Our
Policies

Privacy Policy

This Policy was last updated in august 2026.

Privacy Policy (“Policy”)

Daniel Allison & Associates Pty Ltd ACN 146 014 039 and its related entities (“we”, “our” or “us”) is committed to protecting the personal and credit related personal information (“credit information”) that we may collect and hold about you.  This Policy sets out our policies relating to management of your personal information and credit information.  These policies are based on our obligations under the Privacy Act 1988 (Cth) (“Act”) (including Australian Privacy Principles (“APPs”) and Part IIIA (Credit reporting).

By voluntarily supplying us with your personal or credit information, you are agreeing to be bound by this Policy.

Any amendments to this Policy will be notified to you by posting an updated version on our website.

Please note that our website contains links to other websites.  When a user has clicked on a link to another site, they leave our site and are no longer protected by this Policy.

Collection of personal information

We gather personal information that is required for operating our business, evaluating and addressing the needs of our clients and prospective clients, promoting our services, satisfying our legal obligations, and delivering our services. The specific purpose for which we typically gather and utilise personal information is determined by the nature of your dealings with us.

When you make an enquiry regarding our services or enter into a client relationship, a record is created containing any personal information you have supplied to us at that time. The personal information we may collect and hold about you may differ based on the circumstances and the particular services you seek from us, but will generally include:

• contact information such as your name and address, telephone numbers and email address along with additional contact details;

• your tax file number;

• superannuation and insurance information;

• employment details;

• details regarding your interactions with us and any of our other clients;

• financial information including investments, shareholdings, bank account details and credit card details;

• business details, including Australian Business Number (“ABN”);

• identification documents including passport and drivers licence details, identifiers and identity documents issued by Australian government bodies, and identifiers and identity documents issued by foreign governments; and

• any further personal information that you supply to us, or permit us to gather, in connection with your relationship or dealings with us.

Where it is pertinent to the services we deliver to you or to our broader relationship with you as a client, we may additionally gather and retain personal information about you that constitutes sensitive information as defined by the Privacy Act.

Sensitive information encompasses any details concerning an individual’s racial or ethnic background, political views, affiliation with a political organisation, religious convictions or associations, philosophical beliefs, membership of a professional or trade body, trade union membership, sexual orientation or conduct, criminal history, health-related information, and particular genetic or biometric data.

We will not request that you reveal sensitive information unless doing so is required to deliver our services to you, for staff recruitment, or where it is otherwise necessary in the circumstances. Should you choose to volunteer sensitive information without being asked, it may be recorded and retained where it is reasonably necessary for our functions or activities (or where otherwise authorised by law).

Credit Information

In addition, we may collect and hold credit information about you while delivering our services. The categories of credit information that we may gather and retain include:

• type and amount of credit sought;

• information concerning defaults;

• details relating to court proceedings;

• particulars of your obligations in relation to consumer credit; and

• trade references – name of entity, ABN, contact name, telephone number, fax number, email, years trading with you.

Where we gather or retain credit information, we do so for the purpose of assisting in credit management. You may request access to any credit information we hold about you, seek amendment of that information, or enquire as to how your credit information has been used, by contacting us via the details set out below.

Personal information collected for Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) compliance

We are classified as a reporting entity pursuant to the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act). The AML/CTF Act imposes a legal obligation on us to collect and verify certain personal information, and we may be prevented from providing certain services if we are unable to fulfil this requirement.

Where required for compliance with the AML/CTF Act and the associated Anti-Money Laundering and Counter-Terrorism Financing Rules 2025 (Rules), we may collect, store, use, and disclose personal information for purposes such as customer due diligence, continuous customer monitoring, risk evaluation, reporting to regulatory bodies, and maintaining records. In particular, we may collect Know Your Customer (KYC) Information as required under the AML/CTF Act, including:

• the identity of our customer (as that term is defined in the AML/CTF Act) together with their contact information;

• any information that supports verifying a person’s identity (including details extracted from government-issued identification documents, copies of identification documents, facial photographs, liveness data, biometric data, and verification metadata);

• the identity of any individual on whose behalf our customer is acquiring the service;

• the identity of any individual acting as a representative of the customer, including evidence of their authority to do so;

• where the customer is not a natural person, the identity of any beneficial owners;

• whether the customer, a beneficial owner, or any person acting on their behalf is a politically exposed person or a person subject to targeted financial sanctions;

• information concerning the source of wealth and the source of funds;

• the nature and purpose of the business relationship or transaction; and

• information relating to any other matter prescribed by the Rules.

