Nepali Tax Agent | Registered Tax Agent | Registered ASIC Agent

Privacy · Confidentiality · TFN Information · Data Security

Privacy Policy

Hamro Accountant Sydney handles personal, financial and taxation information as part of providing tax and accounting services. This policy explains what information we may collect, why we collect it, how it may be used or disclosed, how we protect it, and how you can request access, correction or raise a privacy concern.

Applies to Website & client services
Privacy contact 0483 054 944
Last updated 24 September 2026
Privacy at a glance Only collect what is reasonably needed for the service.

Tax and client information is treated as confidential and is only used or disclosed for legitimate service, legal or authorised purposes.

TFN information is handled under the special Australian rules that apply to tax file numbers.

You may ask to access or correct personal information we hold about you.

Do not send passwords through general website forms. We do not need your myGov password, PIN or security codes to provide professional tax agent services.

Who this policy is for

Privacy information for website visitors, prospective clients, current clients and former clients.

In this policy, “Hamro Accountant Sydney”, “Hamro Accountant”, “we”, “us” and “our” refer to KK Accountants Pty Ltd trading as Hamro Accountant in relation to services provided through the Sydney website. This policy should be read with any engagement letter, TFN collection notice, online-form notice or service-specific consent that applies to your engagement.

01
Foundation

About This Privacy Policy

We are committed to handling personal information responsibly and transparently. This policy explains our usual practices for collecting, holding, using and disclosing personal information in connection with our website and tax, accounting, bookkeeping, BAS, payroll and related services.

Our privacy practices are intended to operate consistently with applicable Australian privacy requirements, including the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) where applicable, and the Privacy (Tax File Number) Rule 2015.

As a registered tax-agent practice, we also have professional confidentiality obligations. Under the Tax Practitioners Board Code of Professional Conduct, information relating to a client's affairs must not be disclosed to a third party without the client's permission unless there is a legal duty to disclose it.

This Privacy Policy is separate from our engagement terms. Your engagement letter describes the specific services, responsibilities, third-party arrangements and permissions that apply to the work you ask us to perform.

02
Personal Information

Information We May Collect and Hold

The information we need depends on the service you request. We aim to collect information that is reasonably necessary for our functions, professional obligations and the agreed service.

Identity & Contact Details

Name, date of birth, address, phone number, email address and other details needed to identify or communicate with you.

Taxation Information

TFN where lawfully required, tax-return information, income, deductions, ATO records, tax debts, study-loan information, Medicare-related details and taxation history.

Financial Information

Bank details where needed for an authorised tax or payment purpose, investment information, rental-property records, business income, expenses, assets, liabilities and transaction records.

Business Information

ABN, entity and ownership details, bookkeeping records, BAS and GST information, invoices, payroll records, super information, employee data and accounting-system information.

Documents & Verification Information

Information from identification documents or other evidence where identity verification, authority or professional due diligence is required.

Website & Technical Information

IP address, browser or device information, pages viewed, approximate session information, referral information, cookies and form-submission metadata where collected by our website systems.

Sensitive information.

Some tax and accounting matters may involve information treated as sensitive under privacy law, such as health-related information relevant to a tax matter. We only seek such information where it is reasonably necessary for the service and where collection is permitted.

03
Protected Identifier

Tax File Number Information

Tax File Numbers are subject to special privacy rules. Where we lawfully receive or collect your TFN for tax-agent services, we handle TFN information in accordance with applicable taxation law, the Taxation Administration Act 1953 and the Privacy (Tax File Number) Rule 2015.

Why we may collect it

To assist with taxation or superannuation matters where use of the TFN is authorised and reasonably necessary for the service.

How it may be used

Only for purposes permitted by applicable taxation, superannuation or other relevant law, including dealing with the ATO on your behalf.

How it is protected

Access should be restricted to people who need the information for an authorised purpose, with reasonable safeguards against misuse or disclosure.

You are not committing an offence by refusing to provide your TFN to us. However, if your TFN or other required tax information is necessary for us to identify your tax record or provide the agreed tax-agent service, we may be unable to complete that service without it.

