Privacy

Privacy Policy

Last updated: 13 July 2026

Super Nice Advice Pty Ltd (ABN 37 623 908 118) ("Super Nice", "we", "us" or "our") is committed to protecting your privacy. This policy explains how we collect, use, store and disclose your personal information, and how you can access, correct or complain about how we handle it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who this policy applies to

This policy applies to everyone whose personal information we hold — including clients, prospective clients, website visitors, people who submit our contact or enquiry forms, and people who interact with our advertising on platforms such as Facebook, Instagram and Google.

2. What personal information we collect

Depending on how you interact with us, we may collect:

• Contact details — your name, email address and phone number when you complete a form on our website, email us, or call us.
• Enquiry details — information you choose to share about your situation, such as whether you have a business and what you need help with.
• Client information — where you become a client, the information we need to provide accounting, tax, bookkeeping and advisory services. This can include your Tax File Number (TFN), Australian Business Number (ABN), financial records, bank details and information about your business, which is treated as sensitive information and handled with strict confidentiality.
• Website & advertising data — technical and usage data collected automatically when you visit our site, such as your IP address, device and browser type, pages viewed, referring website, and identifiers set by cookies and similar technologies (see section 8).

You do not have to provide your personal information, but if you don't, we may not be able to respond to your enquiry or provide our services.

3. How we collect your information

We collect personal information:

• directly from you — through our website forms, email, phone, or in person;
• automatically — through cookies, analytics and advertising tools when you use our website; and
• from third parties — such as the Australian Taxation Office, ASIC, your previous accountant, or software you authorise us to connect to (for example Xero), where relevant to providing our services.

4. How we use your information

We use personal information to:

• respond to your enquiries and contact you about your request;
• provide, manage and improve our accounting, tax, bookkeeping and advisory services;
• meet our legal, regulatory and professional obligations (including as a CPA practice and registered tax agent);
• operate, secure and improve our website; and
• measure the performance of our advertising and, where permitted, show you relevant ads.

5. When we disclose your information

We do not sell your personal information. We only disclose it where necessary, including to:

• service providers who help us operate our business — for example our hosting and infrastructure provider (Cloudflare), our email delivery provider (Resend), and cloud accounting software (Xero);
• payment and banking service providers used by SuperNice Tax (Stripe for card payments, Basiq for bank feeds you consent to) as described in section 6;
• advertising and analytics platforms (Meta/Facebook and Google) as described in section 8;
• government bodies and regulators, such as the ATO and ASIC, where required to provide our services or where required by law; and
• professional advisers, or as otherwise required or authorised by law.

6. The SuperNice Tax platform

We operate SuperNice Tax (supernicetax.com), an invoicing, record-keeping and reporting platform for clients of our practice. When you use SuperNice Tax we collect and hold the information needed to run your books and support the tax agent services we provide under your engagement, including:

• Identity and business details — your name, email, mobile number, ABN, ACN, entity details and bank account details for payouts. The platform never asks for or stores your Tax File Number.
• Invoicing and payment records — invoices you issue, bills you enter, and payments received. Card payments are processed by Stripe; card numbers go directly to Stripe and are never stored by us.
• Bank transaction data — where you connect a bank feed, transactions are retrieved through Basiq with your express consent, given on Basiq's own consent screens under their terms. We use this data only to keep your books and prepare your reports, and you can disconnect the feed at any time.
• Automated categorisation — transaction descriptions (not your identity details) may be processed by an AI service provider (Anthropic) solely to suggest bookkeeping categories, which you and your accountant can review and change.

SuperNice Tax data is hosted with Cloudflare and emails are delivered by Resend (see section 9 on storage and overseas disclosure). If you share access to your ledger with another person, or your SuperNice accountant works in it, those actions are recorded in an audit trail.

7. Our practice management systems and Xero data

We run our practice on a secure internal practice management platform used only by authenticated staff of Super Nice Advice. It holds the client records we need to provide our services, including contact details, engagement records, correspondence and tax-related information.

Where you use Xero and we act as your accountant or tax agent, our platform may access your Xero accounting data (for example contacts, invoices, payments, bank transactions and reports) through Xero's official API, solely to provide the services under your engagement, such as reviewing your activity statements before lodgement. Key protections:

• Read-only access: the platform can view Xero data but cannot create or change anything in your Xero file.
• Security: connection credentials are stored encrypted, data is encrypted in transit and at rest, access is limited to our staff signing in with multi-factor authentication, and every access is recorded in an audit trail.
• Service providers: the platform is hosted with Cloudflare (data stored in the Oceania region), uses Microsoft 365 for staff identity, email and document storage, and may use an AI service provider (Anthropic) to assist our staff with internal analysis. These providers process data only on our behalf; we do not sell or share it with any other party.

8. Cookies, analytics and advertising tools

Our website uses cookies and similar technologies, including Google Analytics / Google Tag Manager and the Meta Pixel (Facebook Pixel). These tools collect information about how you use our site and help us understand and measure the effectiveness of our advertising.

The Meta Pixel may allow us and Meta Platforms, Inc. to show you ads on Facebook and Instagram, to measure ad performance, and to build audiences. Information collected through these tools may be shared with Meta and Google and processed in accordance with their own privacy policies:

• Meta (Facebook & Instagram): facebook.com/privacy/policy
• Google: policies.google.com/privacy

You can control cookies through your browser settings, and you can manage ad personalisation directly with Meta and Google. Opting out of cookies may affect how our website functions.

9. Storage, security and overseas disclosure

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access, modification or disclosure. Information submitted through our website is protected by measures including bot protection (Cloudflare Turnstile) and encrypted transmission.

Some of our service providers (including Cloudflare, Resend, Meta and Google) may store or process information on servers located outside Australia. Where this happens, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

10. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as required by law. As an accounting and tax practice, we are generally required to retain certain client records for a minimum period (for example, five years) under Australian tax law. When information is no longer needed, we take reasonable steps to destroy or de-identify it.

11. Accessing and correcting your information

You can request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. To do so, contact us using the details below. We may need to verify your identity before acting on your request. In limited circumstances we may decline a request, in which case we will explain why in writing.

12. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us using the details below so we can investigate and respond. We aim to acknowledge complaints promptly and resolve them within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the "last updated" date shown at the top.

14. Contact us

For any privacy question, request or complaint, contact: