Privacy Policy

About This Website Policy

This website policy applies to this website, which is operated on behalf of Carbon Group Global Pty Ltd ACN 168 647 890 and its related bodies corporate (we, us and our).

We are committed to protecting your privacy.

This policy explains how your personal information will be treated as you access and interact with this website.

Our website privacy policy may change from time to time.

Information We Collect and How It Is Used

Collection and Use of Information

We may collect personal information from you directly or via your use of our services. We will only collect personal information which is reasonably necessary for, or directly related to, our functions or activities.

Sensitive Information

Sensitive information is any information about a person’s racial or ethnic origin, political opinion, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record or health information.

We will not ask you to disclose sensitive information, but if you elect to provide sensitive information it will also be captured and stored.

Information from Third Parties

Our website also contains links to the websites of third party providers of goods and services (Third Party websites). If you have accessed Third Party websites through our website and if those third parties collect information about you, we may also collect or have access to that information as part of our arrangements with those third parties

Where you access a Third Party website from our website, cookie information, information about your preferences or other information you have provided about yourself may be shared between us and the third party.

Tracking Technologies

Advertising and Tracking

When you view our advertisements on a Third Party website, the advertising company uses ‘cookies’ and in some cases ‘web beacons’ to collect information such as:

the server your computer is logged onto;
your browser type;
the date and time of your visit; and
the performance of their marketing efforts.

When you access our website after viewing one of our advertisements on a Third Party website, the advertising company collects information on how you utilise our website (eg which pages you view) and whether you complete an online application.

Cookies

We use ‘cookies’ to provide you with better and more customised service and with a more effective website.

A ‘cookie’ is a small text file placed on your computer by our web page server. A cookie can later be retrieved by our webpage servers. Cookies are frequently used on websites and you can choose if and how a cookie will be accepted by configuring your preferences and options in your internet browser.

We use cookies for different purposes such as:

to allocate a unique number to your internet browsers;
to customise our website for you;
for statistical purposes;
to identify if you have accessed a Third Party Website; and
for security

IP Addresses

Your IP address is the identifier for your computer when you are using the internet.

It may be necessary for us to collect your IP address for your interaction with various parts of our website.

Interactions via Our Website

Online applications

When you send a completed online application to us, we retain the information contained in that application. We are able to then use that information to provide any financial services that you require.

You can also suspend and save online applications, so you can complete and send the applications at a later time. If you suspend or save your application, the information that you have entered will be retained in our systems so that you may recover the information when you resume your application. Online applications that have been suspended or saved may be viewed by us.

Data Security

Security of information

The security of your information is very important to us.

We regularly review developments in security and encryption technologies. Unfortunately, no data transmission over the internet can be guaranteed as totally secure.

We take all reasonable steps to protect the information in our systems from misuse, interference, loss, and any unauthorised access, modification or disclosure.

If we no longer require your information, and we are legally permitted to, we will take all reasonable steps to destroy or de-identify the information.

We take reasonable steps to preserve the security of cookie and personal information in accordance with this policy. If your browser is suitably configured, it will advise you whether the information you are sending us will be secure (encrypted) or not secure (unencrypted).

Your Privacy Rights and Consent

Consent and GDPR Compliance

We are committed to complying with the General Data Protection Regulation (GDPR) where applicable. This regulation provides a framework to ensure that individuals’ personal data is collected and processed lawfully, fairly and transparently.

By interacting with this website, engaging any division of us to provide services, or applying for a job with us, you are implying that you consent to our collecting and using your personal information for the specific and primary purposes outlined in this policy.

Where we ask for your personal information for a secondary purpose, such as marketing, we will either:

Ask you directly for your express consent, or
Provide you with an opportunity to decline.

If you have opted in to be contacted by us, or have previously consented to the collection, use or disclosure of your information, and would now like to withdraw that consent, you may do so at any time by contacting us at marketing@carbongroup.com.au.

Direct marketing

We will not use or disclose sensitive information about you for direct marketing purposes unless you have consented to that kind of use or disclosure.

We may use your personal information for direct marketing purposes. If you do not wish to receive direct marketing communications from us or from other organisations, or wish to know the source of the information being used, you may submit a request by email to info@carbongroup.com.au. We will respond to your request as soon as practicable.

Disclosure to overseas entities

We do not generally disclose personal information obtained from cookies to overseas entities in the course of our activities.

Our Commitment to Compliance and Client Care

About Our Registration

Carbon’s Accounting & Tax division comprises registered Tax and BAS Agents with the Tax Practitioners Board (TPB). You can verify the registration status of our accountants and obtain detailed information about our offices by visiting the TPB’s public register.

Rights and Obligations

As a client of Carbon’s Accounting & Tax division, you are entitled to the protections and responsibilities set out in the TPB’s Code of Professional Conduct. We are committed to upholding these standards at all times. For further information about your rights and obligations as a client of a registered tax or BAS agent, please refer to the TPB’s Code of Professional Conduct.

Please refer to the fact sheet published by the TPB, which outlines your obligations to the ATO and your tax practitioner’s responsibilities to you, the TPB, and the ATO. A link to the fact sheet is included within this document: TPB Information for Clients Factsheet.