Personal information (including sensitive information) for AML/CTF purposes is collected only where it is reasonably necessary to satisfy our legal obligations and solely in relation to matters where a designated service is being, or is reasonably expected to be, provided. Not all legal engagements necessitate the collection of personal information for AML/CTF purposes.

Where we utilise electronic or biometric identity verification methods, we may also engage external verification service providers to confirm identity information, assess whether an individual corresponds to an identity document, conduct liveness or fraud assessments, and produce verification results.

Where required by law, or where it is reasonably necessary having regard to ongoing risks connected with AML/CTF purposes, the verification method used, audit requirements, fraud risk, disputes, regulatory inquiries, enhanced due diligence, suspicious matter evaluation, or continuing customer due diligence, we may keep limited copies or images of identity documents, facial photographs, or associated verification materials to maintain compliance with the AML/CTF Act and related Rules.

When personal information is collected for AML/CTF purposes, we do not retain full copies of identity documents (for example, passports or driver licences). We only keep the specific information required by law, such as pertinent identification particulars, the type of document used for verification, verification results, and AML/CTF risk assessments.

As a general rule, we aim to collect personal information directly from the relevant individual. Where this is not practicable, we may obtain personal information about individuals from third parties, including publicly available sources. In those circumstances, we will take reasonable steps to notify the affected individuals about the collection of their information.

If you are among our ‘business contacts’ (for example, a person employed by one of our clients or suppliers, or within a government agency or other organisation with which we engage when you communicate with one of our employees or partners, or a contact person at one of our vendors, or in a government agency or organisation with which we interact), we may automatically collect basic business contact information from you (such as your name, title, and work contact details) using the information contained in your email signature.

In connection with the AML/CTF Act, we may collect sensitive information, including biometric data, for the purpose of conducting identity verification. We will seek your consent and issue a notification via our verification provider prior to the biometric verification process commencing, unless a particular legal exception applies. Apart from the circumstances described above, we may collect sensitive information without consent where doing so is required or permitted under the AML/CTF Act. This may encompass information relevant to ascertaining whether an individual is a politically exposed person or is subject to sanctions.

Cookies

We may use “cookies” or similar technologies to collect data.  A cookie is a small file, typically of letters and numbers, downloaded on to a device when you access our website.  Our website may collect the following information from users:

• your server address;

• your top level domain name (for example, .com, .gov, .au etc);

• the date and time of your visit to the site;

• the pages you accessed;

• the previous site you have visited; and

• the type of browser you are using.

Means of collection of personal and credit information

Your personal and credit information may be collected in a number of ways, including:

• directly from you, or from the entity for which you serve as an employee, director or principal by our staff when you seek, or enquire about, our services; or

• when you use our website or complete a form on our website.

In some circumstances, where it is unreasonable or impracticable to collect information from you, we may collect information about you from a third party source.  For example, we may collect information from government bodies, law enforcement agencies, your business associates, your professional advisers, commercial counterparties, search providers, service providers, your employer, parties to whom you direct us, or from publicly accessible sources (including public registers, social media platforms, and online searches).

You need not provide all the information requested by us, but this may prevent us from providing some or all of our services to you.

Use, disclosure & purpose

We collect, hold and disclose your personal and credit information for the following purposes:

• as a necessary part of providing our services to you;

• managing invoicing, payments, and the recovery of outstanding debts;

• to promote and market our services to you or provide you with information that we believe may be of interest to you (unless as directed otherwise);

• to help us research the needs of our customers and to market our services with a better understanding of your needs and the needs of customers generally;

• meeting our legal and regulatory requirements; and

• other purposes related to any of the above.

We will only use your information for the purposes for which it was collected (“primary purposes”) or a purpose related to the primary purpose, if this use would be reasonably expected by you, or otherwise, with your consent.

We may disclose your information to necessary third parties, such as SMSF software providers and document storage provider (for example, Microsoft and Dropbox) who assist us to provide, manage and administer our services.  Information provided to third parties will be dealt with in accordance with that entity’s privacy policy.

We utilise your personal information to satisfy our obligations under the AML/CTF Act and AML/CTF Rules, including for the purposes of customer due diligence, monitoring, reporting, and maintaining records, and to disclose information to regulators such as AUSTRAC where required or permitted by law.

We may also use and disclose your personal information for additional purposes communicated to you at the point of collection, or as otherwise described in this Privacy Policy.

Disclosure to Recipients Outside Australia

We may disclose personal information outside of Australia to business and accounting software providers and file sharing and storage service providers located in the United States of America.

