Privacy Policy

Last updated: [DATE]

This policy explains how [LEGAL BUSINESS NAME] (ABN [ABN]), trading as Upside Account ("we", "us"), handles personal information. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

1. What we collect

We collect only what we need to provide bookkeeping services and to respond to enquiries:

• Contact details — name, email address, phone number, business name.
• Enquiry content — what you tell us about your business when you book a call.
• Financial and business records — for clients: transaction data, invoices, receipts, payroll information, and accounting file access needed to do the work.
• Technical data — [TODO(owner): confirm whether you use analytics or cookies. If you do, list them here. If not, say so explicitly.]

2. How we collect it

Directly from you — through the booking form on this website, by email, over the phone, or during the course of providing services. Where we collect information about you from a third party (for example, your accountant or your accounting software), we will tell you.

3. Why we use it

• To respond to your enquiry and arrange an initial call.
• To provide bookkeeping, payroll, and reporting services.
• To meet our legal and regulatory obligations, including as a registered BAS agent.
• To send you material you asked for (such as a requested download). [TODO(owner): confirm whether you will send marketing email. If so, say so here and provide an opt-out.]

We do not sell your personal information.

4. Who we share it with

We disclose personal information only where necessary, and only to:

• Software providers we use to deliver the service — [TODO(owner): list them, e.g. Xero, QuickBooks, MYOB, Resend (email), your hosting provider. Note where each stores data.]
• Your accountant or advisers, where you have asked us to.
• Government agencies (such as the ATO) where required by law or to lodge on your behalf.

[TODO(owner): confirm whether any provider stores data overseas. If so, the APPs require you to disclose the countries.]

5. How we protect it

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access — including [TODO(owner): describe your actual controls, e.g. multi-factor authentication, encrypted storage, access limited to staff who need it]. We keep records only as long as needed for the service and for the periods required by law (generally five years for financial records), then destroy or de-identify them.

6. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Contact us at hello@upsideaccounts.com. We will respond within a reasonable period. We will not charge you for making a request.

7. Complaints

If you think we have mishandled your personal information, contact us first at hello@upsideaccounts.com and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Contact us

[LEGAL BUSINESS NAME]
ABN [ABN]
Registered BAS Agent [BAS AGENT NUMBER]
[CONTACT ADDRESS]
hello@upsideaccounts.com