Privacy policy

Two kinds of information

This policy covers information about you — someone visiting this site, enquiring, or engaging us.

It is separate from the information we handle on behalf of client firms. When an accounting firm or business engages us, we work inside their systems on their clients' records. That information stays under the control of the client firm, which remains responsible for it under the Privacy Act, including when it is handled overseas. We act only on that firm's instructions and under a written confidentiality and service agreement.

What we collect from this website

When you book a call, we collect what you enter in the form:

• Your first and last name
• Your business name, and the type of business you select
• Your email address
• Your phone number and website, if you provide them
• Anything you write in the message field
• How you heard about us, if you tell us
• The date and time you select for the call

We also collect limited technical information automatically: pages visited, approximate location derived from your IP address, device and browser type, and the site that referred you. This comes from Google Analytics and from our host's server logs.

What we do not collect here

This website does not take payment, so we collect no card or bank details through it. We do not ask for sensitive information as the Privacy Act defines it — health, racial or ethnic origin, political or religious views, sexual orientation, criminal record or biometrics — and ask that you do not include any in the message field.

Why we collect it

• To hold the appointment you booked and to prepare for the call
• To reply to your enquiry and follow up about it
• To provide services you engage us for, and to administer that engagement
• To understand which pages are useful and improve the site

Who else receives it

We do not sell personal information and we do not share it for anyone else's marketing. These providers handle it on our behalf:

• Supabase Inc. (United States) — stores bookings and runs sign-in for our staff portal
• Vercel Inc. (United States) — hosts this website and serves every page request
• Google LLC (United States) — Google Analytics, and Google Fonts, which receives your IP address when a page loads a font
• Our own team, which works from the Philippines under Australian management

We may also disclose information where the law requires it.

Information sent overseas

Our delivery team is based in the Philippines, so personal information you give us is accessible there.

The providers named above are United States companies and may store or process data in data centres outside Australia.

Before any client data is shared with us, we sign a confidentiality agreement and a service agreement covering data handling. Access is through named logins with role-based permissions, and is removed immediately when a staff member leaves. See our Security & Compliance page for the full set of controls.

Cookies and analytics

Google Analytics sets cookies to tell repeat visits apart and to measure which pages are read. It gives us aggregate numbers, not a way to identify you by name.

You can block or delete cookies in your browser settings, or install Google's opt-out browser add-on. Doing either will not stop you using this site. Our staff portal is excluded from analytics entirely.

How long we keep it

We keep booking details for as long as needed to respond and to maintain a record of the engagement, and then delete them. If you ask us to delete your details sooner and we are not required to keep them, we will.

Getting access, or correcting something

You can ask what personal information we hold about you and ask us to correct it. Email us and we will respond within a reasonable time. We may need to verify who you are first. If we cannot give you access, we will explain why in writing.

If your request concerns information we handle on behalf of a client firm, we will direct you to that firm, which controls it.

If you have a complaint

Email us with the detail and we will investigate and respond. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy as our services or systems change. The date at the top shows when it was last revised, and the current version always sits at this address.