DRAG
DBA (also means “us” “we” “our”) provides professional outsourcing services in the areas of Audit and Assurance, Tax Compliance and Accounting, Financial Planning, Insurance and Investment, Legal, IT and Administration, and Facilities Management (“Services”).
We discuss in this Privacy Policy the types of information we collect from you, and on how we collect, hold, use and disclose your personal information. We collect these information in order to effectively deliver our Services, and improve our business.
The Information We Collect and Hold
Personal information
We collect personal information directly from you. Personal information may also be collected from third parties including government units, referrers, brokers, agents, and your adviser(s) for the rendition of the Services.
For prospective client enquiries submitted through our website, we may collect your name, business name, phone number, email address, and other contact details. Other information we may collect from you are the areas in which your business operates, the software programs that you utilise, your IT infrastructure, etc.
For enquiries in relation to working with us, and for job applications, we may collect your name, email address, and contact details. You also provide us with your consent in the collection of your sensitive personal information when you upload your CV or résumé in our website contact form.
For clients in the European Economic Area, we only collect personal data that were freely given by you. When you provide us with your personal information, you give your consent that we will only use your data in the implementation of our contractual agreement. Please advise us of any other restriction in the use of your personal data.
Cookies and other data
We are using session cookies, persistent cookies, and 3rd party cookies in our website. Cookies are in plain text format stored in your device to store data once you access our website. Information such as browser type (for example, Internet Explorer, Chrome or Firefox), and registered public IP address may be collected when you visit or access our website. A public IP address is a decimal number registered to you for use to communicate in the Internet. We may also collect general geographic area associated with your IP address.
You may set your internet browser to reject the cookies or prompt you each time a cookie is offered. Cookie rejection may, however, limit your browsing capacity.
Keeping Information Secure
DBA is committed to ensuring that the security of your personal information is held at the highest standard, and with regular monitoring of possible threats and hazards being implemented in all DBA related and independent entities. We utilise robust precautions to protect the confidentiality and security of your data by employing technological, physical, and administrative security safeguards, such as firewalls and Secure Socket Layer (SSL) technology. Despite the process and means of security that we implement for the protection of your data, we nevertheless cannot guarantee full and absolute security of your data.
How Information Is Used and Disclosed
We will only use or disclose your personal information for the purpose for which it was collected.
The information collected will be used:
to provide the availed Services based on our contractual arrangement
to render client support including IT services
to improve our Services
to assist in the operation of our business
for necessary research
for correspondence
for those employment related, to assess your suitability to our job vacancy
You may opt not to provide your personal data. We cannot, however, guarantee full implementation of our Services for lack of data.
As an outsourcing company, some information collected from you may be disclosed to our related entities. These related entities have their own legal structures, and they operate hand-in-hand with us. We do not share any information, for example, to our independent Legal and Audit teams unless the sharing of information is with your consent, or the information is necessary for the execution of our contractual agreement. Our related entities with whom we share your personal information may operate outside of Australia. Where this occurs, we take all reasonable and necessary steps to protect your personal information against misuse or loss, ensure that the overseas recipient complies with the relevant privacy laws in Australia (including the APPs, specifically APP8), and may enter into an enforceable contractual arrangement with the overseas recipient that they will handle all personal information accordingly. In addition, a regular compliance check is being implemented to all our overseas related entities.
We may also share your information to third-party providers such as cloud storage services that store your personal data. We take the utmost precaution and verification that our third-party providers are able to deliver the highest security in storing your data before any transfer is made.
Further, we will use or disclose your personal information if required to do so by law, such as those relating to Anti-Money Laundering and Counter-Terrorism Financing.
How Long We Retain Your Data
All information that has been collected will be retained on the basis of the retention period provided by law or regulation or until it is necessary for the fulfillment of our contractual arrangement. You have the right to direct us to delete your personal data unless there exists a legal requirement for the retention of the information. For IT and Administration, and Facilities Management, all personal information will be permanently deleted or de-identified when the data are no longer required, or when our services contract ends.
Please advise if you require us to delete your data for either of the following reasons: (1) it is already inapplicable for the purpose of which it was collected; (2) withdrawal of consent; and (3) your data was unlawfully processed.
Keeping Information Accurate and Up to Date
Reasonable steps are taken to ensure that all information are accurate, up-to-date, and complete. Please contact us immediately should you require an update, correction, or addition of new information in your data.
Access to Your Data
Access to your data will be provided to you so you could easily amend or correct or delete your personal data. You may also opt to provide us information with the corrections, if necessary, and we will amend any incorrect information for you. We could also provide you with the means of collection and the reasons why we have collected your data.
Third-Party Sites
You may find third-party links in our website. These added links (e.g. ATO portal, etc.) in our website are for your convenience; and we are not, in any way, accountable for their services, or for their website postings. Our Privacy Policy only applies to us; and it does not include privacy policy of any third-party links.
Children
This policy is designed for individuals of legal age of their country. We do not deliberately collect any personal information from children or underage individuals. Please advise us immediately if any of your children have accessed our website and we will immediate delete or de-identify any data that has been shared by your child.
Changes In The Privacy Policy
We update our Privacy Policy on a periodic basis as we deem appropriate. We encourage you to review our Privacy Policy on a regular basis.
Feedbacks
DBA welcomes feedback and complaints about privacy issues. We will endeavour to resolve all complaints within 30 days. Please address all questions and complaints through:
Email: info@dbaadvisory.com
Telephone: 02 8065 4711
If the matter has not been resolved, the aggrieved party may file complaints to the nearest relevant commission or authority.