Privacy Statement

1. INTRODUCTION

WSC Group ("we", "us", "our") is committed to managing personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, handle, use, disclose, store and protect your personal information, and how you can access, correct or make a complaint regarding our handling of your information.

2. PRIVACY COLLECTION NOTICES (PCNs)

For some services or engagements that require additional information, we may issue a supplementary Privacy Collection Notice. This Policy should be read together with any applicable PCN.

3. TYPES OF PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on your relationship with us. It may include:

• Identity information such as name, address, contact details, date of birth.
• Identification documents (e.g., driver's licence, passport, Medicare).
• Financial information including tax details, banking information, assets, liabilities, superannuation details.
• Employment information including job title, employer details.
• Information relevant to your engagement (e.g., business information, documents provided to us).
• Sensitive information, including health information or criminal history, where consent is provided or permitted by law.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• Directly from you (in person, phone, email, website forms, meetings).
• Indirectly from your authorised representatives, employers or other advisers.
• From publicly available sources, regulators, government databases or social media.
• From third-party service providers who assist with your engagement.
• Through website analytics, cookies and digital tools.

Where lawful and practicable, individuals may interact with us anonymously or using a pseudonym.

We take reasonable steps to ensure personal information we collect, use and disclose is accurate, up-to-date, complete and relevant.

5. DEALING WITH UNSOLICITED PERSONAL INFORMATION

WSC Group handles unsolicited personal information in accordance with the APPs. If we receive personal information that we did not actively request, we will determine whether it is reasonably necessary for our functions or activities. If the information is not required, and it is lawful and reasonable to do so, we will destroy or de-identify it promptly. If the information is relevant to an existing or potential engagement, it will be managed in line with this Privacy Policy and the Australian Privacy Principles.

6. COOKIES, DIGITAL TOOLS & WEBSITE ANALYTICS

WE may use cookies or similar technologies to improve website performance, personalise content and measure engagement. You may disable cookies through your browser, but some website features may not work.

7. WHY WE COLLECT, USE AND DISCLOSE PERSONAL INFORMATION

We collect and use personal information for purposes including:

• Providing accounting, tax, business advisory, audit, financial planning and related services.
• Managing our client relationships, billing, payments, compliance and risk.
• Verifying identity and compliance with AML/CTF obligations.
• Providing information about our services, events or updates (you may opt out).
• Improving our systems, website and services.
• Meeting our legal and regulatory obligations.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Measures include access controls, secure storage, and regular data security reviews.

8. OVERSEAS DISCLOSURE

Some third‑party service providers or systems used by us may operate overseas. We take reasonable steps to ensure that any overseas recipient complies with the APPs or is subject to comparable safeguards.

9. THIRD-PARTY SERVICE PROVIDERS

We may disclose personal information to:

• IT and cloud service providers.
• External auditors, consultants and professional specialists.
• Lawyers, insurers and regulatory bodies as required.
• Event management providers (where you register for events).
• Other advisers assisting with your engagement.

All such parties are required to maintain confidentiality.

10. CONSEQUENCES OF NOT PROVIDING PERSONAL INFORMATION

You are not required to provide us with any personal information. However, if required personal information is not provided, we may be unable to provide our services or respond to your enquiry.

11. ADOPTION, USE OR DISCLOSURE OF GOVERNMENT IDENTIFIERS

WSC Group does not adopt, use or disclose government-issued identifiers—such as tax file numbers, Medicare numbers, passport numbers or driver's licence numbers—as our own internal identifiers. We only use government identifiers where required or authorised by law, and solely for the purposes for which they were provided (such as identity verification, regulatory compliance or service delivery). We do not use government identifiers to identify clients within our internal systems or databases, nor do we disclose them to third parties except where legally permitted or necessary to fulfil our professional obligations.

12. RETENTION & DESTRUCTION

We retain personal information as required by law, professional standards and business needs. When no longer required, we securely destroy or de-identify it in accordance with our Document Control and Data Classification Policy.

13. SENSITIVE INFORMATION CONSENT

Where we collect sensitive information, we do so with your consent or as otherwise authorised by law. You may withdraw consent, though this may impact our ability to provide services.

14. ACCESS TO AND CORRECTION OF PERSONAL INFORMATION

You may request access to or correction of your personal information by contacting us. Once we verify your identity, we will provide access unless an exemption applies. We will take reasonable steps to correct inaccurate, incomplete or outdated information.

15. NOTIFIABLE DATA BREACHES

If an eligible data breach occurs and serious harm is likely, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required. Our Data Breach Policy outlines the steps we take to assess and manage breaches.

16. COMPLAINTS

If you have a complaint about how your information has been handled, you may contact us. We will investigate and respond within a reasonable timeframe. If unresolved, you may contact the OAIC at www.oaic.gov.au.

17. UPDATES TO THIS POLICY

We may update this Privacy Policy periodically. The latest version will be available on our website. Continuing to engage with us constitutes acceptance of the updated Policy.

CONTACT DETAILS

WSC Group
PO Box 3070, Bangor NSW 2234
[email protected]