Privacy Policy
Last updated: 4 October 2026
1. Who we are
WeGrow Accountants ("we", "us", "our") is a CPA practice and registered tax agent (TPB registration #26310751) operating in Australia, with offices in Woolloongabba, QLD and Broadmeadows, VIC. ABN: 36 665 355 457.
This policy explains how we collect, hold, use, and disclose personal information — through this website, through your engagement with our practice, and through any other dealings you have with us.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). As a firm that handles tax file numbers, we are also bound by the Privacy (Tax File Number) Rule 2015, regardless of our size. As registered tax agents, we're separately bound by confidentiality obligations under the Tax Agent Services Act 2009 and the TPB's Code of Professional Conduct, which are at least as strict as the APPs and are described in section 6 below.
We provide designated services under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (such as assisting with the formation and structuring of companies and trusts) and are registered with AUSTRAC as a reporting entity. Where we provide these services, we collect, verify, and retain identity and transaction information as required under that Act, and may report certain information to AUSTRAC (see sections 9 and 10).
Liability limited by a scheme approved under Professional Standards Legislation.
2. Personal information we collect
Depending on how you interact with us, we may collect:
- Contact and identity information — name, email, phone number, mailing address, date of birth, and (where required to verify your identity for engagement or under AML/CTF and TPB requirements) identity documents such as a driver licence or passport.
- Financial and tax information — tax file number, ABN, income and expense records, bank account and payment details, superannuation details, property and investment records, and other financial information needed to prepare and lodge your tax, BAS, bookkeeping, or advisory work.
- Business information — entity structure, ASIC details, employee and payroll information (where we provide payroll or bookkeeping services on your behalf), and Xero/Hubdoc data you connect to our systems.
- Enquiry and booking information — details you submit through our price-list download form, contact form, online booking system, or a lead form in one of our Facebook or Instagram ads, including your answers to any questions in the form (such as your business's turnover and whether you have employees) and the nature of your enquiry.
- Technical and website usage information — IP address, browser and device type, pages viewed, referring site, and approximate location, collected automatically when you visit this website.
We only collect sensitive information (such as health information relevant to SMSF or insurance-related advice) where it's directly relevant to the service you've asked for, and with your consent where required.
3. How we collect personal information
Where practical, we collect personal information directly from you — through this website's forms, by phone or email, in meetings, or through documents you provide when we're engaged to act for you.
If you respond to one of our Facebook or Instagram ads by completing a lead form, Meta collects the details you submit and passes them to us. Meta may pre-fill some details from your profile, which you can edit before submitting. We use this information only to respond to your enquiry and, where you've agreed, to follow up about our services.
We also collect information automatically through this website using cookies and similar technologies (see section 7), and, occasionally, from third parties where necessary and lawful — for example, from the ATO, ASIC, your bank, your superannuation fund, or a previous accountant, where you've authorised us to obtain records on your behalf.
If you provide us with personal information about someone else (for example, a business partner, employee, or family member), please make sure you're authorised to do so and that they're aware of this policy.
4. Why we collect, hold, use and disclose your information
We collect and use personal information to:
- prepare and lodge tax returns, BAS, and other statutory documents on your behalf;
- provide bookkeeping, payroll, structuring, and advisory services you've engaged us for;
- meet our legal and professional obligations as a registered tax agent, CPA practice, and AUSTRAC reporting entity — including obligations to the ATO, ASIC, the TPB, and CPA Australia;
- verify your identity, where required by law or professional standards;
- respond to your enquiries, send you materials you've requested (such as our price list), and manage our booking system;
- send you information about our services where you've consented to that, and let you opt out at any time (see section 8); and
- operate, secure, and improve this website.
We don't use or disclose personal information for any purpose other than what it was collected for, unless you'd reasonably expect it, you've consented, or we're required or authorised by law.
5. Tax file numbers
Where we collect your tax file number, we handle it strictly in accordance with the Privacy (Tax File Number) Rule 2015. That means we only use or disclose your TFN for purposes permitted under taxation, personal assistance, or superannuation law; we don't use it to verify your identity for unrelated purposes; we store it securely and separately from other identifying information where practical; and we destroy or permanently de-identify TFN information once we're no longer authorised or required by law to retain it.
6. Confidentiality of client information (Tax Agent Services Act obligations)
As a registered tax agent, we're bound by item 6 of the TPB's Code of Professional Conduct: we won't disclose any information relating to your affairs to a third party without your permission, unless we have a legal duty to do so (for example, a formal ATO notice) or a professional or statutory right to do so. This obligation sits alongside, and is generally stricter than, our obligations under the Privacy Act.
