Privacy Policy

Last updated: 18 August 2026
Business: Roger Boghani tax & business services
ABN: 32 610 722 818

Roger Boghani tax & business services (ABN 32 610 722 818) (“we”, “us”, “our”) respects your privacy. This policy explains how we collect, hold, use and disclose personal information, and how you can access, correct or complain about the way we handle it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we provide designated services under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), we are a reporting entity and the Privacy Act applies to that work regardless of our annual turnover.

Summary

• We collect personal information you give us through our website enquiry forms, by email or phone, and in the course of providing accounting and advisory services.
• Our website uses cookies and analytics tools that collect technical information about your visit.
• We are required by law to verify the identity of certain clients and to keep those records for seven years.
• We do not sell your personal information, and we do not use it for advertising.
• Some of our service providers store data overseas, mainly in the United States.
• You can ask us for a copy of the personal information we hold about you, ask us to correct it, or make a complaint. Contact details are at the end of this policy.

1. What personal information we collect

1.1 Website visitors

When you visit our website, we and our service providers automatically collect:

• your IP address and approximate location;
• your browser type, device type and operating system;
• the pages you view, the time and date of your visit, and how long you spend on each page;
• the website or search engine that referred you to us.

Our web server also records this information in standard access and error logs for security and troubleshooting purposes.

1.2 Enquiry forms

When you submit an enquiry form, we collect the information you enter, which typically includes your name, email address, telephone number and the content of your message. Form submissions are stored in our website database and are also sent to us by email.

Our forms use Google reCAPTCHA to prevent automated spam. reCAPTCHA collects hardware and software information about your device and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s privacy policy and terms of service.

1.3 Newsletter and mailing list

If you subscribe to our newsletter, we collect your name and email address. We also record whether you open our emails and which links you click, so we can understand what content is useful. You can unsubscribe at any time using the link in any email we send, or by contacting us.

1.4 Clients and prospective clients

In the course of providing accounting, taxation and advisory services, we collect information including:

• your name, date of birth, residential and postal address, email address and telephone numbers;
• your tax file number (TFN) and Australian Business Number;
• financial information, including income, expenses, assets, liabilities, bank account details and superannuation details;
• employment and business information;
• identification documents, such as a driver licence or passport;
• information about your spouse, dependants, business partners, directors, shareholders and beneficial owners, where it is relevant to the services we provide.

1.5 Sensitive information

We generally do not collect sensitive information. Where our services require it — for example, health information relevant to a disability support claim, or information relating to a beneficiary’s circumstances — we will collect it only with your consent, or where the law requires or authorises us to.

1.6 Tax file numbers

We handle tax file numbers in accordance with the Privacy (Tax File Number) Rule 2015. We use TFNs only for purposes authorised by taxation law, and we do not use a TFN to identify you in our records or disclose it except as permitted by law.

2. How we collect personal information

We collect personal information directly from you wherever it is reasonable and practicable to do so — through our website forms, by email, by telephone, in meetings and through documents you provide to us.

We may also collect personal information from third parties, including:

• the Australian Taxation Office and other government agencies, through authorised portals;
• your previous accountant or tax agent, where you have authorised the transfer of your records;
• your employer, bank, superannuation fund, financial adviser or legal adviser, where you have authorised them to deal with us;
• identity verification and credit reporting providers, where we are required to verify your identity;
• publicly available sources, such as ASIC and ABN registers.

If someone else gives us personal information about you, we will take reasonable steps to make sure you are aware of this policy and of why we hold that information.

3. Why we collect, hold, use and disclose personal information

We use personal information to:

• provide accounting, taxation, bookkeeping, payroll and advisory services;
• prepare and lodge returns, statements and other documents with the Australian Taxation Office and other agencies;
• verify your identity and meet our obligations under the AML/CTF Act;
• respond to your enquiries;
• issue invoices and manage payments;
• send you newsletters, updates and information about our services, where you have asked to receive them;
• maintain and improve our website and keep it secure;
• meet our professional, legal and regulatory obligations, including those under the Tax Agent Services Act 2009 and applicable professional codes.

We do not sell personal information. We do not disclose personal information to third parties for their own marketing purposes.

4. Identity verification and AML/CTF obligations

From 1 July 2026, certain professional services became “designated services” under the AML/CTF Act. Where we provide those services, we are a reporting entity and we are required by law to:

• collect and verify your identity, and the identity of any beneficial owners, before providing the service;
• collect information about the source of your funds or wealth in some circumstances;
• monitor transactions and report certain matters to the Australian Transaction Reports and Analysis Centre (AUSTRAC);
• keep records of the information we collect for at least seven years.

We collect this information because the law requires it. If you do not provide it, we may be unable to act for you.

Where we are required to submit a report to AUSTRAC, the law prohibits us from telling you that we have done so. This is called a “tipping off” restriction, and it means we may not be able to explain why we have taken a particular step.

