​

Effective date: 1 July 2026

​

1. About this Privacy Policy

Achieve Corporation Pty Ltd ABN 20 624 448 317 (“Achieve”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information we hold.

This Privacy Policy explains how we collect, hold, use and disclose personal information, how you may access or correct personal information we hold about you, and how you may make a privacy complaint.

We manage personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (“APPs”), the Privacy (Tax File Number) Rule 2015 and other applicable laws.

This Privacy Policy applies to personal information handled by Achieve in connection with our accounting, taxation, payroll, contractor management, business advisory and related services, as well as our websites, online portals, employment activities and general business operations.

This Privacy Policy also applies to the following related entities:

• Pro Payroll Pty Ltd ABN 68 629 399 328

References to “Achieve”, “we”, “us” and “our” include each of those entities unless the context indicates otherwise.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true and whether or not it is recorded in a material form.

Sensitive information is a category of personal information that includes information about matters such as an individual’s health, racial or ethnic origin, political opinions or associations, religious beliefs, professional or trade association memberships, trade union membership, sexual orientation, criminal record and certain biometric or genetic information.

3. What personal information do we collect?

The kinds of personal information we collect depend on our relationship with you and the services we provide.

We may collect:

• your name, residential address, postal address, email address, telephone number and other contact details;

• your date of birth, place of birth and gender, where relevant;

• your occupation, job title, employer and employment details;

• identity information and copies or details of identity documents, such as passports and driver licences;

• Tax File Numbers and other government-issued identifiers, where collection is authorised by law;

• Australian Business Numbers, Australian Company Numbers and information about companies, trusts, partnerships and other entities with which you are associated;

• bank account and payment details;

• information about your income, expenses, assets, liabilities and financial position;

• taxation, payroll and accounting records;

• salary, wages, allowances, deductions, leave, timesheet and employment information;

• superannuation and insurance information;

• details of investments, shareholdings, directorships and business interests;

• educational qualifications, professional memberships and employment history;

• visa, residency and work-entitlement information;

• information about your spouse, partner, dependants, employees, contractors, representatives or associates where relevant to the services we provide;

• correspondence, enquiries, instructions, feedback and records of your dealings with us;

• information contained in applications for employment, including résumés, referee details, qualifications and interview or assessment records;

• information about your use of our websites and online systems, such as your IP address, browser type, device information, login activity, access records and website usage information;

• information required to verify identity, prevent fraud, maintain security or comply with our legal and professional obligations; and

• other information reasonably necessary for our functions or activities.

We may also collect sensitive information where it is reasonably necessary for our functions or activities and you have consented to its collection, or where collection is otherwise required or authorised by law.

We will not generally collect sensitive information unless it is relevant to the services we provide or our legal obligations.

4. How do we collect personal information?

Where reasonable and practicable, we collect personal information directly from you.

We may collect personal information when you:

• engage us or enquire about our services;

• enter into an agreement with us;

• provide information, records or documents to us;

• communicate with us in person, by telephone, email, mail, video conference or another method;

• use our website, online portal, software or other digital services;

• complete a form, questionnaire or application;

• subscribe to a newsletter, update or mailing list;

• attend a meeting, seminar or event;

• apply for employment or a contractor position with us;

• provide feedback or make a complaint; or

• otherwise interact with us.

We may also collect personal information about you from third parties, including:

• your employer, contracting entity or another client for whom we provide services;

• your authorised representative;

• accountants, tax agents, financial advisers, lawyers, auditors and other professional advisers;

• banks, financial institutions, superannuation funds and insurers;

• the Australian Taxation Office, Australian Securities and Investments Commission and other government agencies or regulators;

• identity-verification, fraud-prevention and compliance service providers;

• recruitment agencies, referees and former employers;

• public registers and publicly available sources;

• our related entities and business partners;

• software, technology and information-service providers; and

• other parties where you have authorised the disclosure or where collection is required or permitted by law.

