PRIVACY POLICY
1. About this Privacy Policy
WOW! ADVISORS GROUP is committed to protecting the privacy and security of personal information entrusted to us.
This Privacy Policy explains how WOW! ADVISORS GROUP collects, holds, uses, discloses and protects personal information and how individuals may exercise their privacy rights.
This Privacy Policy is intended to comply with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (Privacy Act), to the extent the Privacy Act applies to us.
Where applicable, we may also be subject to privacy laws in other jurisdictions, including the European Union General Data Protection Regulation (GDPR).
This Privacy Policy applies to the activities of:
- WOW! Advisors & Business Accountants;
- MediSuccess;
- CrystalClear Bookkeeping; and
- Hitesh Mohanlal when conducting activities as a consultant, trainer or presenter.
These businesses are collectively referred to in this Privacy Policy as “WOW! Advisors Group”, “we”, “us” or “our”.
This Privacy Policy applies to personal information collected through our websites, applications, communications, services and other interactions with us.
This Privacy Policy does not apply to information that is exempt from the Privacy Act, including employee records where the employee records exemption applies.
We may update this Privacy Policy from time to time to reflect changes in legislation, technology, our services or our privacy practices. The current version will be published on our website.
2. What is personal information?
For the purposes of this Privacy Policy, personal information generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not.
Depending on the services we provide and your relationship with us, we may collect information including:
- full name;
- date of birth;
- contact details;
- residential and postal address;
- email address;
- telephone numbers;
- tax file numbers and other government identifiers;
- Australian Business Numbers and Australian Company Numbers;
- employment information;
- educational and professional qualifications;
- income information;
- assets and liabilities;
- bank account details;
- credit or debit card information;
- investment and shareholding information;
- superannuation information;
- tax information and tax returns;
- financial statements and accounting records;
- insurance information;
- information about businesses, companies, trusts and other entities with which you are associated;
- information about spouses, dependants, employees, business partners and other associated persons;
- identification documents, including passport or licence details;
- information contained in correspondence and communications with us;
- photographs, video or recordings;
- information submitted through our websites, forms, applications or online services;
- information about your use of our websites and online services, including IP address, browser and operating system information;
- information obtained from government authorities, professional advisers, financial institutions or other third parties; and
- other information reasonably necessary to provide our services or operate our business.
Sensitive information
In some circumstances, we may collect sensitive information where it is reasonably necessary for our functions or activities and permitted by law.
Depending on the circumstances, this may include information concerning:
- health;
- racial or ethnic origin;
- professional association memberships; or
- criminal records.
We take additional care when handling sensitive information and will only collect, use or disclose sensitive information where permitted or required by law, including where applicable with your consent.
3. How we collect personal information
We may collect personal information in a number of ways, including:
- when you become a client or contact us about becoming a client;
- when you provide information to us in connection with our services;
- when you contact us by telephone, email, post, social media or other communication methods;
- when you visit or interact with our websites;
- when you use one of our online services, applications or client portals;
- when you complete an online form;
- when you register for an event, program, seminar or other activity;
- when you subscribe to a mailing list;
- when you purchase or request a product or service;
- when you communicate with members of our team;
- when you participate in promotions or initiatives;
- when photographs or recordings are taken at events conducted by or on behalf of us;
- when we receive information from another person or organisation acting on your behalf;
- from government authorities and regulatory bodies;
- from professional advisers, financial institutions or other service providers;
- from publicly available sources; and
- from other third parties where permitted by law.
We may also collect information automatically when you use our websites or online services, including through cookies and analytics technologies.
Where practicable, we will collect personal information directly from you. However, there will be circumstances where we obtain information from third parties.
If you provide us with personal information about another individual, you should take reasonable steps to ensure that the individual is aware that their information is being provided to us and, where required, that the necessary authority or consent has been obtained.
4. Why we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information for purposes that are reasonably necessary for our functions and activities.
Depending on our relationship with you, these purposes may include:
- providing accounting, taxation, bookkeeping and business advisory services;
- preparing financial statements and tax returns;
- providing business and strategic advice;
- providing training, education, presentations, publications and other resources;
- managing client relationships;
- communicating with clients and prospective clients;
- processing transactions and payments;
- complying with taxation, accounting, legal and regulatory obligations;
- verifying identity;
- maintaining accounting and business records;
- managing risk and protecting the security of our systems;
- preventing fraud and other unlawful activity;
- improving our services and business processes;
- managing our websites, applications and technology;
- conducting research and analysis;
- sending information about our services, events and publications where permitted by law;
- obtaining professional, technical and administrative services from third-party providers;
- using technology, including artificial intelligence and other automated technologies, to assist with our business operations and service delivery; and
- any other purpose notified to you at or before the time we collect your information, or otherwise permitted or required by law.
