Effective date: July 5, 2021

This page informs you of our policies regarding the collection, use and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

TaxFox Australia Pty Ltd ("us", "we", or "our") operates the TaxFox website and mobile applications (“App”) (hereinafter referred to as the "Service").

This Policy applies to the websites and App which are operated by TaxFox (“TaxFox”) under the domain name “www.taxfox.com.au”. Unless otherwise stated, all defined terms used in this Security and Privacy Policy shall have the same meaning as set out in our Terms and Conditions of Use.

Security and Privacy

TaxFox takes reasonable steps to preserve the security of cookie and personal information in accordance with this Privacy Policy. If your browser is suitably configured, it will advise you whether the information you are sending us will be secure (encrypted).

TaxFox regularly reviews developments in security and encryption technologies. Unfortunately, no data transmission over the Internet can be guaranteed as totally secure. Accordingly, although TaxFox strives to protect such information, TaxFox cannot ensure or warrant the security of any information you transmit to us or from our online products or services and you do so at your own risk. Once we receive your transmission, we take reasonable steps to preserve the security of the information in our own systems.

Bank-level security

We use the same security technology as the big banks. A variety of methods are used to secure our data and servers, from the bare metal servers to the application in your browser.

Your bank details

Your bank details are stored in an encrypted way and once entered you never see these details.

Definitions

Cookies are small files stored on your device (computer or mobile device).

Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.

For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.

Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller.

We may use the services of various Service Providers in order to process your data more effectively.

Data Subject (or User) is any living individual who is using our Service and is the subject of Personal Data.

Fees means any fees, costs, charges, disbursements or other amounts charged by us to you for use or access of any service.

Our Data means, without limitation, all data, material, content, details, information, guides, copyright, intellectual property, inventions, apps, tools, marks, links, graphics, code (including object code and source code), blogs, calculators and calendars that is available or accessible on our sites (whether directly or indirectly and whether intentionally or not).

Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

Services refers to any services and/or products that are supplied by us to you including services and/or products made available to you, or accessed by you, on one of our sites or Apps.

Sites means any website, android app or iOS app that we make available from time to time including any site that we use to offer access to services and “site” means any one of the sites as the context requires. Without limitation, “site” includes www.taxfox.com.au.

User Account means any account registered with us for the purposes of accessing one or more services.

Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Website means the website www.taxfox.com.au or any other website owned or operated by TaxFox

You, Your, and User refers to you as the user of the services and where you have registered an account with us, the account holder.

Your Data means, without limitation, all data, content, material, details and information (including personal and sensitive information) of any kind inputted by you in your User Account or otherwise provided by you (whether directly or indirectly and whether intentionally or not) whilst accessing a site or service and includes information submitted by you or on your User Account.

How Information is Collected

We collect, hold, use and disclose your personal information primarily to perform professional services and fulfil our business functions and activities as described in our Privacy Policy, and you consent and authorise us and our service providers to collect, hold, use and disclose that information for the purposes described in our Privacy Policy, and for the following purposes:

We may collect Your information in a number of ways including:

directly from You, such as:
- when You provide information to us when You register to use TaxFox;
- when You use the TaxFox App;
- when You participate in contests, giveaways and other promotions via the Website or the App;
- when You participate in one of our surveys; or
- when You contact us with an enquiry on a request;
through TaxFox, when You synchronise Your TaxFox account with Your Bank Account;
from third-parties, however we will only do that when it would be reasonable to expect us to do so, or where it is not reasonable to expect us to do so, then with your consent;
from publicly available sources of information, however we will only do that when it would be reasonable to expect us to do so, or where it is not reasonable to expect us to do so, then with your consent;
when we are legally authorised or required to do so; or
through digital communications, such as when You visit our Website.

You have a right not to provide information to us. We will give You the opportunity to provide or to decline to provide information and, where practicable and lawful, we will allow You to interact with us anonymously or by using a pseudonym. However, if You choose not to provide certain information about You, we may not be able to provide You with the service You request or the level of service on which we pride ourselves.

In the course of your visits to our website or use of our services, we may obtain the following information about:

your title, legal names and a username;
your contact details, including email address, postal address, home address and/or telephone number (mobile/work/home);
your tax file number;
your date of birth;
your gender;
your Australian citizenship status;
your bank account details to receive your tax refund;
your tax related debts, such as a higher education loan program debt;
your occupation;
your income types and amounts, including your salary or wages, dividends, allowances, government allowances, pensions, interest and rent received;
your credit card or other payment details to pay for our services;
your social media information;
information about your business or personal circumstances;
information in connection with customer surveys, questionnaires and promotions;
your sensitive information as set out below;
- details of products and services we have provided to you and/or that you have enquired about, and our response to you;
- the content of any email you send to us;
- your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;
- information about your access and use of our Site, including through the use of Internet cookies, your communications with our Site, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider;
- additional personal information that you provide to us, directly or indirectly, through your use of our Site, associated applications and/or accounts from which you permit us to collect information; and
- any other personal information requested by us and/or provided by you or a third party.

