Privacy policy.

SECTION 1

Names, contact details, date of birth, addresses, Tax File Numbers, ABN, identity documents, bank account details for refunds, income and expense records, dependant details, and prior ATO correspondence — only what's needed for the engagement. Website visitors: IP address, browser/device data, pages viewed. We do not build marketing profiles.

SECTION 2

Directly from you (engagement letter, intake forms, client portal, in person). With your consent, from the ATO via the registered-agent portal, your prior accountant via an ethical-clearance request, or your bank/employer/super fund where you've authorised a specific request.

SECTION 3

To deliver the engagement (prepare and lodge returns, BAS, financial statements), to verify your identity as required by the Tax Agent Services Act 2009, to communicate with you, and to invoice. We do not sell information and we never market without your explicit opt-in.

SECTION 4

TFNs sit under the Privacy (Tax File Number) Rule 2015. We collect them only when lawful and necessary for tax administration, use them only to identify you to the ATO, and disclose them only where law requires (typically, lodgement on your behalf). Stored encrypted at rest, separately from other data, with access logged.

SECTION 5

Before lodging anything, we verify your identity under the Tax Agent Services Act 2009 and TPB Proof of Identity guidance (TPB(PN) 5/2022). From 1 July 2026, AML/CTF Tranche 2 extends customer-due-diligence obligations to accountants and tax agents — we may match information you provide against the Australian Business Register or the Document Verification Service where the law requires. We record that verification took place but do not retain copies of identity documents.

SECTION 6

We do not engage children under 16 as primary clients. Where a client's tax involves a dependent minor (for example, family tax benefit reconciliation), we collect only the information necessary for that purpose, and only on the parent or guardian's authority.

SECTION 7

The ATO, TPB, ASIC, and the Australian Business Register where required. A small set of technology providers under contract (Supabase Sydney for portal and storage, Resend for transactional email, Vercel for website hosting, Xero/MYOB/QuickBooks for bookkeeping). Other tax agents only with your written consent. Law enforcement only under a lawful demand.

SECTION 8

Client records (TFN, identity, working papers) are stored in Australia (Supabase Sydney). Two operational systems involve overseas processing: transactional email via Resend (US) and website hosting via Vercel (US). Both have been assessed as taking reasonable steps consistent with Australian Privacy Principle 8.

SECTION 9

Digital records on encrypted Australian servers (AES-256 at rest, TLS 1.2+ in transit). Paper records in locked storage. Records kept at least five years per the Income Tax Assessment Act 1936 and Tax Agent Services Act 2009. Notifiable Data Breaches scheme applies — we notify affected individuals and the OAIC where required.

SECTION 10

Under the APPs you can request access, correction, or deletion (subject to our record-retention obligations). Email privacy@taxtracker.com.au or write to the postal address below. We respond within 30 days.

SECTION 11

Essential cookies keep the client portal working. We use Google Analytics 4 with IP anonymisation for aggregate traffic on marketing pages only — never inside the portal. No advertising or retargeting trackers. Disable via browser settings or a content blocker.

SECTION 12

Email privacy@taxtracker.com.au — acknowledged within 5 business days, resolved within 30. If unresolved you can escalate to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) for privacy matters, or the Tax Practitioners Board (tpb.gov.au) for matters involving our conduct as a registered tax agent.

SECTION 13

Reviewed at least annually. Material changes notified to current clients by email at least 30 days before taking effect. The latest version is always at taxtracker.com.au/legal/privacy with the 'last updated' date at the top.

SECTION 14

Privacy: privacy@taxtracker.com.au General: info@taxtracker.com.au Postal: 26 Basildon Crescent, Strathtulloh VIC 3338 Phone: (03) 8732 2126 Tax Tracker Pty Ltd · ABN 30 681 334 289 · Registered Tax Agent · TAN 26321143 · Liability limited by a scheme approved under Professional Standards Legislation.