We will not use or disclose personal information for an unrelated purpose unless permitted or required by law or otherwise authorised by you.
5. Legal basis for handling personal information
We may collect, use or disclose personal information where:
- it is reasonably necessary for our functions or activities;
- it is necessary to provide services you have requested;
- you have provided consent where consent is required;
- we are required or authorised to do so by law;
- it is necessary to comply with a legal or regulatory obligation;
- it is necessary to protect someone’s rights, safety or property;
- it is otherwise permitted under the Privacy Act or another applicable law; or
- where applicable, another lawful basis exists under the GDPR or other applicable privacy legislation.
Consent is therefore not necessarily required for every collection, use or disclosure of personal information.
Where we rely on consent, you may generally withdraw that consent, although withdrawing consent will not affect the lawfulness of any processing undertaken before withdrawal and may affect our ability to provide particular services.
6. Marketing communications
We may use your contact details to send you information about our services, publications, events, educational material and other communications where permitted by law.
You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe facility included in electronic marketing communications.
If you opt out of marketing communications, we may still contact you where reasonably necessary in relation to services you have requested, existing engagements, legal obligations or other legitimate business purposes.
7. Artificial Intelligence and automated technologies
We use technology, including artificial intelligence (AI), machine learning and other automated technologies, to assist us in operating our business and, where appropriate, providing services.
AI and automated technologies may be used for purposes such as:
- drafting and improving communications and documents;
- summarising information;
- analysing information;
- research and information retrieval;
- administrative and productivity tasks;
- transcription and meeting or document assistance;
- workflow automation;
- document processing;
- identifying patterns or information within documents or data;
- improving internal processes; and
- other purposes reasonably necessary for our business operations.
We may use third-party technology providers to provide these capabilities.
Handling personal information using AI
Where an AI system is used in connection with personal information, we will take reasonable steps to ensure that its use is appropriate for the purpose, having regard to privacy, confidentiality, security, accuracy and other relevant risks.
We may conduct due diligence, privacy assessments or other reviews when selecting and implementing AI systems.
We will not knowingly use publicly available generative AI tools to process personal information in circumstances where doing so would create an unacceptable privacy, confidentiality or security risk.
Where appropriate, personal information may be de-identified, minimised or otherwise protected before being provided to an AI system.
Human oversight
AI-generated information or recommendations may contain errors, omissions or inaccuracies.
Where AI is used to assist with work that could materially affect a client or another individual, appropriate human oversight will be maintained.
AI does not replace the professional judgement and responsibility of our staff and advisers.
AI-generated information will be reviewed, checked or validated where appropriate before it is relied upon for professional, legal, taxation, accounting or business purposes.
AI providers and overseas processing
Some AI and technology providers may process information outside Australia.
Where personal information is disclosed to an overseas provider, we will take reasonable steps required by applicable privacy law and will consider the provider’s privacy, security, contractual and data-handling arrangements.
The countries in which information may be processed may vary depending on the technology and service providers we use.
Automated decision-making
We may use automated technologies to assist with administrative or analytical processes.
We do not intend for AI or automated systems to independently make professional decisions on behalf of WOW! Advisors Group where those decisions could have a significant legal or similarly significant effect on an individual without appropriate human oversight.
Where applicable law requires us to provide information about automated decision-making, we will provide the information required by that law.
8. Disclosure of personal information
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.
Depending on the circumstances, information may be disclosed to:
- companies and businesses within WOW! Advisors Group;
- employees and contractors;
- professional advisers;
- lawyers and other legal advisers;
- auditors and consultants;
- banks and financial institutions;
- taxation authorities and government agencies;
- regulators and professional bodies;
- software and technology providers;
- cloud storage and hosting providers;
- IT and cybersecurity providers;
- accounting, bookkeeping and administration service providers;
- document processing and electronic signing providers;
- payment service providers;
- artificial intelligence and other technology providers;
- marketing and communications providers;
- research and analytics providers;
- other service providers engaged by us; and
- other parties where you have authorised the disclosure or disclosure is otherwise permitted or required by law.