How Information is Used

We collect several different types of information for various purposes to provide and improve our Service to you. We will never sell your personal information.

The information that we will collect about you will depend on how you use our Services

The main purposes for which we collect personal information are:

to provide and maintain our Service to You;
to provide customer support;
to gain an understanding of Your needs so that we may improve and develop our Services;
to keep you informed of the services we offer and of current developments and changes;
to notify you of events, services and service offers;
for administration and management purposes;
to comply with government guidelines, rules and regulations;
to verify Your identity and to allow You to access and use our services;
to communicate with You (such as by providing weekly summaries of Your Account Information and by sending You email alerts and TaxFox newsletters);
to personalise Your experience with Us;
to perform research and analysis (including to conduct surveys);
for direct marketing purposes, such as providing you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
for any other purpose which it would be reasonable to expect that we would collect, hold, use and disclose your information for; and
subject to Your consent, for other purposes which may be notified to You from time to time.

Unless specifically necessary for us to provide services to you and you have expressly consent to us doing so, we will not usually seek sensitive information from you or about you. Sensitive information can include things like your religion, ethnicity, criminal history, medical condition and sexual preference.

We may use government approved third party services for verification and investigations purposes.

If you visit an unsecure area of the TaxFox website (that is, an area where you are not required to log on) to read, browse or download information, our system may record the date and time of your visit to our site, the pages viewed and any information downloaded. However, our systems will not record any personally identifiable information.

If you decide to use one of our online services, such as our Individual tax return software, our system will record all information you enter during your use of the TaxFox website which may include both personally identifiable information and sensitive information (as those terms are defined in the Privacy Act 1988 (Cth).

The TaxFox website may also contain links to the websites of third party providers of goods and services. If you have accessed Third Party websites through the TaxFox website and if those third parties collect information about you, TaxFox may also collect or have access to that information as part of our arrangements with those third parties. We are not responsible for the storage or safekeeping of any information you input on a Third Party website.

We may use Your information so that we and our business partners can promote and market products and/or services that we think may be of interest to You (including products and/or services provided by a third-party). This marketing may be carried out in a variety of ways (including by email or by customising online content) and may continue after You stop using TaxFox, until You opt-out. You may opt-out by emailing us at support@taxfox.com.au or by following the “unsubscribe” instructions in any email communication You receive from us.

The TaxFox website may periodically be promoted using online display advertising and remarketing tools connected with Google Analytics. TaxFox and third-party vendors, including Google and Microsoft, may use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimise, and serve ads based on individuals’ past visits to this website. This is intended to help make ads relating to this site more relevant to people who have or have not visited this website and to minimise ads displayed to people who may not need the services of this site. Visitors can opt-out of Google Analytics for Display Advertising and customise Google Display Network ads using Google’s Ads Settings.

TaxFox respects the choice of any individual to opt out of common web tracking systems and encourages concerned individuals to investigate the Google Analytics opt-out browser add-on.

Third Party websites should have their own privacy statements and those third parties are responsible for their own privacy practices.

How Information is Held

We take the privacy and security of Your information seriously.

We use various technical solutions, security controls and internal procedures to help us protect Your information. For example:

we use a combination of firewall barriers, encryption techniques and authentication procedures:
- to maintain the security of Your online session; and
- to protect Your information, the TaxFox accounts and our systems from misuse, interference and loss, and from unauthorised access, modification or disclosure;
when You register as a TaxFox User, we require a password from You for Your privacy and security;
we transmit information such as Your Registration Information or Your Account Credentials only securely;
from the time You log in to use TaxFox, the communications between Your computer or Mobile Device and TaxFox are encrypted. This enables client and server applications to communicate in a way that is designed to prevent eavesdropping, tampering and message forgery; and
we test the Website and the App regularly for any failure points that would allow hacking.

For clarity, these precautions apply only to TaxFox. We exercise no control over how Your information is stored, maintained or displayed by third-parties or on third-party websites.

You are responsible for maintaining the confidentiality of Your TaxFox Registration Information.

