Last updated: 23 October 2026
BF Books ("we", "us", "our") provides bookkeeping, BAS, payroll and Xero/MYOB support to small businesses across the Sunshine Coast, Brisbane and Redlands. We respect your privacy and handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). This policy explains what we collect, why we collect it, and how you can access or correct it.
If you use the contact form on our website, email us or call us, we may collect:
To provide our services we may collect and hold information such as:
Our website collects some information automatically, such as your IP address, browser and device type, the pages you visit and how you arrived at our site. See section 6 for details about cookies and analytics.
We collect personal information directly from you wherever possible, through our website contact form, by email, by phone, or in meetings. Sometimes we collect information from third parties with your authority, for example from your accountant, your bank feeds or your accounting software, or from the Australian Taxation Office (ATO) when acting as your registered BAS agent.
We use personal information to:
We will not sell your personal information, and we will not use it for direct marketing without your consent. You can ask us to stop contacting you at any time.
We only disclose personal information where it is needed to provide our services, where you have agreed, or where the law requires or allows it. This may include:
These providers only receive the information they need and are expected to protect it.
Some of the service providers we use, including Google and some cloud software providers, may store or process information on servers outside Australia, including in the United States. Where this happens we take reasonable steps to make sure your information is handled in a way that is consistent with the Australian Privacy Principles.
Our website uses Google Analytics to understand how visitors use the site, such as which pages are viewed and for how long. Google Analytics uses cookies, which are small files stored in your browser. The information collected is aggregated and does not tell us who you are.
Our website also loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
You can block or delete cookies in your browser settings, or opt out of Google Analytics with the Google Analytics opt-out browser add-on. You can read how Google uses data at policies.google.com/technologies/partner-sites.
Where we handle tax file numbers, for example when processing payroll, we only collect, use and disclose them for purposes permitted by tax, superannuation and personal assistance laws, and we protect them in line with the Privacy (Tax File Number) Rule 2015.
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access or disclosure. These steps include secure, password-protected systems, multi-factor authentication on key accounts, limiting access to people who need it, and using reputable cloud software providers.
Enquiries sent through our website form are stored securely in our website system and sent to us by email.
If a data breach is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme.
We keep client records for as long as we need them to provide our services and to meet our legal obligations. Tax law generally requires business records to be kept for at least five years. When we no longer need personal information, we securely destroy or de-identify it.
You can ask to see the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within a reasonable time, usually within 30 days. If we cannot give you access, we will explain why.
If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. We will respond within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.