We take reasonable steps to ensure that third parties handling personal information on our behalf provide an appropriate level of protection for that information.
9. Overseas disclosure
Some of our service providers may be located outside Australia or may store or process information outside Australia.
Our existing service arrangements may involve providers or personnel in countries including the Philippines and other countries depending on the services and technology used.
Where personal information is disclosed overseas, we will take reasonable steps to comply with applicable Australian privacy requirements, including requirements relating to overseas disclosures.
The location of particular service providers may change over time.
Where required, we will provide additional information about overseas recipients at or before collection or otherwise as required by law.
10. Security of personal information
We take reasonable steps to protect personal information from:
- misuse;
- interference;
- loss;
- unauthorised access;
- unauthorised modification; and
- unauthorised disclosure.
Security measures may include physical, technical and administrative controls appropriate to the nature of the information and the risks involved.
We provide staff with guidance and training concerning confidentiality and the appropriate handling of personal information.
No method of storing or transmitting information is completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security.
11. Data breaches
We maintain procedures for identifying, containing, assessing and responding to suspected or actual data breaches.
Where a data breach is subject to the Notifiable Data Breaches scheme, we will comply with our obligations under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner where required.
If you believe your personal information has been compromised, please contact us as soon as possible.
12. Retention and destruction of personal information
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, to provide our services, to comply with legal and regulatory obligations, to resolve disputes and for legitimate business purposes.
Certain taxation, accounting and business records are required to be retained for prescribed periods.
When personal information is no longer required and there is no legal or other legitimate reason for retaining it, we will take reasonable steps to securely destroy or de-identify it.
13. Cookies, analytics and websites
Our websites may use cookies and similar technologies.
We may use services such as Google Analytics or other analytics technologies to understand how visitors use our websites and to improve our websites, services and communications.
Information collected through these technologies may include:
- IP address;
- browser type;
- operating system;
- pages visited;
- referring websites;
- approximate location;
- session information; and
- other website usage information.
Where possible, analytics information is used in aggregated or de-identified form.
Our websites may contain links to websites operated by third parties. We are not responsible for the privacy practices of those third parties and recommend that you review their privacy policies.
14. Access to personal information
You generally have a right to request access to personal information that we hold about you, subject to exceptions under applicable law.
To request access, contact our Privacy Officer using the details below.
We will deal with requests in accordance with the Privacy Act and other applicable legislation.
We may need to verify your identity before providing access.
In some circumstances, we may refuse access or provide only partial access where permitted or required by law. If this occurs, we will generally provide reasons for our decision unless an exception applies.
15. Correction of personal information
We take reasonable steps to ensure that personal information we hold is accurate, complete and up to date.
If you believe information we hold about you is inaccurate, incomplete, out of date, irrelevant or misleading, you may request that it be corrected.
We will deal with correction requests in accordance with applicable privacy law.
16. Complaints
If you have a concern about the way we have handled your personal information, please contact our Privacy Officer.
We will investigate your complaint and respond within a reasonable period.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Information about making a privacy complaint to the OAIC is available at:
https://www.oaic.gov.au/privacy/privacy-complaints
Where the GDPR applies to you, you may also have rights to complain to the relevant data protection supervisory authority.
17. GDPR
Where the GDPR applies to the handling of your personal information, you may have additional rights, subject to the circumstances and limitations provided by the GDPR.
These may include rights relating to:
- access;
- correction;
- erasure;
- restriction of processing;
- data portability;
- objection; and
- certain forms of automated decision-making and profiling.
The application of the GDPR will depend on the circumstances and whether the GDPR applies to our particular activities and your relationship with us.
18. Anonymity and pseudonymity
Where lawful and practicable, you may deal with us anonymously or using a pseudonym.
However, this will not always be possible. For example, we may need to identify you in order to provide professional services, comply with taxation or other legal obligations, verify your identity, maintain accurate records or administer your account.
If you do not provide information we reasonably require, we may be unable to provide particular services.
19. Contact details
If you have a question about this Privacy Policy, wish to access or correct your personal information, or wish to make a privacy complaint, please contact our Privacy Officer.
Privacy Officer
WOW! Advisors & Business Accountants
PO Box 2117
Runcorn Qld 4113
Phone: 07 3161 9548
Email: hitesh@wowadvisors.com.au
We may update this Privacy Policy from time to time. The current version will be available on our website.
Last updated: 23 September 2026