Privacy Policy

Commitment to Privacy

PrincipleFocus is committed to protecting your privacy and maintaining the confidentiality of your personal, financial, and business information. We want you to know that we are committed to protecting your privacy and handling your personal information in an open and transparent way.

This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), applicable Tax File Number (TFN) Guidelines, and other relevant privacy and taxation laws. By engaging our services or interacting with us, you consent to the collection, use, and disclosure of your personal information as outlined in this Privacy Policy.

This Privacy Statement (“this Statement”) applies to PrincipleFocus Pty Ltd (“we” or “us” or “PrincipleFocus”). 


What does this Privacy Statement cover?

This Statement explains how we collect, handle, store and protect personal information when:

  • We provide professional services to you or our clients;

  • You use “this Website”; or

  • Perform any other activities that form part of the operation of our business.

When we refer to “this Website” we are talking about website associated with PrincipleFocus. This includes:

  • Pages accessed using the principlefocus.com.au URL; and

  • Pages or communications that link directly to this privacy statement.


What personal information do we collect?

We may be provided with personal information directly by our clients to enable us to deliver professional services or to perform due diligence checks before we agree to provide services. This information may relate to clients’ employees, members or customers or it may relate to third parties (for example, the spouses and dependents of a client’s employees, members or customers).

As part of providing professional services to our clients, we may also collect personal information from other sources (such as directly from individuals themselves or information that is publicly available). 

The types of personal information we may collect or be provided with include, but are not limited to:

  • Contact details;

  • Dates of birth;

  • Gender;

  • Employment records;

  • Financial records;

  • Complaint details.

PrincipleFocus may also collect sensitive personal information (also called ‘special category information’). For example, where we are provided with such information directly by our clients to provide professional services, or where we collect information directly from individuals with their consent. This may include:

  • Government identifiers such as drivers’ licence, passport, Medicare numbers, and visa/work permit status;

  • Tax file numbers, Australian Business Numbers (ABNs) and Australian Company Numbers (ACNs)

  • Financial statements

  • Tax returns and taxation records

  • Bank account information

  • Superannuation details

  • Trust, company, partnership, and entity records

  • Asset and liability information

Business and Operational Information

  • Business performance data

  • Farm production figures

  • Livestock and crop records

  • Industry benchmarking information

  • Commercial and operational metrics

Where we are provided with personal information by a client, we take steps to ensure that the client has complied with the relevant obligations under applicable data protection laws in relation to that information; this may include, for example, that the client has provided you with notice of the collection (and other matters) and has obtained any necessary consent for us to collect, use and disclose that information.

We also collect personal information (such as contact details and account details) from suppliers, contractors, and third-party service providers that we engage to help us operate our business.


How We Collect Information

We generally collect personal information directly from you through:

  • Client onboarding processes

  • Face-to-face meetings

  • Telephone conversations

  • Email correspondence

  • Online forms and secure digital portals

  • Document sharing platforms

  • Business records and financial documentation provided by you

Where authorised by you or permitted by law, we may also collect information from third parties, including:

  • Legal representatives

  • Financial institutions

  • Previous accountants or advisers

  • Government agencies

  • Professional service providers

  • Industry data providers


Purposes of Collection, Holding and Use

We collect, hold, and use personal information for legitimate business and professional purposes, including:

  • Providing accounting, taxation, bookkeeping, compliance, and advisory services

  • Preparing and lodging taxation and regulatory documents

  • Corporate structuring and business planning

  • Managing client relationships

  • Processing invoices and payments

  • Meeting legal and professional obligations

  • Communicating regulatory updates and service information

  • Maintaining internal business records

Where practical and appropriate, benchmarking analysis is conducted using aggregated and de-identified data. If you choose not to provide information requested by us, we may be unable to provide some or all of our services or meet regulatory requirements on your behalf.


Direct Marketing Communications

From time to time, PrincipleFocus may send newsletters, business updates, invitations to events, regulatory alerts, and information regarding our services that may be relevant to you.

