Privacy Policy

Safeguarding Your Data - Our Commitment to Privacy and Security.

Limitless Accounting - Privacy and Data Protection Policy

This Privacy and Data Protection Policy sets out the practices that Limitless Accounting Pty Ltd (the “Company”, “we”, “our”, “us”) follows with respect to the collection, use maintenance, transfer and disclosure of information collected when you use and or access the Limitless Accounting website (“Site”) to use the services (“Services”) provided by the Company.

We respect and value the privacy of each person (“you” or “your”) who enter the Site and we commit towards maintaining the highest standards required in order to protect any personal information you consent to share with us in accordance with the Australia’s Privacy Act 1988 (the “Privacy Act”). This Privacy Policy applies only to information we collect from the Site and does not apply to any other application, website or business activity of the Company.

The purpose of this policy is to provide you with an understanding of how we collect, handle and use your personal data.

We reserve the right to revise this Privacy Policy at anytime, without prior notice, and the changes will be effective subsequent to posting the changes to the Site. Please check the Site frequently to be updated on the changes. By accessing the content and services made available on the Site and by providing your personal data to us, you acknowledge and agree that you have fully read and understood this policy, and consent to the collection, use, processing, and disclosure of your personal data as described in this policy. If you do not want the Company to collect, use, store, transmit or display collected data, please do not use the Site.

The Company collects personal data about you when you (1) register for Services, (2) when you subscribe (3) when you communicate with us through any mode of communication including, but not limited to chat, phone and email.

Personal Data

While using our Site, we may request certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to;

  1. Full Name
  2. Company Name
  3. Designation
  4. Email Address
  5. Contact details
  6. Residential Address
  7. Individual information including racial or ethnic origin, languages spoken, religious beliefs and affiliation, date of birth, age, place of birth, gender, occupation, employment and qualification details, financial records, income details, asset listings, taxation records, bank account details, insurance policies, information on spouse and children, medical history, disability status, criminal record and court records.
  8. Other personal or sensitive information including information contained in communications or documents, any information required due to the nature of your matter or information we are required to or permitted to collect by law.

 

Derivative data

In addition to the information directly provided by you, we may also collect derivative data, which includes information derived from your interactions with our Site, services or third-party sources. Derivative data may include, but is not limited to:

  1. Usage data: Information about how you interact with our website or services, such as pages visited, features used, and time spent on each page.
  2. Device information: Technical information about your device, such as IP address, browser type, operating system, and device identifiers.
  3. Location data: Information about your approximate location, derived from your IP address or other location-based technologies.
  4. Cookies and tracking technologies: Information collected through cookies, web beacons, and similar tracking technologies that are used to enhance your experience, analyze trends, and personalize content.

 

Mobile Device Information

When accessing the Site through a mobile device, we may automatically collect certain information, including, but not limited to, the following:

  1. The type of mobile device you use.
  2. Your mobile device’s unique ID.
  3. The IP address of your mobile device.
  4. Your mobile operating system.
  5. The type of mobile internet browser you use.
  6. Unique device identifiers.
  7. Other diagnostic data.

We may also gather information that your browser sends whenever you visit our Site or access it through a mobile device.

 

Payment information.

Payments made through the Site are processed through a third-party payment processor. Information to administer, manage, and fulfill the purchases and subscriptions you make, may be collected by us or on our behalf. Such information may include payment information credit card number, account authentication information, and contact information including your full name, billing and shipping address and email address.

The Company collects personal data for some or all of the following reasons.

  1. Provide and maintain the services- To process and fulfill your subscriptions, send you confirmation emails of your subscription status and allow you to pay for subscriptions.
  2. Improve, personalize and develop the services-We use the information collected to; improve and personalize customer experience, perform data analysis and testing, collect feedback to help improve our programs, features or/and services, produce certification, enhance the online experience of using our Site as further described in the section ‘Use of Cookies’.
  3. Communicate with you-To alert you about service upgrades and revisions, respond to you when you contact us, and promote new features or services that we feel may be of interest you to assist in addressing your inquiries and troubleshooting, about our To notify you about changes to our services and provide you with information that is relevant to your use of the Service.

We do not sell, trade or otherwise transfer to third parties your personally identifiable information. Any information provided to the Site will be protected from loss, misuse, unauthorized access or disclosure, alteration or destruction.

However, we share your personal information with authorized third parties who assist us in operating the Site, conducting our business or servicing you including but not limited to, credit card payments and online support as long as these parties are compliant with applicable data protection laws , government departments and agencies, other accountants, law firms, real estate agents, financial planners, insurers, local business and industry networks, Chambers of Commerce, business and industry alliances, auditors and other consultants and banking institutions where it is reasonably necessary for them to assist us to provide our services to you, or to enable them to provide related service offerings you have requested.

We may choose to retain your personal information to the full extent of any period provided by law and statute. We may also choose to delete your personal information from our databases after a required number of years and/or if the intended purposes for which we have collected your information is completed or is no longer relevant. We may release your information when we are required to comply with the law, enforce our policies, or protect the Company’s and other third-party rights, property or safety. However, non-personally identifiable information may be provided by the Company to third parties for marketing, advertising, or other uses.

We may keep information and content in our systems, backup files and archives as follows;

  1. Utilized encryption for data at rest and in transit.
    • Strong hashing for sensitive information in the database tables.
    • Server-side encryption by default in the database.
  2. Obtaining regular backup and testing the backup and recovery procedures.
  3. Monitoring and logging access (only metadata), network traffic, and system activities for detection of security incidents and getting monitored via Security Operation Centre.
  4. Classified data based on sensitivity and applied appropriate security controls over the Risk Based Authentication.