Where a client engages us to provide payroll, contractor management, accounting, taxation or related services, the client may provide us with personal information about its employees, contractors, directors, shareholders, beneficiaries, associates or other individuals.

If you provide us with personal information about another person, you should ensure that you are authorised to do so and, where appropriate, that the person is made aware of this Privacy Policy.

5. Anonymity and pseudonyms

Where practicable, you may interact with us anonymously or by using a pseudonym.

This option may not be available where:

• we are required or authorised by law to deal with an identified individual; or

• it is impracticable for us to provide the relevant information or services without identifying you.

For example, we will ordinarily need to identify you before providing accounting, taxation, payroll, payment or identity-related services.

6. What happens if you do not provide personal information?

You may choose not to provide personal information requested by us.

However, if you do not provide information that we reasonably require, we may not be able to:

• provide some or all of our services;

• properly perform our obligations;

• process payments, payroll, taxation or superannuation matters;

• verify your identity;

• comply with our legal or professional obligations;

• respond to your enquiry or request;

• provide access to an online service or portal; or

• consider an application for employment or engagement.

7. Why do we collect, hold, use and disclose personal information?

We may collect, hold, use and disclose personal information for purposes including:

• responding to enquiries and communicating with you;

• establishing, administering and managing our relationship with you or our clients;

• providing accounting, taxation, payroll, contractor management, business advisory and related services;

• processing payments, wages, allowances, reimbursements and deductions;

• administering taxation, superannuation, insurance and other statutory or contractual obligations;

• liaising with the Australian Taxation Office, Australian Securities and Investments Commission and other government agencies or regulators;

• verifying identity, authority, eligibility and work-entitlement information;

• preventing and detecting fraud, misconduct, unauthorised activity and cybersecurity threats;

• managing client accounts, invoicing, credit, debt recovery and payment arrangements;

• maintaining records and meeting our legal, taxation, regulatory, professional and insurance obligations;

• managing disputes, complaints, claims and legal proceedings;

• conducting internal administration, risk management, auditing, quality assurance and training;

• operating, monitoring, maintaining and improving our websites, online portals, systems and services;

• protecting the security, integrity and availability of our systems, premises and information;

• communicating information about our services, business and relevant developments;

• considering employment or contractor applications and managing our workforce;

• undertaking business planning, restructuring, mergers, acquisitions or the sale of all or part of our business;

• complying with a law, court order, regulatory requirement or lawful request; and

• carrying out any other purpose disclosed to you at the time of collection or to which you have consented.

We may also use or disclose personal information for a secondary purpose where:

• you would reasonably expect us to do so and the secondary purpose is related to the primary purpose of collection, or directly related in the case of sensitive information;

• you have consented;

• the use or disclosure is required or authorised by law; or

• it is otherwise permitted under the Privacy Act.

8. Direct marketing

We may use personal information to send you information about our services, events, developments or other matters that we believe may be relevant to you, where permitted by law.

We may contact you by email, telephone, post or another method.

You may opt out of receiving direct-marketing communications at any time by:

• using the unsubscribe function included in an electronic communication;

• emailing us at privacy@achievecorp.com.au; or

• contacting us using the details at the end of this Privacy Policy.

We do not charge a fee for an opt-out request and will take reasonable steps to action your request within a reasonable period.

Opting out of marketing communications will not prevent us from sending you service-related, transactional, legal or administrative communications.

9. Who may we disclose personal information to?

We may disclose personal information to third parties where reasonably necessary for our functions or activities, to provide our services, or where required or permitted by law.