You may opt out of receiving marketing communications at any time by:

  • Clicking the unsubscribe link in electronic communications; or

  • Contacting us directly using the details below.

Operational and compliance-related communications relating to our professional engagement may continue where necessary.


Disclosure of Personal Information

PrincipleFocus does not sell, rent, or trade personal information.

We may disclose information where reasonably necessary to provide services or where required by law.

Regulatory and Legal Disclosures

We may disclose information to:

  • The Australian Taxation Office (ATO)

  • Australian Securities and Investments Commission (ASIC)

  • Courts, tribunals, and regulators

  • Other government agencies as required by law

Professional Service Providers

We may disclose information to:

  • Legal advisers

  • Financial institutions

  • Specialist consultants

  • Software and technology providers

  • Auditors and professional advisers

Such disclosures will only occur where necessary for service delivery, authorised by you, or otherwise permitted by law.

Cloud Infrastructure and Cross-Border Data Flows

PrincipleFocus uses secure cloud-based Software-as-a-Service (SaaS) platforms, including accounting, document management, communication, and backup systems. These providers may include platforms such as Xero, MYOB, Microsoft 365, cloud storage providers, and other business management applications.

PrincipleFocus operates only within Australia.  We do engage offshore processing organisations, located in India and the Philippines, to process financial statements and tax returns only.  Some service providers may store, process, or back up information in jurisdictions outside Australia used within their global infrastructure.

Where overseas disclosure occurs, we take reasonable steps to ensure service providers protect information in a manner consistent with the Australian Privacy Principles.

Website, Cookies and Analytics

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type

  • Device information

  • Website pages visited

  • Date and time of access

  • Referring website information

We may use cookies, analytics tools, and similar technologies to improve website performance, security, and user experience. You can manage or disable cookies through your browser settings, although some website functionality may be affected.

Data Security and Safeguards

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.  Our security measures may include:

  • Multi-factor authentication (MFA)

  • Encryption of data in transit and at rest

  • Enterprise-grade firewalls

  • Secure cloud infrastructure

  • Role-based access controls

  • Staff confidentiality obligations

  • Secure document storage and disposal procedures

  • Regular technology and security reviews

Despite our security measures, no transmission or storage system can be guaranteed to be completely secure.

Retention and Destruction of Information

We retain personal information only for as long as necessary to provide our services and meet legal, professional, taxation, and regulatory obligations.

When information is no longer required, we take reasonable steps to securely destroy, anonymise, or de-identify the information in accordance with applicable legal and professional record-keeping requirements.

Notifiable Data Breaches Scheme

PrincipleFocus maintains procedures for identifying, assessing, and responding to data security incidents.

If an eligible data breach occurs that is likely to result in serious harm, we will promptly investigate, contain, and assess the incident and comply with our obligations under the Notifiable Data Breaches (NDB) Scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

Accessing and Correcting Your Information

You may request access to personal information we hold about you and request corrections if the information is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

Requests should be made in writing to our Privacy Officer.  We will respond to requests within a reasonable time, typically within 30 days, unless exceptional circumstances apply.


Complaints and Privacy Concerns

If you believe we have breached your privacy or failed to comply with our obligations under privacy legislation, you may submit a complaint in writing to our Privacy Officer.  We will:

  • Acknowledge your complaint promptly;

  • Investigate the matter;

  • Respond in writing; and

  • Seek to resolve the matter within 30 days where practicable.

If you are not satisfied with our response, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au

Privacy Contact Officer

For privacy enquiries, requests to access or correct information, or privacy complaints, please contact:

Privacy Officer
PrincipleFocus

Email: pf@principlefocus.com.au
Phone: 02 6885 5788

Postal Address: PO Box 2875 DUBBO NSW 2830

Alternately you may contact us online through the messaging app or through the complaints functionality, both on our website.


Effective Date | 30 October 2026

Last Review Date| 30 October 2027

Changes to this Privacy Policy

PrincipleFocus may update this Privacy Policy from time to time to reflect changes in legislation, technology, business practices, or professional requirements.

The current version of this Privacy Policy will be made available through our website and upon request.

Contact Us