When you access the Service with a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet

We maintain strict rules to help prevent others from guessing Your password. We also recommend that You change Your password periodically. Your password must be at least 8 characters in length. You must not provide Your TaxFox Registration Information to any third-party. If You believe that Your TaxFox Registration Information may have been stolen or been made known to others, You must contact us immediately at support@taxfox.com.au. In any event, You should change Your password immediately via the Website or App. We are not responsible if someone accesses Your TaxFox account if they have obtained Your TaxFox Registration Information from You or as a result of Your breach of this Privacy Policy or the TaxFox Terms of Use.

If You have a security related concern, please contact us at support@taxfox.com.au. We will work closely with You to ensure a rapid and personal response to Your concerns.

How Long Information is Kept

We will hold your personal information for only as long as is required to fulfil the purposes for which it was collected or as required by law.

Your Data is Yours. You can remove it anytime You want. When You request us to delete Your TaxFox account, Your Data will be permanently expunged from our primary production servers and further access to Your TaxFox account will not be possible. We will also promptly disconnect any connection we had established to Your Account Information and delete all Account Credentials.

However, portions of Your Data, consisting of aggregate Data derived from Your Account Information, may remain on our production servers indefinitely. Your Data may also remain on a backup server or media. We keep these backups to ensure our continued ability to provide the Service to You in the event of malfunction or damage to our primary production servers.

How Information is Disclosed

From time to time, we may disclose Your information with entities outside of our organisation. These may include:

our related bodies corporate, business partners, associates and affiliates;
We may disclose your personal information to third parties where it is inherent in the provision of the services to you, required by law, or third parties who we engage to provide services to you or assist us to provide services to you such as hosting, operating particular features or functionalities, accountants, financial advisers and other professional, secretarial or expert services. We will always request that such third parties deal and protect your personal information in accordance with the Privacy Act 1988.
anyone who is authorised by law to obtain information about You from us.

The entities to which we disclose Your information have been selected in accordance with our security policies and practices, and are bound by confidentiality obligations. If they fail to meet these obligations, they may be subject to disciplinary action, termination of contract and/or criminal prosecution.

Our contracts with the entities to which we disclose Your information:

outline the appropriate use and handling of Your information; and
prohibit them from using any of Your information for purposes other than those for which they have received Your information.

We do not share information with entities which are located, or have operations, outside of Australia. However, should this change in the future, we will seek Your consent and we will deal with that change in accordance with all applicable laws.

We may de-identify Your Personal Information or aggregate it in such a way that it cannot be used to identify You. We may disclose de-identified information to several entities, including:

advertisers and other third-parties for their commercial, marketing, research and promotional purposes;
organisations approved by us that conduct research into consumer spending; and
other users of TaxFox for the purpose of comparing their personal financial situation against that of the broader community.

Our de-identification procedure involves:

removing personal identifiers;
removing or altering other information that may allow You to be identified; and
continuously assessing and managing the risk of re-identification.
browser you use, unique device identifiers and other diagnostic data ("Usage Data").

Accessing and Updating your Information

If you believe any personal data held by us is incorrect, inaccurate, incomplete or not up-to-date you may update it via the App or contact us at support@taxfox.com.au at your earliest convenience so that we can take the reasonable steps to update the information in accordance with the requirements of the Privacy Act 1988.

If You wish to access any of Your information that we hold, You may contact us at support@taxfox.com.au.

The Australian Privacy Principles set out a number of rules in respect of accessing, updating and correcting Your information. For example, we may refuse to give You access to Your information if giving access would have an unreasonable impact on the privacy of other individuals, if Your request for access is frivolous or vexatious, or if the information relates to existing or anticipated legal proceedings.

If we refuse to give You access to, or update, or correct Your Personal Information, we will provide You with a written explanation including the reasons for our refusal.

We may charge You an administrative fee for providing access to Your information in response to a request.

How Email is Handled

We will preserve the content of any email that you send us, if we believe that we have a legal requirement to do so. Your email message content may be monitored by our employees for security issues including where email abuse is suspected; our response to you may be monitored for quality assurance issues.

TaxFox will not request you to provide sensitive information such as bank details, credit card details or your tax file number via unsolicited email.

If you’d like to unsubscribe from promotional emails, please click the unsubscribe link in the footer of an email or if you prefer simply contact us at support@taxfox.com.au. Please note, if you use our App, then we have an obligation to send important correspondence related to the Services. Unsubscribing from our promotional emails will not affect obligatory service related messages or notifications.

Blogs, Forums and Social Media

Our website may host various blogs, forums, and other social media profiles or services that allow you to share personal information and content with other users (“Applications”). Any personal information or content that you contribute to any Applications can be read, collected and used by other users over whom we may have no control. We are not responsible for any use, misuse or misappropriation by other users of any personal information or content that you contribute to any Applications.

You may choose to provide us with personal information in some circumstances when you subscribe to our newsletters.

