Tax Proof Pty Ltd (ABN 59 656 306 160, ACN 656 306 160) ("TaxProof", "we", "us") is a tax accounting practice and registered tax agent based in Brisbane, Queensland, serving clients across Australia. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we handle personal information collected through this website, taxproof.com.au, and in the course of providing tax and accounting services.
1. What we collect
Through this website we collect the information you choose to give us via the contact form (name, email address, phone number and the content of your message) and, if you are a client, the credentials and profile details you use for the client portal. In the course of an engagement we collect the information needed to prepare and lodge your tax affairs — which can include your tax file number (TFN), income and expense records, bank and investment statements, and details of your entities and property. We also collect limited technical information necessary to operate the site securely, such as IP addresses in server logs used for security and rate limiting, and website usage information through analytics cookies as described in section 8.
2. Tax file numbers
TFNs are collected only as authorised by taxation law for preparing and lodging returns and dealing with the ATO on your behalf. We do not use or disclose TFNs for any other purpose, we restrict access to them within the practice, and we do not publish or transmit them through this website's contact form — please never include a TFN in a website enquiry.
3. Why we collect it
We collect personal information to respond to enquiries, provide tax and accounting services, lodge documents with the ATO and other agencies as you instruct, deliver documents to you through the client portal, and meet our own legal and professional obligations as a registered tax agent. We do not sell personal information and we do not use enquiry details for unrelated marketing.
4. How it is stored
Client documents released through the portal are stored in access-controlled cloud storage hosted in Australia, and portal downloads use expiring, signed links. Working papers and records supporting lodged returns are retained for at least five years, consistent with ATO substantiation requirements, and are kept in structured form so they remain retrievable. Server logs are retained for a limited period for security purposes.
5. Disclosure
We disclose personal information only: to the ATO and other government agencies as required to perform the services you engage us for; to service providers that host our infrastructure and email (within Australia where practicable); where required or authorised by law; or with your consent. We do not disclose your information to overseas recipients except where your engagement specifically involves a foreign tax authority or adviser and you have instructed us.
6. The client portal
The client portal lets you view and download documents we have released to you. Access is protected by your email address and password; you are responsible for keeping your password confidential. We recommend a unique password of at least 8 characters. Portal sessions are cookie-based and expire automatically.
7. Access, correction and complaints
You may request access to or correction of the personal information we hold about you, or make a privacy complaint, by contacting us at info@taxproof.com.au or by writing to PO Box 165, Mount Ommaney QLD 4074. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Website analytics and cookies
We use Google Analytics to understand how this website is used — which pages are visited, how visitors arrive, and broadly where they are located. To do this, Google sets cookies in your browser and receives information about your visit, including your IP address and the pages you view; that information is processed by Google, including on servers outside Australia, under Google's own terms. We use it only to measure and improve the website. We do not use it to identify you personally, we do not combine it with the tax records we hold for clients, and we do not sell it. Pages within the client portal are measured in the same way, and any one-time link in an email or reset address is masked before it is recorded. You can opt out at any time by using Google's Analytics opt-out browser add-on, or by blocking or deleting cookies in your browser settings — the website and the client portal will continue to work if you do.
9. Changes
We may update this policy from time to time. The current version will always be published on this page with its last-updated date.