We will retain your personal data as long as necessary to provide you with the services requested. However, once your account has been deleted/deactivated, your personal data will be stored in our archives for five years from the deactivated date and we will remove it from our systems, records and/or take steps to properly anonymize it so that you can no longer be identified from it, unless we need to keep your personal data including, if we need to keep your personal data to comply with legal or regulatory obligations to which we are subject.

We ensure the highest level of security for your personal information during the upload process. All data transferred between you and our service is protected using HTTPS encrypted tunnels, guaranteeing that your information remains confidential and secure. Our data retention and protection policies are rigorously enforced, with personal information stored using strong encryption techniques on secure servers certified by leading authorities. These servers, located in the United States, Singapore, and Europe, are managed by trusted third-party providers who adhere to our strict security standards.

We have standardized enterprise-wide analysis of software-related threats within the Company and have prioritized proactive improvement of threat coverage throughout the Company to ensure that there are no leaks of the data we collect.

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure we have put in place the following suitable physical, electronic and managerial procedures to secure the information.

  1. Implement strong access controls, including strong passwords, input validations, multi-factor authentication, and role-based access permissions.
  2. Use secure protocols (SSL/TLS version 1.2 and higher) for data transmission and avoid transmitting sensitive data over unsecured networks.
  3. Establish clear data retention policies and securely dispose of data that is no longer needed.
  4. The Company is keeping systems and software up to date with the latest security patches.
  5. Conduct regular security audits, and assessments to identify vulnerabilities and implement necessary measures.
  6. Encrypted the offline data stored on the device using strong encryption algorithms.
  7. Established secure key management techniques to store and handle encryption keys (API keys).
  8. Data protection by design and default
  9. Monitoring and reporting in a file any unauthorized or illegal access attempts
  10. Monitoring specific activities such as who accesses personal data and with whom the data are being shared.
  11. Keeping a record of how long the data are to be stored while being stored.
  12. The data are encrypted, pseudonymized, and anonymized whenever possible, to protect them from any unauthorized access.

The Site may also use “cookies” and other technologies enabling us to recognize users and customize their experience and obtain information regarding the use of the Site. A cookie which is a small text file that a website’s server places on a user’s computer, mobile phone or other device enables to transmit information back to the website’s server regarding the browsing activities of the computer user on the Site.  This may also include information such as pages and content viewed, the time and duration of visits and whether the user clicked on an advertisement.  Cookies are also used to recognize users and maintain data related to a particular individual.  If you prefer not to accept cookies from the Site, you can modify the settings on your web browser.

The types of Cookies we use

  1. Necessary cookies: Necessary cookies enable you to use our Site and all it’s features, such as enabling access to secure areas of the Site. Without these cookies you may not be able to use all the features of our Site.
  2. Performance cookies: Performance cookies collect information about how you use our Site so we can improve them for you in future. For example, they collect information on which pages you visit most often and any error messages you may get. The information collected by these cookies is anonymous. They do not collect any information that can identify you personally.
  3. Functionality cookies: We use functional cookies to provide enhanced functionality and personalization, to remember your preferences, to diagnose server and software errors, and in cases of abuse, track and mitigate the abuse. The information these cookies collect is anonymous. They cannot track your browsing activity on other websites.
  4. Targeting/advertising cookies: We and our service providers may use advertising cookies to deliver ads that we believe are relevant to you and your interests. For example, we may use targeting or advertising cookies to customize the advertising and content you receive on our Site, to limit the number of times you see the same ad on our Site and to help measure the effectiveness of our advertising campaigns.
  5. Social media cookies: Our Site uses third-party cookies from social media sites such as Facebook and LinkedIn to enable in-depth campaign reporting and to track social network users when they visit our Site, by using a tagging mechanism provided by those social networks. These cookies can also be used for event tracking and remarketing purposes. Any data collected with these tags will be used in accordance with our Privacy Policy and with the social network’s privacy policies.
  6. Third party cookies: Third Party cookies we use include but not limited to Google Analytics, Facebook Inc., HotJar, Mix Panel, Pendo.


How do you change cookie preferences or block cookies?

For the performance cookies and targeting cookies when starting a new session on our Site, you can choose to opt-out of these. It is possible that any advertising you receive will be less targeted as a result, but the portals should function correctly.

If you wish to disable the strictly necessary cookies, then within your browser you can choose whether you want to accept cookies or not. Different browsers make different controls available to you. Generally, your browser will offer you the choice to accept, refuse or delete all cookies, third-party cookies, or specific website cookies. Each browser’s website should contain instructions on how you can do this.

If you block these cookies on our Site, certain features and services may not function properly.

  1. Right of access- You may have the right to obtain from us confirmation as to whether personal data concerning you is processed, and where that is the case, to request access to the personal data.
  2. Right to rectification- You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  3. Right to object- If the processing of your personal data is based on legitimate interests, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case, your personal data will no longer be processed for such purposes by us.
  4. Right to fair treatment- We will not discriminate against you for exercising any of your privacy rights. Irrespective of your standing on your privacy preferences, we will provide the services.
  5. To restrict the use of your information- You can request to restrict the use of your information.
  6. To complain to a supervisory authority – If you have any complaints regarding the data collected and the usage of it, you have the right to lodge a complaint to a superior authority. We take privacy complaints very seriously. We will contact you within five working days of receiving your complaint and we will endeavor to resolve your privacy concerns within 30 working days.

If you have any questions or concerns regarding the Privacy Policy, please feel free to contact us at the following email or telephone number;

Email: hello@limitlessaccounting.com.au

Phone: 03 9021 9920