security Policy

Last updated: 23rd April 2026

This document explains what information Foda Strategy collects when you use Foda Index, how it is held, how it is used, and what rights you have over it. 

What Information Do We Collect

When you complete the Foda Index survey, we collect your name, venue name, and business email address. We also collect a broad range of revenue figures, your venue's floor area in m², your approximate number of full-time equivalent staff, and your responses to operational questions about energy use, procurement, waste, and trading patterns.

We do not collect bank details, tax file numbers, or precise financial figures.

How is Your Data Held 

Your data is held securely in cloud-based systems operated by established enterprise providers. All data processing occurs under formal agreements with each provider.

We take all reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. If you have a specific question about our technical arrangements, contact us at hello@fodastrategy.com.

How Your Data is Used

Your data is used for two purposes only.

• To generate and deliver your individual benchmark report.

• To contribute to anonymised industry benchmarks, where no individual venue is ever identifiable.

 

Your personally identifiable information is never sold, shared with third parties for commercial purposes, or disclosed to landlords, competitors, industry bodies, or any other party without your consent.

Your Rights

Under Australian and New Zealand privacy law, you have the right to access the personal information we hold about you, request correction of any inaccurate information, request deletion of your personal data, and withdraw consent to data use at any time.

You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (www.oaic.gov.au) or the Office of the New Zealand Privacy Commissioner (www.privacy.org.nz).

To exercise any of these rights, contact us at hello@fodastrategy.com. We will respond within 30 days.

Data Breaches 

If a data breach occurs that is likely to result in serious harm, we will act in accordance with the Australian Notifiable Data Breaches scheme and the New Zealand Privacy Act 2020, including notifying affected individuals and the relevant regulator where required.

Policy Review

This policy is reviewed annually and updated following any significant change to our systems or applicable law.

Contact Us

If you have any questions about this Privacy Policy, please contact us by email at: hello@fodastrategy.com.au