Privacy Policy

1. Scope of this policy

This policy applies to personal information we handle through this website and in the course of providing white-label accounting outsourcing and Digitech services. "Personal information" has the meaning given in the Privacy Act: information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not.

2. Personal information we collect

We aim to collect only what we need. Depending on how you interact with us, this may include:

• Contact and enquiry details — your name, business or practice name, work email, phone number, country dialling code and the content of your message.
• Subscription details — your email address if you opt in to our compliance-dates digest.
• Engagement information — where your practice engages us, the information needed to perform the agreed work, which may include client financial records supplied to us by the practice.
• Technical information — limited information such as approximate location, device and browser type, and pages viewed, where analytics are enabled.

We do not seek sensitive information (such as health, racial or political information) to respond to a website enquiry, and ask that you do not send it to us unless it is necessary for an agreed engagement.

3. How we collect it

We collect personal information directly from you when you complete a form, email, call or message us, or subscribe to our digest. Where your practice engages us, we receive information from the practice under that engagement. Where it is lawful and practicable, we will collect information directly from you rather than from a third party.

4. Why we collect, hold and use it

• To respond to your enquiry and provide the information or services you request.
• To perform the services agreed with your practice, and to communicate with you about them.
• To send the compliance-dates digest where you have opted in (you can unsubscribe at any time).
• To improve and secure our website and services.
• To meet our legal, regulatory and record-keeping obligations.

If we cannot collect the information we reasonably need, we may be unable to respond to your enquiry or provide a service.

5. When we act on behalf of a practice

When we prepare and process work for an accounting or bookkeeping practice, we handle the relevant information on that practice's instructions and for the purposes of the engagement. The practice remains responsible for its own privacy obligations to its clients. We are not a registered Australian tax or BAS agent; lodgement and sign-off remain with the practice and its registered agents.

6. Direct marketing & the Spam Act

We only send marketing or digest emails where you have opted in. Every such email contains a functional unsubscribe facility and identifies INFITEX as the sender, consistent with the Spam Act 2003 (Cth). We do not sell or rent your contact details for third-party marketing.

7. Disclosure to third parties

We do not sell your personal information. We may disclose it to:

• service providers who help us operate (for example, form handling, email delivery, scheduling, hosting and analytics providers), bound to use it only for those purposes;
• the relevant practice, where the information relates to an engagement we perform for them;
• professional advisers, or where we are required or authorised by law, a court or a regulator.

8. Overseas disclosure

INFITEX operates from India, so personal information may be accessed, processed or stored in India. Some of our service providers may also store data in other countries (for example, the United States or the European Union) depending on where their infrastructure is located. Before disclosing personal information overseas we take steps that are reasonable in the circumstances to ensure recipients handle it consistently with the APPs.

9. Security & retention

We use technical and organisational measures including role-based, least-privilege access, confidentiality agreements, maker–checker review and secure transmission. We are aligning our information-security controls to ISO 27001; this is a roadmap commitment, not a current certification. We keep personal information only for as long as we need it for the purposes described or as required by law, and then take reasonable steps to destroy or de-identify it.

10. Data breaches

We maintain a data-breach response process. Where a breach is likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

11. Cookies & analytics

This site uses minimal cookies and local storage to remember preferences such as your theme choice, and privacy-respecting analytics to understand how the site is used. We use Google Analytics 4 (provided by Google) for aggregate traffic statistics, and Microsoft Clarity (provided by Microsoft) for anonymised usage insights such as heatmaps and session replays of on-page interactions. These tools may collect information such as pages visited, approximate location, and device and browser type; they are used to understand aggregate usage and improve the site, not to identify you personally. Google and Microsoft process this data as third parties under their own privacy terms. You can control, clear or block these cookies through your browser settings; some features may not work without them.

12. Access, correction & your rights

You may request access to, or correction of, the personal information we hold about you. We will respond within a reasonable time and may need to verify your identity first. If we decline a request, we will explain why and how you can seek a review. From June 2025, individuals also have a statutory right to sue for serious invasions of privacy under Australian law.

13. Complaints

If you believe we have mishandled your personal information, please contact us first using the details below so we can investigate and respond. If you are not satisfied with our response, you may complain to the OAIC at oaic.gov.au.

14. Children

Our website and services are directed at businesses and practices, not children. We do not knowingly collect personal information from children.

15. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the "last updated" date shown above. Material changes will be reflected here.

16. How to contact us

Privacy questions or requests: info@infitexglobal.com or +91 8500 850 526.

This page is general information, not legal advice. Please obtain advice tailored to your circumstances.