A TFN is not used as a general-purpose identity number. Please do not place your TFN in an ordinary contact or enquiry form unless the form specifically tells you that TFN collection is authorised and provides the relevant collection notice.

04
Collection

How We Collect Personal Information

We usually collect information directly from you, but authorised third-party and government sources may also be used when necessary to provide the service.

01
Directly from you

Through phone calls, meetings, email, website forms, online questionnaires, secure document processes and information you provide during an accounting or tax engagement.

02
From authorised representatives

From a spouse, business partner, employee, bookkeeper, lawyer, previous accountant or other representative where you authorise the exchange or it is otherwise legally permitted.

03
From government or professional systems

From the ATO or other government, registry or professional systems where we are authorised or legally permitted to access information for the agreed service.

04
From accounting and cloud systems

From bookkeeping, payroll, tax-preparation, document-storage or accounting software that you authorise us to access or that is used as part of the engagement.

If you give us personal information about another person, you should only do so where you are authorised to provide it and where the information is relevant to the service.

You can browse general information on our website without identifying yourself. However, tax and accounting services usually cannot be provided anonymously or under a pseudonym because identity, authority and taxation information are often necessary to perform the work.

05
Purpose

Why We Collect, Hold and Use Information

respond to enquiries and communicate with you about requested services;

establish, manage and document our professional engagement with you;

verify identity, authority and client details where required;

prepare, review and lodge tax returns, BAS or other authorised forms and reports;

provide bookkeeping, payroll, Xero, business accounting or related services;

communicate with the ATO, regulators or other authorised parties on your behalf;

manage fees, billing, administration, client files and professional records;

meet taxation, privacy, professional, regulatory, insurance and legal obligations;

protect our clients, systems and business against fraud, misuse and cyber incidents;

maintain and improve our website, service processes and client experience.

If you do not provide information we reasonably need.

We may not be able to answer a particular enquiry, verify your identity, prepare an accurate return, lodge an authorised document, contact the ATO on your behalf or provide the requested accounting service.

06
Client Confidentiality

How Personal Information May Be Disclosed

We treat information relating to a client's affairs as confidential. We do not disclose that information to a third party without the client's permission unless we have a legal duty to do so.

Depending on your service and authority, personal information may be disclosed to or exchanged with:

Recipient / category Why information may be shared
Australian Taxation Office

Tax returns, activity statements, tax-agent communications and other authorised taxation matters.

Government bodies or regulators

Where required or authorised by law, a lawful notice, regulatory obligation or professional requirement.

Professional advisers

Lawyers, auditors, specialists or other advisers where authorised and reasonably necessary for the engagement.

Accounting / tax software providers

To prepare, process, store or support the accounting and tax work you have engaged us to perform.

Cloud, IT and communications providers

To provide secure hosting, email, document storage, forms, support or technology used to operate the practice.

Other parties you authorise

For example a spouse, business partner, bookkeeper, previous accountant or representative where you give permission.

Client permission may be obtained through an engagement letter, service-specific consent, written authority or another appropriate communication that explains the relevant disclosure.

07
Technology

Cloud Systems and Third-Party Service Providers

Like most modern accounting practices, we may use carefully selected third-party systems to operate our website and provide professional services. Our current engagement information identifies categories such as website hosting, WordPress services, Google services used for security and email, document storage, accounting systems and tax-preparation software.

We may also use online forms, including Microsoft Forms or similar services, where appropriate for a particular workflow. The collection notice shown with a form may provide additional information that applies to that form.

You
Hamro Accountant
Approved Service Provider

Where client information needs to be disclosed to a third-party provider in order to deliver tax or BAS agent services, we address the disclosure through the relevant permission, engagement terms and professional confidentiality obligations.

08
Cross-Border Processing

Overseas Storage or Disclosure

Some technology and cloud providers operate global infrastructure. As a result, information processed through a provider may in some circumstances be stored, backed up or processed outside Australia.

The countries involved can vary according to the provider, service configuration and infrastructure in use. Where a particular overseas disclosure is relevant to your engagement, we will address it in the engagement terms, collection notice or other consent process where required and take reasonable steps required by applicable privacy and professional obligations.

Third-party privacy terms.

