This Privacy Policy applies to all personal information collected by Taxtallee Pty Ltd (we, us or our) via the website located at www.taxtallee.com.au (Website).

1. What information do we collect?

The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include: your name, contact details (phone number and email), authentication details (including your username and password), financial and investment data (as required to provide our service), and payment information (processed by a third-party provider, not accessible to us). We also gather transaction details, technical and usage data (such as IP address, login info, device and browser data, location, and website interactions via cookies), and communication records such as email exchanges.

2. Types of information

The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

• (a) whether the information or opinion is true or not; and
• (b) whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “Personal Information” and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive Information will be used by us only:

• (a) for the primary purpose for which it was obtained;
• (b) for a secondary purpose that is directly related to the primary purpose; and
• (c) with your consent or where required or authorised by law.

3. How we collect your Personal Information

We may collect Personal Information from you:

• (a) whenever you input such information into the Website, or platform
• (b) When you provide it directly to us — whether in person, by phone, email, or online
• (c) through the use cookies on our website (See Cookies)
• (d) when you complete forms, such as event or newsletter registrations, or survey responses;
• (e) through third parties connected directly or indirectly to the regular use of our website or platform
• (f) We generally don’t collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
• (g) Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.

4. Purpose of collection

• (a) We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business. We collect your Personal Information for the following purposes:
• (b) To provide you with access to and use of our website, platform, or applications, including login functionality.
• (c) To communicate with you about our services, including responding to support requests or other enquiries.
• (d) To respond to any enquiries you make through our website, platform, or applications.
• (e) For internal administration, including record-keeping, invoicing, and billing.
• (f) For marketing and promotional purposes, including sending you information about our events, experiences, or other content we believe may interest you.
• (g) To conduct promotions, competitions, or offer additional benefits.
• (h) To comply with legal obligations or where otherwise required or permitted by law.
• (i) We customarily only disclose Personal Information to our service providers who assist us in operating the Website (see section 5 on disclosures).
• (j) By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from use. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.

5. Disclosure of your personal information to third parties

We may disclose your personal information to third parties where reasonably necessary to operate our business or comply with legal obligations. This may include:

• Our employees, contractors, related entities, and professional advisers (such as auditors, accountants, insurers, and legal counsel);
• Service providers who support our business operations, including:
  • IT and infrastructure providers (e.g. webhosting, data storage);
  • Marketing and advertising platforms;
  • Payment processors and financial institutions;
• Analytics and cookie providers that help us improve our website and services;
• Business partners, agents, or affiliates involved in delivering our services;
• Sponsors or promoters of any promotions or competitions we run;
• Prospective buyers (and related parties)
• Courts, regulatory bodies, or law enforcement agencies:
  • Where required or authorised by law,
  • In connection with legal proceedings,
  • Or where necessary to establish, exercise, or defend our legal rights;
• Any other third parties as permitted or required by applicable law (e.g. under subpoena or court order)

6. Cookies

We use cookies and similar tracking technologies on our website to improve your browsing experience, analyse site traffic, and personalise content. Cookies are small text files stored on your device when you visit our website. They do not give us access to your computer or any information other than what you choose to share with us. You may choose to reject cookies by changing your browser settings. However, this may prevent the website from functioning and/or restrict you from taking full advantage of our website.

(a) Types of Cookies We Use:

• (i) Strictly Necessary Cookies: Required for basic website functionality (e.g. Authentication).
• (ii) Performance Cookies: Help us understand how users interact with our website (e.g. Google Analytics).
• (iii) Functional Cookies: Remember your preferences and enhance functionality (preferences).
• (iv) Targeting/Advertising Cookies: Used by third-party services to deliver relevant ads or content based on your browsing behaviour.

(b) Third-Party Cookies

• (i) We may allow third-party services—such as Google Analytics—to place cookies on your device to help us analyse website traffic and usage. These third parties may collect and process your data in accordance with their own privacy policies.

(c) Managing Your Cookie Preferences

• (i) Most web browsers automatically accept cookies, but you can modify your browser settings to decline or delete cookies if you prefer. Please note, disabling certain cookies may affect the functionality of our website.

If required under applicable laws, we will request your consent before placing non-essential cookies (e.g. targeting or analytics cookies) on your device.

7. Security, Access and correction

(a) We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification, or disclosure. Our systems are secured using industry- standard protocols, including HTTPS to encrypt data in transit. Access to personal information is restricted to authorised personnel only, and we apply appropriate access controls and authentication mechanisms to protect against unauthorised access. When we no longer require your Personal Information for the purpose for which we obtained in, we will take reasonable steps to destroy and anonymise or de-identify it. Most of the Personal Information that is stored in our client files and records will be kept for a maximum of 10 years to fulfill our record keeping obligations.

(b) The Australian Privacy Principles:

• (i) permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and
• (ii) allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).

(c) Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.

8. Complaint procedure

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us as on the contact details set out at the bottom of this policy. All complaints will be considered by Taxtallee's Privacy Compliance Officer and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

9. Overseas transfer

While our core infrastructure providers - including web hosting and database storage - are based on servers located in Australia, we also engage third-party service providers located outside of Australia. These providers may store, transfer, or access your personal information in overseas jurisdictions, including (but not limited to) the United States.

We take reasonable steps to ensure that any overseas disclosure of your personal information complies with the Australian Privacy Principles, including by engaging service providers who implement appropriate data protection measures.

Your Personal Information may be transferred to recipients located in Australia, Japan, and the United States. You consent to us transferring your Personal Information to Australia, Japan, and the United States in the knowledge that if your Personal Information is mishandled in that jurisdiction, we disclaim responsibility and you will not have a remedy under Australian law.

10. Changes to Privacy Policy

Please be aware that we may change this Privacy Policy in the future. We may modify this Policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our website. When the Policy is updated, Taxtallee Pty Ltd will use reasonable endeavours - meaning commercially practical steps under the circumstances - to notify you the change. This may include sending notice via the email address associated with your account and/or posting a notice on the Taxtallee website.

11. How to contact us about privacy

If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through: Privacy@taxtallee.com.au.