Legal

Privacy Policy

NUMIO Accountants Pty Ltd (ABN 92 693 965 794) ("Numio", "we", "us", "our")

Last updated: June 2026

1. Our commitment to your privacy

Numio Accountants Pty Ltd provides accounting, tax, compliance, payroll, and business systems and automation services. In the course of that work we are trusted with a significant amount of personal and financial information about our clients and the people connected to them.

We take that trust seriously. This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information, and how you can access, correct, or complain about the way we handle it.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and — because we handle tax file numbers — by the Privacy (Tax File Number) Rule 2015. As members of CPA Australia, we also handle your information in accordance with the confidentiality obligations under the professional and ethical standards that apply to our profession (APES 110 Code of Ethics).

This policy applies to everyone whose personal information we handle, including clients, prospective clients, visitors to our website, and individuals whose information we process on behalf of our clients (for example, our clients' employees when we provide payroll services).

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable — whether or not it is true and whether or not it is recorded in a material form.

Sensitive information is a special category of personal information that includes (among other things) health information, racial or ethnic origin, and membership of professional or trade associations. We collect sensitive information only where it is reasonably necessary for our services and, generally, with your consent.

3. The kinds of personal information we collect and hold

The information we collect depends on the services we provide to you. It may include:

  • Identity and contact details — name, date of birth, postal and email addresses, phone numbers.
  • Government identifiers — tax file number (TFN), Australian Business Number (ABN), and similar identifiers. (See section 6 for how we handle TFNs.)
  • Financial information — income, expenses, assets, liabilities, bank account details, superannuation details, and other information needed to prepare accounts, tax returns, and business activity statements.
  • Employment and payroll information — where we provide payroll services, the personal and pay details of our clients' employees and contractors (such as names, TFNs, superannuation fund details, bank account details, and salary information).
  • Business systems information — information we encounter when setting up, configuring, or automating accounting and business software on your behalf, which may include personal information held within those systems.
  • Website information — see section 10 for information we collect through our website.

We collect sensitive information (such as health information relevant to a tax claim or government concession) only when it is reasonably necessary and, generally, with your consent.

4. How we collect personal information

Wherever practical, we collect personal information directly from you — for example, when you engage us, complete a form, send us documents, email or call us, or use our website.

We may also collect personal information from third parties where it is reasonable and practical to do so, including from:

  • the Australian Taxation Office (ATO), through pre-fill and Online Services for Agents;
  • ASIC, the ATO, and other government bodies and registries;
  • your other advisers (such as a previous accountant, financial planner, or lawyer), with your authority;
  • our business clients, where we handle the personal information of their employees or contractors to deliver payroll or systems services on their behalf; and
  • the accounting and business software we use in providing our services.

Where we collect personal information about you from someone else, we take reasonable steps to make sure you are made aware of that collection.

5. Why we collect, hold, use, and disclose personal information

We collect, hold, use, and disclose personal information for purposes connected with our services and our business, including to:

  • prepare and lodge tax returns, financial statements, business activity statements, and related compliance documents;
  • provide bookkeeping, payroll, accounting, advisory, and business systems and automation services;
  • liaise with the ATO, ASIC, and other regulators and government bodies on your behalf;
  • communicate with you, respond to your enquiries, and manage our engagement with you;
  • administer our business, including billing, record-keeping, quality review, and meeting our own legal and professional obligations; and
  • send you information about our services and relevant updates, where you have not opted out (see section 9).

We will only use or disclose your personal information for a purpose other than the one it was collected for where you would reasonably expect it, where you have consented, or where we are otherwise permitted or required to do so by law.

Who we disclose personal information to

In providing our services we may disclose personal information to:

  • the ATO, ASIC, and other government and regulatory bodies;
  • our professional advisers and contractors (such as IT and software providers) who help us run our business, where they are bound to protect your information;
  • your other advisers (such as financial planners, lawyers, or banks), with your authority; and
  • third parties where required or authorised by law.

We do not sell, rent, or trade your personal information.

6. Tax file numbers

We handle tax file numbers in accordance with the Privacy (Tax File Number) Rule 2015 and the Privacy Act. We collect TFNs only where authorised by taxation law, and we use and disclose them only for permitted purposes — primarily to prepare and lodge returns and to deal with the ATO on your behalf. We take reasonable steps to keep TFN information secure and to protect it from misuse, loss, and unauthorised access. We do not require you to provide your TFN, but without it we may be unable to provide some services.

7. How we hold and protect your information

We hold personal information in both electronic and (where applicable) paper form. We take reasonable steps to protect it from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. These steps include secure cloud-based accounting and document systems, access controls and authentication, staff confidentiality obligations, and ongoing review of our security practices.

We keep your personal information only for as long as we need it for the purposes described in this policy, or as required by law (tax and corporate records are generally retained for a minimum of five years). When we no longer need it, we take reasonable steps to destroy or de-identify it.

8. Overseas storage and disclosure

Numio is based in Australia. Some of the service providers we use to deliver our services and run our business store or process personal information outside Australia. These include cloud-based accounting and document platforms (such as Xero and Google Workspace) and website analytics tools (such as Google Analytics). As a result, your personal information may be stored or processed in countries including New Zealand and the United States, as well as other countries in which these providers operate. Where personal information is disclosed to or held by overseas recipients, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including by relying on the contractual commitments and the privacy and security frameworks of those providers.

9. Direct marketing

From time to time we may send you information we think is relevant to you, such as updates on tax and compliance changes, deadlines, or our services. We will only do this where it is permitted under the Privacy Act and the Spam Act 2003 (Cth). Every marketing communication includes a simple way to opt out, and you can ask us at any time to stop sending it by contacting us using the details in section 14. We do not use sensitive information for direct marketing without your consent.

10. Our website

When you visit our website we may collect information automatically, including your IP address, browser type, the pages you view, and the date and time of your visit. We use cookies and similar technologies to help the website function and to understand how it is used so we can improve it. You can set your browser to refuse cookies, although some parts of the site may not work properly if you do.

If you submit an enquiry through a contact form, we collect the information you provide so we can respond to you. We use Google Analytics to understand how visitors use our website. Google may process this information on servers located overseas (see section 8). Our website may contain links to third-party websites; we are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

11. Anonymity and pseudonymity

Where it is lawful and practicable, you have the option of dealing with us without identifying yourself, or by using a pseudonym — for example, when making a general enquiry. In most cases, however, we will need to know who you are in order to provide our services and meet our legal and professional obligations.

12. Accessing and correcting your information

You have the right to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, contact us using the details in section 14. We will respond within a reasonable time. There is generally no charge for making a request, although we may charge a reasonable fee for giving access in some circumstances. If we are unable to give you access or make a correction, we will tell you why in writing.

13. How to make a privacy complaint

If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, please tell us so we can put it right.

Step 1 — Contact us. Make your complaint in writing to our Privacy Officer using the details in section 14. We will acknowledge your complaint and aim to respond within 30 days.

Step 2 — Escalate to the OAIC. If you are not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC):

Website: oaic.gov.au

Phone: 1300 363 992

Post: GPO Box 5288, Sydney NSW 2001

14. Contact us

For any privacy question, request, or complaint, please contact:

Privacy Officer

NUMIO Accountants Pty Ltd

Email: hello@numiogroup.com.au

Phone: +61 470 524 031

Post: Office 2, Level 1, 43 Cavenagh Street, Darwin City NT 0800

15. Changes to this policy

We review this policy regularly and may update it from time to time to reflect changes in our practices or in the law. The current version is always available on our website, and the date at the top shows when it was last updated. We encourage you to review it periodically.