External software and cloud providers may also have their own privacy policies describing how they process information on their systems. Their own privacy practices do not replace our obligations for client information that we control.

09
Website Privacy

Website Forms, Cookies and Technical Data

When you visit our website, our website platform or service providers may process technical information required to operate, secure and improve the site. This can include IP address, browser and device information, pages viewed, referral information and session data.

Cookies or similar technologies may be used for functions such as remembering preferences, maintaining website functionality, understanding traffic or measuring site performance. You can control many cookies through your browser settings, although disabling essential cookies may affect some site functions.

General enquiry forms Send the minimum information needed for us to contact you.

Unless we specifically provide a secure process and collection notice for the purpose, please do not submit your TFN, myGov password, myGov security code, banking login credentials, director ID, identity documents or other highly sensitive records through an ordinary contact or enquiry form.

10
Protection

How We Protect Personal Information

We take reasonable steps appropriate to the information and systems involved to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Access controls

Access to client information is limited according to role and service need.

Protected systems

We use professional website, communications, accounting and cloud systems appropriate to our work.

Transmission safeguards

Secure website connections and encryption are used where supported by the systems involved.

Document handling

We aim to use appropriate processes for storing, accessing, sharing and disposing of client records.

No internet, email, website, software or cloud system can be guaranteed to eliminate every security risk. You should also protect your own devices, email account and passwords, and verify any unusual request for sensitive information or changed payment instructions.

11
Records

How Long We Keep Information

We keep personal information and professional records for as long as reasonably necessary for the purpose for which they were collected, to provide ongoing services, maintain appropriate working papers, deal with disputes or audits, and comply with taxation, professional, insurance and legal requirements.

5+ years
Tax-agent records At least five years where required for our tax-agent service records.

Our engagement terms state that records relating to tax-agent services are retained for at least five years, or longer where required by law or reasonably necessary for an ongoing matter.

Some records may need to be kept longer because they remain relevant to an unresolved tax matter, asset, capital gain, dispute or legal requirement. When personal information is no longer required to be retained, we take reasonable steps to securely destroy or de-identify it where required and appropriate.

12
Your Information

Access and Correction

You may ask us to provide access to personal information we hold about you or to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Request access

Contact us and describe the information you want to access. We may need to verify your identity before releasing personal information.

Request correction

Tell us what appears incorrect and, where useful, provide the information needed to update the client record.

We will respond within a reasonable period. In some circumstances the law may permit or require us to refuse access or correction. If that occurs, we will explain the position where legally permitted.

13
Communications

Service Messages and Marketing

We may send service communications that are reasonably necessary to manage your enquiry or engagement, such as document requests, appointment information, lodgement updates, due-date reminders, billing information or important service notices.

Where permitted, we may also send information about our tax, accounting or related services. You may ask us to stop sending marketing communications. Opting out of marketing does not stop communications that are reasonably necessary to deliver an existing service or meet a legal or professional obligation.

14
Incident Response

Data Breaches

If we become aware of a suspected data breach, we will take steps appropriate to the circumstances to contain the incident, assess the information involved, evaluate potential harm and reduce further risk.

Where the Notifiable Data Breaches scheme applies and a breach meets the legal threshold for an eligible data breach, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

01 Contain
02 Assess
03 Notify if required
04 Review
15
Concerns

How to Make a Privacy Complaint

If you believe we have mishandled your personal information, please contact us first and explain what happened. Include enough information for us to identify the relevant client record, communication, form or service, but do not send passwords or other unnecessary sensitive information.

1
Contact Hamro Accountant Sydney

Tell us the nature of the privacy concern and the outcome you are seeking.

2
We review the matter

We may ask questions, review relevant records and take corrective action where appropriate.

3
We respond

We aim to respond within a reasonable period and explain the outcome or next steps.

If you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC). Client-confidentiality issues may also be subject to the professional rules administered by the Tax Practitioners Board.

17
Updates

Changes to This Policy

We may update this Privacy Policy when our services, systems, legal requirements or privacy practices change. The current version will be published on this page with the updated date shown at the top.

Hamro Accountant Sydney Clear tax support. Careful handling of client information.
0483 054 944