Recipients may include:

• our employees, officers and contractors who require the information to perform their duties;

• entities covered by this Privacy Policy and other related entities;

• clients that have engaged us to provide services concerning you;

• your authorised representatives and professional advisers;

• accountants, auditors, tax agents, financial advisers, lawyers and other professional advisers;

• the Australian Taxation Office, Australian Securities and Investments Commission and other government agencies, regulators, courts and law-enforcement bodies;

• banks, payment processors and other financial institutions;

• superannuation funds, insurers and insurance brokers;

• payroll, accounting, taxation, practice-management and document-management providers;

• information technology, cloud-storage, cybersecurity, data-hosting and technical-support providers;

• identity-verification, compliance, fraud-prevention and background-check providers;

• mailing, communications, printing and marketing service providers;

• debt-recovery providers and credit-reporting or credit-management providers, where applicable;

• recruitment agencies, referees and employment-service providers;

• external consultants and service providers who assist us in operating our business;

• prospective purchasers, investors and professional advisers in connection with a proposed sale, merger, restructure or transfer of our business or assets; and

• any other person where you have consented to the disclosure or the disclosure is required or authorised by law.

Our service providers are expected to handle personal information only for the purposes for which it is disclosed and to protect it appropriately.

We do not sell personal information to third parties.

10. Overseas disclosure and storage

Some of our technology, cloud, software and professional service providers may store or process personal information outside Australia or allow personnel located outside Australia to access personal information.

Personal information may be disclosed to, stored in or accessed from the following countries:

• The Philippines; and

• other countries in which our service providers or their data-hosting facilities operate, where it is not practicable for us to specify those countries in advance.

Before disclosing personal information to an overseas recipient, we will take reasonable steps to ensure that the recipient handles the information in a manner consistent with applicable Australian privacy requirements, unless an exception under the Privacy Act applies.

The countries involved may change if we change service providers or if a provider changes its processing or data-hosting arrangements. We will update this Privacy Policy where appropriate.

11. Tax File Numbers and government identifiers

We handle individual Tax File Number information in accordance with the Privacy Act 1988, the Privacy (Tax File Number) Rule 2015 and applicable taxation, superannuation and personal-assistance laws.

We collect, record, use and disclose individual Tax File Number information only where authorised by law.

We take reasonable steps to:

• protect Tax File Number information from misuse, interference, loss and unauthorised access, modification or disclosure;

• restrict access to persons who require it for an authorised purpose; and

• securely destroy or permanently de-identify Tax File Number information when it is no longer required by law or for an authorised purpose.

We do not use a Tax File Number, Medicare number, driver licence number, passport number or other government-related identifier as our own identifier of an individual, unless permitted by law.

12. Website, cookies and analytics

When you use our website or online services, we may automatically collect technical and usage information, such as:

• your IP address;

• browser type and version;

• device type and operating system;

• pages viewed and functions used;

• referring and exit pages;

• dates and times of access;

• login and authentication activity; and

• information about errors, system performance and security events.

Our website may use cookies and similar technologies. Cookies are small data files stored on your device that help websites function, remember preferences, maintain security and understand how visitors use the website.

We may use:

• essential cookies required for the website or online services to operate;

• functional cookies that remember your settings or preferences;

• security and authentication cookies;

• analytics tools that help us understand website usage and performance; and

Some cookies or analytics tools may be provided by third parties. Those third parties may collect or receive information about your use of our website in accordance with their own privacy policies.

You can usually control or disable cookies through your browser settings. Disabling certain cookies may affect the operation or availability of parts of our website or online services.

13. Links to third-party websites

Our websites and electronic communications may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security or content practices of those third parties. This Privacy Policy does not apply to personal information collected independently by a third party through its website or service.

You should review the relevant third party’s privacy policy before providing personal information to it.

14. How do we store and protect personal information?

Personal information may be held in electronic systems, cloud services, email systems, databases, paper records and other forms.

We take reasonable steps in the circumstances to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Those steps may include:

• access controls and user authentication;

• multifactor authentication;

• encryption and secure data transmission;

• network, endpoint and email-security measures;

• system monitoring, backups and recovery processes;

• physical security for premises and paper records;

• confidentiality obligations;

• employee and contractor training;

• restricted access based on operational need;

• service-provider due diligence and contractual protections; and

• incident-response and business-continuity procedures.

No method of electronic transmission or storage is completely secure. You should contact us promptly if you believe information sent to or from us, or access to one of our systems, has been compromised.