Cookies

We use “cookies” as a fundamental part of our interaction with your Internet browser. The purpose is to provide you with better and more customised service and with a more effective and efficient website. Cookies are frequently used on almost all websites and you can choose if and how a cookie will be accepted by configuring your preferences and options in your web browser.

TaxFox uses cookies from unsecure areas of the website and may allocate a cookie for the purposes of storing information related to personalisation of the TaxFox websites.

TaxFox also uses cookies for secure services (that is, an area where you are required to log on) on the TaxFox website. These cookies are used for a variety of purposes, including for security and personalisation reasons. If your browser is configured to reject all cookies you may be unable to use secure services on the TaxFox website that require cookies in order to participate. You may still be able to use some of the information-only pages even if you do not accept cookies.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyse our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

‍‍Session Cookies. We use Session Cookies to operate our Service.

‍Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
‍Security Cookies. We use Security Cookies for security purposes.

‍

Legal Basis for Processing Personal Data under the General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), TaxFox Australia Pty Ltd legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

TaxFox Australia Pty Ltd may process your Personal Data because:

We need to perform a contract with you
You have given us permission to do so
The processing is in our legitimate interests and it is not overridden by your rights
For payment processing purposes
To comply with the law

Retention of Data

TaxFox Australia Pty Ltd will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

TaxFox Australia Pty Ltd will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Australia and choose to provide information to us, please note that we transfer the data, including Personal Data, to Australia and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

TaxFox Australia Pty Ltd will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure of Data

Disclosure for Law Enforcement

Under certain circumstances, TaxFox Australia Pty Ltd may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

TaxFox Australia Pty Ltd may disclose your Personal Data in the good faith belief that such action is necessary to:

To comply with a legal obligation
To protect and defend the rights or property of TaxFox Australia Pty Ltd
To prevent or investigate possible wrongdoing in connection with the Service
To protect the personal safety of users of the Service or the public
To protect against legal liability

Security of Data

We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure. Please see our Security Statement for further information.

Unfortunately, no data transmission over the Internet can be guaranteed as totally secure. Accordingly, although we strive to protect such information, we cannot ensure or warrant the security of any information you transmit to us or from our online products or services and you do so at your own risk. Once we receive your transmission, we take reasonable steps to preserve the security of the information in our own systems.

Your Data Protection Rights under the General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. TaxFox Australia Pty Ltd aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data.

If you wish to be informed about what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

The right to access, update or delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
‍The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
‍The right to object. You have the right to object to our processing of your Personal Data.
‍The right of restriction. You have the right to request that we restrict the processing of your personal information.
‍The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
‍The right to withdraw consent. You also have the right to withdraw your consent at any time where TaxFox Australia Pty Ltd relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, perform Service-related services or assist us in analysing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Google Ads (AdWords)

Google Ads (AdWords) remarketing service is provided by Google Inc.

You can opt-out of Google Analytics for Display Advertising and customise the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads

‍Google also recommends installing the Google Analytics Opt-out Browser Add-on - https://tools.google.com/dlpage/gaoptout - for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Behavioural Remarketing

TaxFox Australia Pty Ltd uses remarketing services to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimise and serve ads based on your past visits to our Service.

Facebook

Facebook remarketing service is provided by Facebook Inc.

You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950

‍To opt-out from Facebook's interest-based ads, follow these instructions from Facebook: https://www.facebook.com/help/568137493302217

‍Facebook adheres to the Self-Regulatory Principles for Online Behavioural Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA http://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe http://www.youronlinechoices.eu/, or opt-out using your mobile device settings.

For more information on the privacy practices of Facebook, please visit Facebook's Data Policy: https://www.facebook.com/privacy/explanation

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

Apple Store In-App Payments

Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/en-ww/

Google Play In-App Payments

Their Privacy Policy can be viewed at https://www.google.com/policies/privacy/

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Complaints

If you wish to complain about how we handle your personal information, please contact us using the details set out below including your name and contact details. We will investigate your complaint promptly and respond to you within a reasonable time and in accordance with our legal obligations.

If You wish to notify us of any privacy complaint You may have against us, including if You think that we have failed to comply with the Australian Privacy Principles, You may contact us at support@taxfox.com.au.

We are committed to acknowledging Your complaint in a prompt manner and will give You an estimated timeframe for when we will respond to Your complaint.

It is our intention to resolve Your complaint to Your satisfaction. However, if You feel that Your complaint has not been satisfactorily addressed or that it is taking too long to resolve Your complaint, You are entitled to contact the relevant privacy regulator.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time.

We will notify you of any changes by posting the new Privacy Policy out website. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us by email at: support@taxfox.com.au