Legal
This policy explains how Numbiz collects, holds, uses and discloses personal information, and how you can access it, correct it or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Last updated 22 September 2026
This Privacy Policy is issued by Numbiz [insert legal entity name] (ABN [insert ABN]) (Numbiz, we, us, our). It applies to personal information we collect through numbiz.com.au and related subdomains (Website), the Numbiz member portal and dashboards (Portal), and in providing bookkeeping, accounting, payroll, BAS, advisory and consulting services (Services).
By using the Website, Portal or Services, or providing personal information to us, you acknowledge that you have read this policy and agree to your information being handled as described in it. If you provide us with personal information about another person (for example your employees, contractors, customers or suppliers), you confirm you are authorised to do so and have told them about this policy.
Depending on how you interact with us, we may collect:
– identity and contact details: name, business name, ABN/ACN, address, email, phone, role and date of birth;
– government identifiers where required for the Services, such as tax file numbers (TFNs), ABNs and director IDs, handled in accordance with the TFN Rule and applicable law;
– financial and business information: bank and transaction data, invoices, receipts, payroll and superannuation records, contracts, loan and asset details, tax returns and statements, and information about your employees, contractors, customers and suppliers;
– account information: login credentials, membership type, preferences, onboarding responses and documents you upload to the Portal;
– communications: enquiries, contact-form submissions, emails, meeting notes and call records;
– technical and usage data: IP address, device and browser type, pages visited, time on page, referring links and cookie identifiers;
– sensitive information only where necessary for the Services and permitted by law, for example health-related leave records in payroll, or membership of professional or trade associations.
You may deal with us anonymously or under a pseudonym for general enquiries, but we cannot provide the Services without identifying you.
We collect personal information directly from you when you enquire, book a call, sign up, complete onboarding, upload documents, send us information or use the Portal. We also collect it from third parties where reasonably necessary for the Services, including the Australian Taxation Office and other government agencies, your bank or bank-feed provider, accounting and payroll platforms you authorise us to access (for example Xero), your employees and advisers, and publicly available registers. We collect technical data automatically through cookies and similar technologies when you use the Website or Portal.
We collect, hold and use personal information to:
– identify you and set up and manage your account and Engagement;
– provide the Services, including preparing and lodging returns, statements, payroll and reports, and communicating with the ATO and other bodies on your behalf where authorised;
– communicate with you about your account, the Services, deadlines and changes to our terms or this policy;
– invoice you and collect payment;
– verify your identity and comply with our legal, regulatory and professional obligations, including under tax, anti-money laundering and record-keeping laws;
– operate, secure, maintain and improve the Website, Portal and Services, and understand how they are used;
– send you information about our services, updates and offers that we think may interest you (you can opt out at any time); and
– protect our rights and interests, prevent fraud, and manage disputes and complaints.
We do not sell personal information.
We may disclose personal information to:
– our staff, contractors and professional advisers who need it to perform their roles and are bound by confidentiality obligations;
– service providers that support our business, including cloud hosting and storage, authentication, database, email, document signing, video conferencing, accounting, payroll, banking, payment, analytics and customer-relationship platforms;
– the Australian Taxation Office, ASIC, the Tax Practitioners Board, superannuation funds, state revenue offices and other government or regulatory bodies, as required to deliver the Services or by law;
– your bank, lender, insurer, lawyer, financial adviser or other party you ask or authorise us to deal with;
– courts, regulators, law-enforcement agencies and others where required or permitted by law;
– a prospective or actual purchaser of our business or assets, subject to confidentiality; and
– anyone else you consent to us disclosing it to.
Some of the service providers we use store or process data outside Australia, including in the United States, the European Union, the United Kingdom, New Zealand and Singapore. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles. By providing personal information to us you acknowledge that overseas recipients may not be subject to the Privacy Act and that, to the maximum extent permitted by law, we are not responsible for how an overseas recipient handles your information once it has been disclosed in accordance with this policy.
We store personal information in secure cloud systems and take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification and disclosure, including encryption in transit, access controls, authentication and staff confidentiality obligations. Documents you upload through the Portal are stored in private storage that is not publicly accessible.
No method of electronic transmission or storage is completely secure. You are responsible for keeping your login details confidential and for the security of your own devices, networks and email accounts. To the maximum extent permitted by law, we are not liable for any unauthorised access to, or loss, misuse or disclosure of, personal information that occurs outside our reasonable control, including through your systems, third-party platforms or events beyond our control.
We keep personal information for as long as needed to provide the Services and to meet our legal, regulatory, professional and insurance obligations. Tax and financial records are generally required by law to be kept for at least five years after the relevant lodgement or transaction, and we may keep working papers for longer to support our work. When information is no longer needed we take reasonable steps to destroy or de-identify it.
The Website and Portal may use cookies and similar technologies to keep you signed in, remember preferences, secure the service and understand how it is used. We may use third-party analytics tools that collect technical data such as pages viewed and approximate location. You can disable cookies in your browser, although some features may then not work correctly.
If a data breach involving personal information we hold is likely to result in serious harm to any individual, we will assess it and notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We may send you information about our services and offers by email or other channels. You can opt out at any time by using the unsubscribe link in the message or contacting us at hello@numbiz.com.au. We will still send you service and account communications that are not marketing.
You may ask to access or correct the personal information we hold about you by emailing hello@numbiz.com.au. We may need to verify your identity first. We will respond within a reasonable time (usually 30 days) and may charge a reasonable fee to cover the cost of providing access. In some circumstances the law allows us to refuse access or correction; if so, we will tell you why in writing.
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us at hello@numbiz.com.au with details of your concern. We will acknowledge your complaint, investigate it and respond in writing, usually within 30 days. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
The Website may link to third-party websites and services, and the Services may involve platforms operated by others. Their privacy practices are governed by their own policies, which we encourage you to read. We are not responsible for the privacy practices or content of any third party.
We may update this policy from time to time by publishing the new version on the Website. Changes take effect when published. The date at the top of this page shows when it was last updated.
Privacy enquiries: Numbiz [insert legal entity name] (ABN [insert ABN]), hello@numbiz.com.au, Sydney, Australia.