Privacy · Confidentiality · TFN Information · Data Security
Privacy Policy
Hamro Accountant Sydney handles personal, financial and taxation
information as part of providing tax and accounting services. This
policy explains what information we may collect, why we collect it,
how it may be used or disclosed, how we protect it, and how you can
request access, correction or raise a privacy concern.
Applies to
Website & client services
Privacy contact
0483 054 944
Last updated
24 September 2026
Privacy at a glance
Only collect what is reasonably needed for the service.
Tax and client information is treated as confidential and is only
used or disclosed for legitimate service, legal or authorised purposes.
TFN information is handled under the special Australian rules that
apply to tax file numbers.
You may ask to access or correct personal information we hold about you.
Do not send passwords through general website forms.
We do not need your myGov password, PIN or security codes to provide
professional tax agent services.
Who this policy is for
Privacy information for website visitors, prospective clients,
current clients and former clients.
In this policy, “Hamro Accountant Sydney”, “Hamro Accountant”,
“we”, “us” and “our” refer to KK Accountants Pty Ltd trading as
Hamro Accountant in relation to services provided through the Sydney
website. This policy should be read with any engagement letter, TFN
collection notice, online-form notice or service-specific consent that
applies to your engagement.
01
Foundation
About This Privacy Policy
We are committed to handling personal information responsibly and
transparently. This policy explains our usual practices for collecting,
holding, using and disclosing personal information in connection with
our website and tax, accounting, bookkeeping, BAS, payroll and related services.
Our privacy practices are intended to operate consistently with
applicable Australian privacy requirements, including the
Privacy Act 1988 (Cth), the
Australian Privacy Principles (APPs) where applicable,
and the Privacy (Tax File Number) Rule 2015.
As a registered tax-agent practice, we also have professional
confidentiality obligations. Under the Tax Practitioners Board Code
of Professional Conduct, information relating to a client's affairs
must not be disclosed to a third party without the client's permission
unless there is a legal duty to disclose it.
This Privacy Policy is separate from our engagement terms. Your
engagement letter describes the specific services, responsibilities,
third-party arrangements and permissions that apply to the work you
ask us to perform.
02
Personal Information
Information We May Collect and Hold
The information we need depends on the service you request. We aim to
collect information that is reasonably necessary for our functions,
professional obligations and the agreed service.
Identity & Contact Details
Name, date of birth, address, phone number, email address and
other details needed to identify or communicate with you.
Taxation Information
TFN where lawfully required, tax-return information, income,
deductions, ATO records, tax debts, study-loan information,
Medicare-related details and taxation history.
Financial Information
Bank details where needed for an authorised tax or payment purpose,
investment information, rental-property records, business income,
expenses, assets, liabilities and transaction records.
Business Information
ABN, entity and ownership details, bookkeeping records, BAS and
GST information, invoices, payroll records, super information,
employee data and accounting-system information.
Documents & Verification Information
Information from identification documents or other evidence where
identity verification, authority or professional due diligence is required.
Website & Technical Information
IP address, browser or device information, pages viewed,
approximate session information, referral information, cookies
and form-submission metadata where collected by our website systems.
Sensitive information.
Some tax and accounting matters may involve information treated as
sensitive under privacy law, such as health-related information
relevant to a tax matter. We only seek such information where it is
reasonably necessary for the service and where collection is permitted.
03
Protected Identifier
Tax File Number Information
Tax File Numbers are subject to special privacy rules. Where we
lawfully receive or collect your TFN for tax-agent services, we handle
TFN information in accordance with applicable taxation law, the
Taxation Administration Act 1953 and the
Privacy (Tax File Number) Rule 2015.
Why we may collect it
To assist with taxation or superannuation matters where use of the
TFN is authorised and reasonably necessary for the service.
How it may be used
Only for purposes permitted by applicable taxation,
superannuation or other relevant law, including dealing with the ATO on your behalf.
How it is protected
Access should be restricted to people who need the information for
an authorised purpose, with reasonable safeguards against misuse or disclosure.
You are not committing an offence by refusing to provide
your TFN to us. However, if your TFN or other required tax
information is necessary for us to identify your tax record or
provide the agreed tax-agent service, we may be unable to complete
that service without it.
A TFN is not used as a general-purpose identity number. Please do
not place your TFN in an ordinary contact or enquiry form unless
the form specifically tells you that TFN collection is authorised
and provides the relevant collection notice.