Professional Conduct and TPB Compliance

Under the updated Code of Professional Conduct, effective 1 January 2025, the TPB requires registered tax practitioners to inform clients of any formal findings of misconduct made against them. We confirm that, in accordance with the Tax Agent Services Act 2009 (TASA), none of our registered tax practitioners within the Accounting & Tax division have been subject to disciplinary sanctions or findings of misconduct by the TPB within the past five years.

Should any such finding arise in the future that relates to the services we are providing to you, we will disclose that information to you in writing.

AML/CTF Privacy Collection Notice

This AML/CTF Privacy Collection Notice explains how Carbon Group collects, uses and handles personal information when conducting identity verification, customer due diligence and screening checks for anti-money laundering and counter-terrorism financing purposes.

This notice should be read together with Carbon Group’s Privacy Policy, which explains how we collect, use, disclose, store and manage personal information more generally.

Digital identity verification

Carbon Group use’s Ignition’s identity and verification functionality to support digital identity verification and AML/CTF screening. This functionality is supported by ComplyCube, an identity verification provider.

ComplyCube provides identity verification services that support online onboarding, identity matching, document verification, fraud prevention, watchlist screening and AML/CTF compliance.

Where identity verification is required, you will receive a secure link by email or SMS and be asked to provide personal information and identity documents through a secure digital verification process using your own device.

Personal information that may be collected

Where verification is required, Carbon Group, Ignition, ComplyCube and related verification providers may collect, use, process, disclose, store or access personal information for the purpose of conducting and completing identity, document and other verification checks.

This information may include:

your full name
date of birth
residential address
email address
mobile number
identity document details
images of your identity document
a live facial image or selfie where biometric verification is required
verification results
identity matching results
document verification results
Politically Exposed Person, sanctions or watchlist screening results, where required
risk, discrepancy or exception outcomes, where required
technical and device information needed to complete and secure the verification process.

How verification may be performed

ComplyCube may use trusted third-party, government, independent or other verification data sources to verify your identity and information.

Verification methods may include identity document verification, identity matching, document authentication, watchlist screening and biometric matching where necessary for AML/CTF, regulatory or compliance purposes.

Where biometric verification is used, your live facial image or selfie may be compared against the photograph contained in your identity document to help verify that you are the legitimate holder of that document.

How Carbon Group uses verification outcomes

ComplyCube or Ignition may provide the outcome of verification checks to Carbon Group.

Carbon Group will use this information to:

verify your identity
conduct customer due diligence
assess AML/CTF risk
comply with legal and regulatory obligations
maintain records required for compliance purposes
determine whether further information, enhanced due diligence or ongoing monitoring is required.

The verification outcome may also be used to determine whether Carbon Group can establish or continue a business relationship with you, or provide particular services to you.

If you do not provide the requested information

Providing information for identity verification is generally voluntary. However, where identity verification or customer due diligence is required by law, regulation or Carbon Group’s risk management procedures, failure to provide the requested information may mean Carbon Group is unable to establish or continue a business relationship with you or may be unable to provide certain services.

Overseas processing and storage

Your personal information may be processed, stored or accessed using systems, service providers or support teams located outside Australia.

Where this occurs, Carbon Group takes reasonable steps to ensure that personal information is handled in a manner consistent with Australian privacy requirements, unless an exception applies under Australian law.

Retention of information

Carbon Group is not required to retain copies or images of identity documents for AML/CTF compliance purposes.

Instead, Carbon Group retains the verification outcome and other records necessary to demonstrate that identity verification, customer due diligence and related AML/CTF checks have been completed.

Consistent with our privacy obligations, we aim to collect and retain only the personal information reasonably necessary to satisfy our legal, regulatory and compliance requirements.

Information held by Ignition, ComplyCube or other verification providers is handled in accordance with their applicable privacy policies, contractual arrangements, and legal requirements.

Further information

You can read more about how ComplyCube handles personal information in ComplyCube’s Privacy Policy.

You can read more about how Ignition handles personal information in Ignition’s Privacy Policy.

If you have any questions about Carbon Group’s use of your personal information for AML/CTF verification purposes, or if you wish to access or correct personal information held by Carbon Group, please contact us using the details provided in Carbon Group’s Privacy Policy.

Client Rights and Complaints

If you have a complaint regarding our services as your Tax or BAS Agent, please contact your Accountant in the first instance by email, providing full details. If your complaint cannot be resolved within three business days, you may escalate it by emailing complaints@carbongroup.com.au. Your complaint will be investigated by our General Manager (or an appropriately independent senior team member), who is not involved in the subject matter of the dispute wherever possible. You will receive an email acknowledging receipt of your complaint and outlining our understanding of the circumstances. We aim to resolve complaints within 14 days and will keep you informed throughout the process.

If you are dissatisfied with our proposed outcome, you may lodge a complaint with the Tax Practitioners Board via the Tax Practitioners Board’s complaint portal. The TPB will send you an email to acknowledge the receipt of your complaint and review and risk assess your complaint. Further information about your review rights and external assistance is available on the TPB’s website.

Please note:
This statement applies specifically to Carbon’s Accounting & Tax division and our registered tax and BAS agents. For compliance information relating to other Carbon divisions, please contact the relevant team directly.

If you would like further information, please contact us on 08 6444 6645.