7. Cookies and website analytics
This website uses the following third-party tools, which may place cookies on your device or collect information about your visit:
- Google Ads (gtag.js) — used to measure the effectiveness of our advertising and track conversions. Google may process this data outside Australia, including in the United States. See Google's Privacy Policy.
- Google Analytics — used to understand how visitors find and use our website (e.g. pages viewed, enquiries made) so we can improve it. Google may process this data outside Australia, including in the United States. See Google's Privacy Policy.
- Meta Pixel — used to measure the effectiveness of our Facebook and Instagram advertising and track conversions. Meta may process this data outside Australia, including in the United States. See Meta's Privacy Policy.
- Microsoft Clarity — used to understand how visitors use our website (e.g. anonymised session recordings and heatmaps) so we can improve it. Microsoft may process this data outside Australia. See Microsoft's Privacy Statement.
You can block or delete cookies through your browser settings, though some parts of this site may not work as well as a result. We don't currently respond to browser "Do Not Track" signals.
8. Direct marketing
If you download our price list or otherwise provide your contact details, we may follow up with relevant information about our services. You can opt out of receiving marketing communications from us at any time by using the unsubscribe link in any email, or by contacting us directly (see section 13). We comply with the Spam Act 2003 for any commercial electronic messages we send.
9. Disclosure of personal information
We don't sell your personal information. We may disclose it to:
- the ATO, ASIC, the TPB, or other regulators, where required to deliver our services or comply with the law;
- AUSTRAC, where we're required to report under the AML/CTF Act in connection with designated services (see section 1);
- trusted service providers who help us run the practice, including our cloud accounting platform (Xero), document capture tools (Hubdoc), client onboarding and identity verification platform (Seamlss), booking system (Microsoft Bookings), lead-form provider (Web3Forms), email marketing platform (Brevo), website hosting and security provider (Cloudflare), and advertising, lead-form and analytics providers (Google, Meta, Microsoft) — each bound by their own privacy and security obligations;
- your other professional advisers (such as a financial planner or solicitor), but only with your authorisation; and
- anyone else you direct us to, or as otherwise required or authorised by law.
Overseas disclosure. Some of the service providers above may store or process personal information outside Australia — in particular, Google, Meta, and Microsoft may process data in the United States or other countries where they operate data centres, and Brevo processes data within the European Union (primarily France, Germany, and Belgium). Seamlss stores data on Australian-based servers. Where practical, we take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles before we disclose it.
10. Data quality and security
We take reasonable steps to keep personal information accurate, complete, and up to date, and to protect it from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes access controls, encrypted storage where practical, and secure cloud platforms for financial records.
We retain personal information for as long as we need it for the purposes it was collected, or as required by law. As a general practice policy, we keep client records — including identity and transaction records connected with designated services — for at least seven years from the end of the engagement or the date of the relevant transaction, consistent with our AML/CTF record-keeping obligations and standard ATO record-keeping requirements. Once information is no longer required, we securely destroy or permanently de-identify it.
11. If something goes wrong — data breach notification
If we experience a data breach that's likely to result in serious harm to you, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme, and let you know what steps you can take to protect yourself.
12. Accessing and correcting your information
You can ask us to access the personal information we hold about you, or to correct it if it's inaccurate, out of date, or incomplete. To do this, contact us using the details in section 13. We'll respond within a reasonable time (usually 30 days), verify your identity first, and let you know if we can't give you access or make a correction, and why.
13. How to make a complaint
If you think we've breached the Australian Privacy Principles, or you're otherwise unhappy with how we've handled your personal information, contact us first so we can try to resolve it:
Or write to us at: PO Box 6120, Fairfield Gardens QLD 4103.
If you're not satisfied with our response, you can lodge a complaint with the OAIC at oaic.gov.au or on 1300 363 992. Complaints specifically about our conduct as a registered tax agent can also be made to the Tax Practitioners Board.
14. Automated decision-making
We don't currently use automated decision-making systems that could reasonably be expected to significantly affect your rights or interests. If that changes, we'll update this policy to explain how, consistent with our obligations under the Privacy Act.
15. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on this page, with the "last updated" date at the top.
16. Contact us
For any privacy question, or to request access to or correction of your personal information:
PO Box 6120, Fairfield Gardens QLD 4103