15. Retention and destruction

We retain personal information for as long as it is reasonably required:

• for the purpose for which it was collected;

• to provide and administer our services;

• to maintain business and professional records;

• to meet taxation, corporate, employment, regulatory and other legal obligations;

• to manage claims, complaints, disputes and insurance matters; and

• for other legitimate business purposes permitted by law.

Retention periods vary depending on the nature of the information and the reason it is held.

When personal information is no longer required for a permitted purpose and we are not required by law, court order or another obligation to retain it, we will take reasonable steps to securely destroy it or permanently de-identify it.

16. Data breaches

We maintain procedures for responding to actual or suspected privacy and cybersecurity incidents.

If we become aware of a suspected data breach, we will assess the incident and take reasonable steps to contain and remediate it.

Where a data breach is likely to result in serious harm to one or more individuals and notification is required under the Notifiable Data Breaches scheme, we will notify the affected individual or individuals and the Office of the Australian Information Commissioner.

We may also notify other parties, regulators, insurers or law-enforcement bodies where appropriate or required by law.

17. Access to your personal information

You may request access to personal information we hold about you by contacting our Privacy Officer using the details at the end of this Privacy Policy.

We may ask you to verify your identity and provide information that will help us locate the relevant records.

We will respond to an access request within a reasonable period.

Depending on the circumstances, we may provide access by:

• allowing you to inspect records;

• providing copies of relevant documents;

• providing information electronically;

• providing a summary of the relevant information; or

• using another appropriate method agreed with you.

We do not charge a fee for making an access request. We may charge a reasonable fee for costs incurred in providing access, such as locating, reviewing and copying information. We will inform you of any proposed charge before providing access.

We may refuse access, or provide only partial access, where permitted or required by law. If we refuse an access request, we will generally provide written reasons and explain how you may complain about the decision, unless it would be unreasonable or unlawful to do so.

18. Correction of personal information

We take reasonable steps to ensure that personal information we collect, use and disclose is accurate, up to date, complete and relevant.

You may ask us to correct personal information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

We will respond to a correction request within a reasonable period and will not charge you for making the request or correcting your information.

If we correct personal information that we previously disclosed to another organisation, you may ask us to notify that organisation of the correction. We will take reasonable steps to do so where required by the Privacy Act, unless it is impracticable or unlawful.

If we refuse to make a requested correction, we will generally provide written reasons and explain how you may complain about the decision. You may also ask us to associate a statement with the relevant information indicating that you consider it to be inaccurate, out of date, incomplete, irrelevant or misleading.

19. Privacy complaints

If you have a concern or complaint about the way we have handled your personal information, please contact our Privacy Officer.

Your complaint should include sufficient information for us to understand the issue and investigate it.

We will:

• acknowledge your complaint within a reasonable period;

• review and investigate the matters raised;

• contact you if we require additional information; and

• provide a written response explaining the outcome and any action we propose to take.

We aim to acknowledge privacy complaints within five business days and provide a substantive response within 30 calendar days, although complex matters may require additional time. If additional time is required, we will advise you.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.

The Office of the Australian Information Commissioner can be contacted through its website at www.oaic.gov.au or by telephone on 1300 363 992.

20. Employment records

We may collect and hold personal information about current and former employees and contractors in connection with their employment or engagement.

Some handling of employee records directly related to a current or former employment relationship may be exempt from the APPs. Where an exemption does not apply, or where another privacy obligation applies, we will handle the information in accordance with this Privacy Policy and applicable law.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, systems, services or legal obligations.

The current version will be published on our website and will identify its effective date.

Where a change materially affects how we handle personal information already collected, we will take appropriate steps to notify affected individuals where required.

22. Contact us

Questions, access or correction requests, privacy complaints and requests to opt out of direct marketing should be directed to:

Privacy Officer
Achieve Corporation Pty Ltd
PO Box 4833
Kingston ACT 2604
Email: privacy@achievecorp.com.au
Telephone: 02 6264 8200
Website: https://www.achievecorp.com.au