04
Collection
How We Collect Personal Information
We usually collect information directly from you, but authorised
third-party and government sources may also be used when necessary to
provide the service.
01
Directly from you
Through phone calls, meetings, email, website forms, online
questionnaires, secure document processes and information you
provide during an accounting or tax engagement.
02
From authorised representatives
From a spouse, business partner, employee, bookkeeper, lawyer,
previous accountant or other representative where you authorise
the exchange or it is otherwise legally permitted.
03
From government or professional systems
From the ATO or other government, registry or professional
systems where we are authorised or legally permitted to access
information for the agreed service.
04
From accounting and cloud systems
From bookkeeping, payroll, tax-preparation, document-storage or
accounting software that you authorise us to access or that is
used as part of the engagement.
If you give us personal information about another person, you should
only do so where you are authorised to provide it and where the
information is relevant to the service.
You can browse general information on our website without identifying
yourself. However, tax and accounting services usually cannot be
provided anonymously or under a pseudonym because identity, authority
and taxation information are often necessary to perform the work.
05
Purpose
Why We Collect, Hold and Use Information
respond to enquiries and communicate with you about requested services;
establish, manage and document our professional engagement with you;
verify identity, authority and client details where required;
prepare, review and lodge tax returns, BAS or other authorised forms and reports;
provide bookkeeping, payroll, Xero, business accounting or related services;
communicate with the ATO, regulators or other authorised parties on your behalf;
manage fees, billing, administration, client files and professional records;
meet taxation, privacy, professional, regulatory, insurance and legal obligations;
protect our clients, systems and business against fraud, misuse and cyber incidents;
maintain and improve our website, service processes and client experience.
If you do not provide information we reasonably need.
We may not be able to answer a particular enquiry, verify your
identity, prepare an accurate return, lodge an authorised document,
contact the ATO on your behalf or provide the requested accounting service.
06
Client Confidentiality
How Personal Information May Be Disclosed
We treat information relating to a client's affairs as confidential.
We do not disclose that information to a third party without the
client's permission unless we have a legal duty to do so.
Depending on your service and authority, personal information may be
disclosed to or exchanged with:
Recipient / categoryWhy information may be shared
Australian Taxation Office
Tax returns, activity statements, tax-agent communications and other authorised taxation matters.
Government bodies or regulators
Where required or authorised by law, a lawful notice, regulatory obligation or professional requirement.
Professional advisers
Lawyers, auditors, specialists or other advisers where authorised and reasonably necessary for the engagement.
Accounting / tax software providers
To prepare, process, store or support the accounting and tax work you have engaged us to perform.
Cloud, IT and communications providers
To provide secure hosting, email, document storage, forms, support or technology used to operate the practice.
Other parties you authorise
For example a spouse, business partner, bookkeeper, previous accountant or representative where you give permission.
Client permission may be obtained through an engagement letter,
service-specific consent, written authority or another appropriate
communication that explains the relevant disclosure.
07
Technology
Cloud Systems and Third-Party Service Providers
Like most modern accounting practices, we may use carefully selected
third-party systems to operate our website and provide professional
services. Our current engagement information identifies categories
such as website hosting, WordPress services, Google services used for
security and email, document storage, accounting systems and
tax-preparation software.
We may also use online forms, including Microsoft Forms or similar
services, where appropriate for a particular workflow. The collection
notice shown with a form may provide additional information that
applies to that form.
You
Hamro Accountant
Approved Service Provider
Where client information needs to be disclosed to a third-party
provider in order to deliver tax or BAS agent services, we address
the disclosure through the relevant permission, engagement terms and
professional confidentiality obligations.
08
Cross-Border Processing
Overseas Storage or Disclosure
Some technology and cloud providers operate global infrastructure.
As a result, information processed through a provider may in some
circumstances be stored, backed up or processed outside Australia.
The countries involved can vary according to the provider, service
configuration and infrastructure in use. Where a particular overseas
disclosure is relevant to your engagement, we will address it in the
engagement terms, collection notice or other consent process where
required and take reasonable steps required by applicable privacy and
professional obligations.
Third-party privacy terms.
External software and cloud providers may also have their own
privacy policies describing how they process information on their
systems. Their own privacy practices do not replace our obligations
for client information that we control.
