Privacy Policy APP Compliant

Last Updated: 8 August 2026

1. Introduction

UCFER (Universal Centre For Enterprise Response) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you visit our website or use our services.

2. Data We Collect

Personal Information

We may collect and process the following data about you:

  • Identity Data: Name, email address, phone number
  • Business Data: Company name, ABN/ACN, industry
  • Transaction Data: Service purchases, payment information
  • Technical Data: IP address, browser type, device information
  • Usage Data: How you use our website and services
  • Document Data: Files uploaded through our client portal
  • Identity Verification Data: Government IDs for verification

3. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and deliver our accounting, tax, and advisory services
  • To process your service purchases and payments
  • To manage your client account and portal access
  • To communicate with you about our services
  • To comply with legal and regulatory obligations
  • To improve our website and service offerings
  • To send you relevant business updates and newsletters (with your consent)

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

  • Contract Performance: To fulfill our service agreements
  • Legal Obligation: To comply with tax and accounting regulations
  • Legitimate Interests: To improve our services and website
  • Consent: For marketing communications (you can opt-out anytime)

5. Data Sharing and Disclosure

We may share your data with:

  • Service Providers: Third-party service providers (e.g., cloud storage, payment processors)
  • Professional Advisors: Legal, accounting, or other professional advisors
  • Regulatory Bodies: When required by law or regulatory authorities
  • Business Partners: In connection with business transactions

We do NOT sell your personal data to third parties.

6. Your Rights (GDPR)

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing for legitimate interests
  • Right to Withdraw Consent: Withdraw consent for processing

To exercise these rights, contact us at privacy@ucfer.com.au

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • SSL Encryption: All data transmitted via HTTPS
  • Secure Storage: Data stored in encrypted databases
  • Access Controls: Limited access on need-to-know basis
  • Regular Audits: Security assessments and updates
  • Training: Staff trained on data protection

8. Data Retention

We retain your personal data only for as long as necessary:

  • Client Records: 7 years (tax and legal requirements)
  • Financial Documents: As required by Australian tax law
  • Marketing Data: Until you opt-out
  • Website Data: As long as necessary for legitimate purposes

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Analyze website usage and performance
  • Provide personalized content
  • Improve user experience

You can control cookies through your browser settings. See our Cookie Policy for more details.

10. International Transfers

If we transfer your data outside Australia:

  • We ensure appropriate safeguards are in place
  • We only transfer to jurisdictions with adequate data protection laws
  • We use standard contractual clauses where necessary

11. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect data from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Automated decision-making

Universal Centre For Enterprise Response (UCFER) may use computer programs and related tools that make decisions or substantially assist decisions which could significantly affect individuals’ rights or interests, where those decisions use personal information.

Where that occurs, this privacy policy describes:

  1. the kinds of personal information used
  2. the kinds of decisions made solely by a computer program (if any)
  3. the kinds of decisions made with substantial assistance from a computer program

Personal information that may be used includes contact details, entity identifiers, matter facts you provide, engagement and billing records and communications history. We do not use Tax File Numbers in outbound messaging channels such as WhatsApp or SMS.

Decisions made solely by a computer program: UCFER does not currently lodge tax returns, BAS or other ATO filings solely by computer. Lodgement and significant tax positions are reviewed and approved by a registered tax practitioner (human).

Decisions made with substantial computer assistance may include:

  • triage and risk flagging on new enquiries (e.g. conflict / high-risk / AML designated-service screening)
  • draft preparation of acknowledgements, engagement packs and workpapers under practitioner supervision
  • compliance register scoring and process-board gate status using matter artefacts on file

You may contact UCFER at admin@ucfer.com.au to ask how automated tools were involved in a matter that significantly affects you. A human practitioner remains accountable for tax agent services under the Tax Agent Services Act 2009 and the TPB Code of Professional Conduct.

This section supports Australian Privacy Principle (APP) 1.7–1.9 transparency from 10 December 2026. It is not a mandatory footer on every email or WhatsApp message.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by:

  • Updating the "Last Updated" date
  • Sending you an email notification
  • Posting a notice on our website

14. Contact Us

For questions, concerns, or to exercise your rights, please contact us:

UCFER Privacy Officer
Email: admin@ucfer.com.au
Phone: (02) 8324 7071
Address: 43 / 464-480 Kent Street, Sydney NSW 2000, Australia

15. Australian Privacy Principles

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), including APP 1.7–1.9 automated decision-making transparency from 10 December 2026.