1. Our Commitment to Privacy
At CBC Bookkeeping, we understand that financial data is among the most sensitive information a business can hold. We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we handle your personal and financial information.
2. The Types of Information We Collect
To provide expert bookkeeping and BAS services, we collect:
- Identity Information: Full name, date of birth, and identification for AML/CTF compliance.
- Contact Information: Business address, email, and phone numbers.
- Financial & Tax Information: Tax File Numbers (TFN), Australian Business Numbers (ABN), bank account details, credit card statements, and payroll records.
- Business Operational Data: Invoices, receipts, and employee details.
- Technical Data: IP addresses and interaction data when you use our website or client portal.
3. How Information is Collected
We collect information through:
- Direct Interaction: When you sign an engagement letter or fill out a “Contact Us” form.
- Automatic Feeds: Via “Bank Feeds” within cloud accounting software (Xero, MYOB, etc.).
- Third Parties: From the Australian Taxation Office (ATO) or your external Tax Accountant (with your consent).
4. Purpose of Data Collection
We collect your information for the following primary purposes:
- Service Delivery: To perform bank reconciliations, payroll, and BAS lodgments.
- Compliance: To meet our obligations under the Tax Agent Services Act 2009.
- Communication: To provide updates on your financial position or changes in tax law.
- Security: To verify your identity and prevent fraudulent activity.
5. Disclosure and Overseas Data Transfer
We do not sell, rent, or trade your personal information. However, data may be disclosed to:
- Government Bodies: Specifically the ATO and ASIC as required by law.
- Cloud Service Providers: Our primary software providers (e.g., Xero, MYOB, Dext, or Hubdoc) may store data on servers located outside Australia (e.g., USA, Singapore, or New Zealand).
Note: By using our services, you acknowledge that these third parties have their own privacy protocols which we vet for industry standard encryption.
6. Data Security and Storage
We implement multi-layered security to protect your data, including:
- Mandatory Multi-Factor Authentication (MFA) on all accounting platforms.
- End-to-End Encryption for file transfers.
- Secure Disposal: Physical documents are shredded, and digital data is archived according to statutory requirements (usually 7 years).
7. Access and Correction
Under the APPs, you have the right to access the personal information we hold about you. If you believe any information is inaccurate or out of date, please contact us at office@cbcbookkeeping.com.