We will destroy or de-identify copies of identification documents once we no longer need them, unless we are required to retain them for record-keeping purposes.

5. Cookies, analytics and tracking

Our website uses cookies — small text files stored on your device — to make the site work, remember your preferences and understand how the site is used.

We use the following tools:

• Google Analytics, which collects information about how visitors use our site, including pages viewed, session duration and general location. This information is aggregated and does not identify you personally to us.
• Jetpack, provided by Automattic, which collects site statistics and provides security features.
• Cloudflare, which processes your IP address to deliver our website quickly and to protect it from attacks and malicious traffic.
• Google reCAPTCHA, which helps us distinguish genuine enquiries from automated spam.

You can set your browser to refuse cookies or to alert you when a cookie is being set. If you disable cookies, some parts of our website may not work properly. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6. Who we disclose personal information to

We may disclose personal information to:

• the Australian Taxation Office, AUSTRAC, ASIC, state revenue offices and other government agencies, where required or authorised by law;
• the Tax Practitioners Board and our professional association, in connection with our registration and professional obligations;
• accounting, tax and practice management software providers whose systems we use to deliver our services;
• our IT, website hosting, email, backup and data security providers;
• our email delivery and newsletter providers;
• identity verification providers;
• your other advisers — such as your lawyer, financial planner, mortgage broker or bank — where you have authorised us to do so;
• our professional advisers, insurers and auditors;
• a purchaser or prospective purchaser of our practice, subject to appropriate confidentiality protections;
• any other person, where you have consented or where the law requires or permits it.

We require our service providers to protect personal information and to use it only for the purposes for which we engaged them.

7. Overseas disclosure

Some of the service providers we use store or process personal information outside Australia. Based on our current arrangements, this includes:

• the United States — Google (Analytics and reCAPTCHA), Automattic (Jetpack), Cloudflare, and our email and newsletter providers;
• other countries where our software providers operate data centres, which may include the United Kingdom, the European Union, Singapore and New Zealand.

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles. However, we cannot always control how overseas recipients handle information, and the privacy laws of other countries may differ from Australian law.

8. How we hold and protect personal information

We hold personal information in electronic form in our practice management and accounting systems, in our email system, on our website database, and in secure cloud storage. We also hold some information in paper form at our office.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include:

• access controls, so that staff can only access information they need for their role;
• multi-factor authentication on systems that hold client information;
• encryption of data in transit and at rest;
• firewalls, security monitoring and regular software updates;
• secure disposal of paper records;
• confidentiality obligations in our staff and contractor agreements;
• staff training on privacy and information security.

No system is completely secure. While we work to protect your information, we cannot guarantee the security of information transmitted to us over the internet.

9. How long we keep personal information

We keep personal information only for as long as we need it, or for as long as the law requires. In practice:

• taxation records are generally kept for at least five years, consistent with ATO requirements;
• AML/CTF identification and transaction records are kept for at least seven years;
• enquiry form submissions are kept for as long as needed to respond and to maintain a record of our correspondence;
• newsletter subscriber details are kept until you unsubscribe.

When we no longer need personal information and we are not required to retain it, we destroy it or de-identify it.

10. Data breaches

We have procedures in place to respond to suspected data breaches. If a data breach occurs that is likely to result in serious harm to any individual whose personal information we hold, we will notify the affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

11. Dealing with us anonymously

You can contact us with a general enquiry without identifying yourself, or by using a pseudonym. However, we will not be able to provide accounting or advisory services to you unless we know who you are, because the law requires us to verify the identity of our clients.

12. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you. We will respond within a reasonable period, normally 30 days. We do not charge for making a request, but we may charge a reasonable fee for the cost of providing access.

We may refuse access in limited circumstances permitted by the Privacy Act — for example, where giving access would have an unreasonable impact on another person’s privacy, or where the law prevents it. If we refuse, we will explain why in writing and tell you how to complain.

If you believe the information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us and we will take reasonable steps to correct it.

13. Marketing and opting out

We only send marketing communications to people who have asked to receive them, or to clients in connection with the services we provide. Every marketing email contains an unsubscribe link. You can also opt out at any time by contacting us using the details below, and we will action your request promptly.

14. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details below. Set out your complaint in writing if you can, so that we understand the issue clearly. We will acknowledge your complaint promptly and aim to respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

15. Third-party websites

Our website may contain links to other websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any website you visit.

16. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The current version will always be available on this page, and the “last updated” date at the top shows when it was last changed. We encourage you to review it periodically.

17. Contact us

If you have any questions about this policy, or would like to access or correct your personal information, please contact us:

Roger Boghani tax & business services
Privacy Officer
Suite 7, Level 1
486 Lower Heidelberg Road
Heidelberg VIC 3084
Email: [email protected]
Phone: +61 493 696 079