When acting on behalf of certain clients, it may be necessary or appropriate to disclose personal information to recipients located overseas. The jurisdictions in which such overseas recipients are situated will depend on the particular circumstances of the client's matter, and it is not feasible to identify them in this Privacy Policy.

Quality, access to & correction of information

You are entitled to have access to and seek correction of any personal information that we may hold about you.  We require that requests for access to or to update or correct your personal information to be in writing outlining the details of your request.  Such requests should be addressed to the Privacy Officer via the details provided in this Policy.

We will take appropriate steps to verify your identity (or verify that you act as an authorised agent of the individual concerned) before granting a request to access your personal information.

We will respond to your request for access to your personal information within a reasonable time after you make the request and if access is granted, access will be provided within 30 days from your request.  We will, on request, provide you with access to your personal information or update or correct your personal information, unless we are lawfully excluded from granting your request, including if:

• giving access would be unlawful;

• we are required or authorised by law or a court/tribunal order to deny access; or

• giving access is likely to prejudice one or more enforcement related activities conducted by an enforcement body.

Where your request for access is accepted, we will provide you with access to your personal information in a manner, as requested by you, providing it is reasonable to do so.

Your request for correction will be dealt with within 30 days, or such longer period as agreed by you.  If we deny your request, we will provide you with a written notice detailing reasons for the refusal and the process for making a complaint about the refusal to grant your request.

We will accept your request for correction of your credit information where we are satisfied that it is inaccurate, out-of-date, incomplete, irrelevant or misleading.

Upon accepting a request for correction of your personal information, we will take all steps that are reasonable in the circumstances, having regard to the purpose for which your information is held, to correct your personal information.

If your request for correction of credit information is accepted we will provide written notice of this correction to any entity to which we have disclosed this information previously, to the extent that this is practicable.

Storage and Security

Your personal and credit information will be stored as physical files in a secured area, on our electronic data base system and on computers with appropriate back up and security systems.  Any personal or credit information which is held on our computer systems, is protected by safeguards including physical, technical (including firewalls and SSL encryption) and procedural methods.

We take reasonable steps to hold information securely in electronic or physical form.  We are committed to keeping secure the data you provide to us and we will take all reasonable precautions to protect your personally identifiable information from loss, misuse, interference, unauthorised access or alteration.

Personal information collected for AML/CTF purposes, including KYC information, is kept only for the period required by law. When it is no longer necessary for AML/CTF or other authorised purposes, personal information is securely disposed of or de-identified in accordance with relevant legal requirements.

We aim to achieve this through:

• imposing confidentiality requirements on our employees;

• implementing policies in relation to document storage security;

• implementing security measures to govern access to our systems;

• only providing access to personal information once proper identification has been given;

• controlling access to our premises; and

• implementing website protection measures.

Dealing with us anonymously

Where lawful and practicable to do so, you can deal with us anonymously or using a pseudonym.  You can deal with us anonymously or using a pseudonym when making a general enquiry about the services that we can offer to you including via telephone or our website.

At the time you engage our services, it is no longer practicable for you to deal with us anonymously or using a pseudonym.

Credit Information Notifiable Matters

We do not disclose your credit information to any credit reporting bodies.  Any credit information we collect and/or hold about you will be dealt with in accordance with this Policy.

Complaints

If you believe that we have breached a term of this Policy or the Act you may submit a written complaint.  The written complaint can be emailed or posted to us using the contact details set out below.  You must include contact details for us to contact you regarding your complaint.

Our Privacy Officer will consider your complaint and respond as soon as reasonably possible, but not more than 30 days from receiving the complaint.

If you are unsatisfied with the outcome of your complaint you may refer your complaint to the Office of the Australian Information Commissioner to be resolved.

Contact us

If you wish to:

• gain access to your personal information;

• make a complaint about a breach of your privacy;

• contact us with a query about how your information is collected or used;

• contact us regarding any other matter concerning this Policy,

you can speak directly with our staff who will do their best to try to resolve your issue as simply as possible. Alternatively, you can write to us or send us an email so that our Privacy Officer can consider the matter. We will respond to you as soon as reasonably possible.

If you do not wish to receive direct marketing from us, please contact our Privacy Officer via the details below.
Our contact details are as follows:

Phone:  03 9006 5400
Postal address: PO Box 282, South Melbourne VIC 3205 ‍

For more information on privacy see the Office of the Australian Information Commissioner’s website at: http://www.oaic.gov.au.

Liability limited by a Scheme approved under Professional Standards Legislation.

BACK TO TOP