Thrive Advice Privacy Policy

Privacy Policy

This version applies from 30 September 2026.

1. About this policy

This policy explains how Thrive Advice Pty Ltd (ABN 85 632 745 487) ("Thrive", "we", "us") collects, holds, uses and discloses personal information. We are a registered tax agent (TPB registration 25971037) based in Orange, NSW.

We are bound by the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). We also follow the Privacy (Tax File Number) Rule 2015, the confidentiality rules in the Tax Agent Services Act 2009, and the professional standards of the Accounting Professional & Ethical Standards Board.

We may update this policy from time to time. The current version is always on our website.

2. What personal information we collect

We only collect personal information we need to provide our services and meet our legal obligations. Depending on the services, this may include:

• names, addresses, phone numbers, email addresses and dates of birth

• tax file numbers (TFNs), ABNs and other government identifiers

• identity documents, such as a driver licence or passport, and the results of identity checks

• financial information, such as income, assets, debts, bank statements, payroll and superannuation details

• information about your business, trusts, companies and self-managed super funds, including the people who own, control or benefit from them

• details of family members and dependants, where relevant to your tax or financial affairs

• records of our meetings, calls and emails with you, including notes and recordings of meetings where you have agreed to this

• information about people who apply to work with us

We do not usually need sensitive information, such as health information. If it is relevant to your affairs (for example, a medical expense claim), we will only collect it with your consent or where the law allows.

Tax file numbers. We only collect, use and disclose TFNs where tax, superannuation or other laws allow it, such as lodging returns with the ATO. We do not use your TFN to identify you for any other purpose. We store TFNs securely and destroy or de-identify them when we no longer need them for a lawful purpose.

Dealing with us anonymously. You can ask general questions without giving your name. For most of our services, we cannot act for you without knowing who you are.

3. How we collect and hold it

We collect most personal information directly from you: in meetings, by phone and email, through our proposals and online forms, and from documents you give us.

We may also collect it from others, with your authority or where the law allows. This includes the ATO, ASIC, your bank or accounting software (such as Xero), your previous accountant, your financial adviser, lawyers and other professionals, and identity verification services.

If we receive personal information we did not ask for, we will destroy or de-identify it if we could not have lawfully collected it, and it is lawful and reasonable to do so.

We hold personal information in electronic form, in our practice management, accounting and document systems, most of which are cloud based. We keep only limited paper records, which are stored securely at our office.

4. Why we collect, use and disclose it

We collect, use and disclose personal information to:

• provide accounting, tax, bookkeeping, advisory, self-managed super fund and company secretarial services

• lodge returns and forms, and deal with the ATO, ASIC and other government bodies for you

• verify your identity and meet our anti-money laundering and counter-terrorism financing (AML/CTF) obligations

• keep records we are required to keep by law and professional standards

• manage our relationship with you, including billing and answering questions

• send you newsletters and updates, if you have agreed (see section 7)

• recruit staff and contractors

We only use personal information for these purposes, a related purpose you would reasonably expect, or where you consent or the law requires or allows it.

Who we disclose it to. Where needed for these purposes, we may disclose personal information to:

• the ATO, ASIC, AUSTRAC and other government bodies

• our outsourced teams, contractors and software providers (see section 5)

• auditors, including self-managed super fund auditors

• identity verification and screening providers

• banks, lenders, financial advisers, lawyers and other professionals, with your authority

• anyone you have authorised us to deal with

We may be required by law to report certain matters to AUSTRAC, and the law may prevent us from telling you about a report. We do not sell personal information.

5. Outsourcing, cloud software, AI tools and overseas disclosure

Outsourced teams. We use outsourced teams that work exclusively for Thrive, through Accsource and direct contractors. They are located in India (Chennai) and the Philippines (Pampanga and Tarlac). They help with work such as accounting file preparation and data entry. Their work is reviewed and checked by our team in Australia.

Cloud software. We use cloud-based software to run our practice, including accounting, practice management, proposal, document and email systems. These providers store information on their servers, which may be in Australia or overseas.

Artificial intelligence (AI) tools. We use AI tools to help us work more efficiently, for example to summarise documents, draft emails, prepare meeting notes and process information. We remain responsible for our work and our advice. Our main AI platform stores data in Australia. When it generates a response, your information may be processed briefly overseas by its AI providers, currently in the United States, New Zealand or Singapore. Some of the other AI tools we use may also process data overseas, including in the United States.

Countries. As a result, your personal information may be disclosed to or stored in Australia, India, the Philippines and the United States, and other countries where our software providers keep their servers.

How we protect information sent overseas. Before we disclose personal information to a recipient overseas, we take reasonable steps to make sure the recipient does not breach the APPs. This includes contracts, confidentiality agreements and checking the provider's security and privacy terms. We remain accountable for how those recipients handle your personal information.

6. Security, keeping records and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. These steps include access controls, multi-factor authentication, staff confidentiality obligations and training, and choosing providers with appropriate security.

We keep personal information for as long as we need it for our services, and for as long as the law requires, including tax, AML/CTF and professional record-keeping laws. After that, we destroy it or de-identify it.

If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

7. Your choices, access, correction and complaints

Newsletters and marketing. We may send you newsletters and updates about our services. You can opt out at any time by using the unsubscribe link or contacting us.

Access and correction. You can ask for access to the personal information we hold about you, or ask us to correct it. We will respond within a reasonable time, usually within 30 days. We will not charge you for making a request. We may charge a reasonable fee to cover the cost of giving you access. If we refuse, we will tell you why in writing, unless that would be unreasonable, and how to complain.

Complaints. If you think we have breached the APPs or mishandled your personal information, please contact us using the details below. We will acknowledge your complaint, investigate it, and aim to respond within 30 days.

If you are not satisfied with our response, you can complain to the OAIC:

• Website: www.oaic.gov.au

• Phone: 1300 363 992

• Post: GPO Box 5288, Sydney NSW 2001

Contact us

Privacy Officer, Thrive Advice Pty Ltd

• Email: reception@thriveadvice.com.au

• Phone: 02 6362 8255

• Post: PO Box 952, Orange NSW 2800