09
Website Privacy
Website Forms, Cookies and Technical Data
When you visit our website, our website platform or service providers
may process technical information required to operate, secure and
improve the site. This can include IP address, browser and device
information, pages viewed, referral information and session data.
Cookies or similar technologies may be used for functions such as
remembering preferences, maintaining website functionality,
understanding traffic or measuring site performance. You can control
many cookies through your browser settings, although disabling
essential cookies may affect some site functions.
General enquiry forms
Send the minimum information needed for us to contact you.
Unless we specifically provide a secure process and collection
notice for the purpose, please do not submit your TFN, myGov
password, myGov security code, banking login credentials, director
ID, identity documents or other highly sensitive records through
an ordinary contact or enquiry form.
10
Protection
How We Protect Personal Information
We take reasonable steps appropriate to the information and systems
involved to protect personal information from misuse, interference,
loss, unauthorised access, modification and disclosure.
Access controls
Access to client information is limited according to role and service need.
Protected systems
We use professional website, communications, accounting and cloud systems appropriate to our work.
Transmission safeguards
Secure website connections and encryption are used where supported by the systems involved.
Document handling
We aim to use appropriate processes for storing, accessing, sharing and disposing of client records.
No internet, email, website, software or cloud system can be
guaranteed to eliminate every security risk. You should also protect
your own devices, email account and passwords, and verify any unusual
request for sensitive information or changed payment instructions.
11
Records
How Long We Keep Information
We keep personal information and professional records for as long as
reasonably necessary for the purpose for which they were collected,
to provide ongoing services, maintain appropriate working papers, deal
with disputes or audits, and comply with taxation, professional,
insurance and legal requirements.
5+years
Tax-agent records
At least five years where required for our tax-agent service records.
Our engagement terms state that records relating to tax-agent
services are retained for at least five years, or longer where
required by law or reasonably necessary for an ongoing matter.
Some records may need to be kept longer because they remain relevant
to an unresolved tax matter, asset, capital gain, dispute or legal
requirement. When personal information is no longer required to be
retained, we take reasonable steps to securely destroy or de-identify
it where required and appropriate.
12
Your Information
Access and Correction
You may ask us to provide access to personal information we hold about
you or to correct information that is inaccurate, out of date,
incomplete, irrelevant or misleading.
Request access
Contact us and describe the information you want to access. We
may need to verify your identity before releasing personal information.
Request correction
Tell us what appears incorrect and, where useful, provide the
information needed to update the client record.
We will respond within a reasonable period. In some circumstances the
law may permit or require us to refuse access or correction. If that
occurs, we will explain the position where legally permitted.
13
Communications
Service Messages and Marketing
We may send service communications that are reasonably necessary to
manage your enquiry or engagement, such as document requests,
appointment information, lodgement updates, due-date reminders,
billing information or important service notices.
Where permitted, we may also send information about our tax,
accounting or related services. You may ask us to stop sending
marketing communications. Opting out of marketing does not stop
communications that are reasonably necessary to deliver an existing
service or meet a legal or professional obligation.
14
Incident Response
Data Breaches
If we become aware of a suspected data breach, we will take steps
appropriate to the circumstances to contain the incident, assess the
information involved, evaluate potential harm and reduce further risk.
Where the Notifiable Data Breaches scheme applies and
a breach meets the legal threshold for an eligible data breach, we
will notify affected individuals and the Office of the Australian
Information Commissioner as required.
01Contain
02Assess
03Notify if required
04Review
15
Concerns
How to Make a Privacy Complaint
If you believe we have mishandled your personal information, please
contact us first and explain what happened. Include enough information
for us to identify the relevant client record, communication, form or
service, but do not send passwords or other unnecessary sensitive information.
1
Contact Hamro Accountant Sydney
Tell us the nature of the privacy concern and the outcome you are seeking.
2
We review the matter
We may ask questions, review relevant records and take corrective action where appropriate.
3
We respond
We aim to respond within a reasonable period and explain the outcome or next steps.
If you are not satisfied with our response, you may be able to make a
complaint to the Office of the Australian Information Commissioner (OAIC).
Client-confidentiality issues may also be subject to the professional
rules administered by the Tax Practitioners Board.
We may update this Privacy Policy when our services, systems, legal
requirements or privacy practices change. The current version will be
published on this page with the updated date shown at the top.
Hamro Accountant Sydney
Clear tax support. Careful handling of client information.