top of page

HandyBooks

Privacy Policy
 

Last updated: September 2026
 

Ellenjack Pty Ltd trading as HandyBooks (ABN 13 113 660 638) respects your privacy and is committed to handling personal information responsibly and securely.
 

This Privacy Policy explains how HandyBooks collects, holds, uses and discloses personal information in connection with its bookkeeping, BAS Agent and related business services.
 

1. Personal information I may collect

The personal information I collect depends on the services being provided and may include:

  • your name, address, telephone number and email address

  • business and company details

  • Australian Business Number and other business identifiers

  • Tax File Numbers and taxation information where required

  • banking and financial information

  • accounting and bookkeeping records

  • invoices, receipts and other source documents

  • payroll and employment information

  • employee names, contact details, dates of birth, Tax File Numbers, bank details, superannuation information, employment details and pay information

  • information relating to BAS, GST, PAYG withholding, superannuation and other obligations

  • information contained in communications between you and HandyBooks

  • information provided by your Tax Agent or other professional advisers

  • information obtained from the Australian Taxation Office or other government bodies where I am authorised to access it

  • information submitted through the HandyBooks website, contact forms or other communication channels.

I will only collect sensitive information where it is reasonably necessary for the services being provided and where its collection is permitted by law.
 

2. How personal information is collected

Personal information may be collected:

  • directly from you

  • from employees or representatives of your business

  • from your Tax Agent, accountant or other authorised adviser

  • from government agencies, including the Australian Taxation Office, where I am authorised to access the information

  • through Xero and other systems used to provide your services

  • through Dext Prepare and Dext Precision

  • through Ignition

  • through email, telephone, SMS or other electronic communications

  • through the HandyBooks website and online forms

  • through Facebook or Messenger where you choose to contact me using those services.

I generally collect information directly from you wherever practicable.
 

3. Why I collect and use personal information

I collect, hold, use and disclose personal information where reasonably necessary to:

  • provide bookkeeping and BAS Agent services

  • process bookkeeping transactions and reconciliations

  • prepare and lodge Business Activity Statements, Instalment Activity Statements and other permitted BAS Agent obligations

  • provide payroll and Single Touch Payroll services

  • process superannuation where included in the agreed service

  • communicate with you about your business and services

  • provide strategic bookkeeping and business support where included in your service

  • liaise with your Tax Agent and other authorised advisers

  • communicate with the Australian Taxation Office and other government bodies where authorised

  • prepare proposals, manage engagements and arrange billing

  • respond to enquiries

  • maintain records required for legal, regulatory, professional and insurance purposes

  • manage and improve HandyBooks' business systems and services.

Personal information will not be sold or rented to third parties.
 

4. Third-party software and service providers

HandyBooks uses third-party technology and cloud service providers to provide services efficiently.

These currently include:

  • Xero – accounting, bookkeeping, payroll and related financial information.

  • Dext Prepare – document capture, processing and storage of receipts, invoices and other source documents. Dext Prepare integrates with Xero.

  • Dext Precision – assists with reviewing accounting data, bookkeeping quality and identifying potential issues. Dext Precision integrates with Xero.

  • Ignition – proposals, engagement management, billing and payment arrangements.

  • Stripe – payment processing used in connection with Ignition Payments.

  • Microsoft services – email, communications, document storage and general business administration.

  • Wix – hosting and operation of the HandyBooks website and website enquiry forms.

Information may be transferred between these systems or processed by them where reasonably necessary to provide the agreed services.

Where third-party systems are used, those providers handle information in accordance with their own privacy, security and data-handling arrangements.
 

5. Direct Debit and payment information

Ongoing HandyBooks services are paid by Direct Debit through Ignition Payments.

Sensitive bank or payment details entered through Ignition Payments are transmitted to its payment processor, Stripe.

HandyBooks does not store or have access to your full bank account or card credentials entered directly through the Ignition payment system.
 

6. Artificial Intelligence and AI-enabled services

HandyBooks may use artificial intelligence-enabled tools and AI agents to assist with activities such as:

  • research

  • drafting

  • administration

  • workflow management

  • data organisation

  • analysis

  • supporting bookkeeping and BAS Agent work.

The AI providers currently used by HandyBooks are:

  • Microsoft Copilot

  • OpenAI ChatGPT

Where reasonably necessary, information relating to your affairs may be processed through these services in accordance with your engagement with HandyBooks and the permissions you have provided.

I take reasonable steps to limit information supplied to AI systems to what is reasonably necessary.

AI-generated information does not replace my professional judgement. Relevant outputs are reviewed by me before being relied upon in providing bookkeeping or BAS Agent services.

Microsoft Copilot and OpenAI ChatGPT are not intended to replace HandyBooks' primary client record systems.
 

7. Disclosure of information

Personal information may be disclosed where reasonably necessary to:

  • the Australian Taxation Office or another government agency

  • your Tax Agent or another professional adviser authorised by you

  • Xero, Dext Prepare, Dext Precision, Ignition, Stripe, Microsoft, Wix, Microsoft Copilot and OpenAI ChatGPT

  • superannuation or payroll-related providers where required to provide an agreed service

  • professional advisers, insurers or legal advisers where reasonably necessary

  • another person or organisation where you have authorised the disclosure

  • a person or organisation where disclosure is required or authorised by law.

As a Registered BAS Agent, HandyBooks is also subject to professional confidentiality obligations.

Except where there is a legal duty to disclose information, information relating to a client's affairs will not be disclosed to a third party without the client's permission.
 

8. Overseas processing and storage

Some of the technology providers used by HandyBooks operate internationally.

As a result, personal information may be processed, stored or accessed outside Australia.

Depending on the provider and service being used, this may include countries such as:

  • Australia

  • the United States

  • the United Kingdom

  • Ireland

  • Israel

  • South Korea

  • Taiwan

  • countries within the European Economic Area

  • other jurisdictions in which the relevant service provider or its authorised service providers operate.

The location in which information is processed may change from time to time as providers update their infrastructure and hosting arrangements.

Where applicable, HandyBooks takes reasonable steps in relation to overseas disclosure and processing of personal information.
 

9. Security of your information

HandyBooks takes reasonable steps to protect personal information from:

  • misuse

  • interference

  • loss

  • unauthorised access

  • modification

  • disclosure.

These measures may include password protection, multi-factor authentication, access controls, encryption and the use of reputable cloud service providers.

However, no electronic system, cloud platform or method of electronic communication can be guaranteed to be completely secure.

Third-party providers may experience outages, cyber incidents, unauthorised access or security breaches outside HandyBooks' reasonable control.

You should also take reasonable steps to protect your own information, including using secure passwords, enabling multi-factor authentication where available and promptly advising me if you believe an account or system relevant to your services has been compromised.
 

10. Data breaches

If HandyBooks becomes aware of an actual or suspected data breach affecting personal information, I will take reasonable steps to investigate, contain and respond to the incident.

Where notification is required by applicable law, affected individuals and the relevant regulator will be notified as required.


11. How long information is kept

Personal information and business records are retained for as long as reasonably necessary to:

  • provide your services

  • meet taxation and accounting record-keeping requirements

  • meet BAS Agent and professional obligations

  • respond to enquiries, disputes or claims

  • comply with legal, regulatory or insurance requirements.

When information is no longer reasonably required and I am legally permitted to dispose of it, I will take reasonable steps to securely delete, destroy or de-identify it.

Some information may remain within secure system backups or third-party systems for a period in accordance with the provider's normal retention arrangements.
 

12. Website and cookies

The HandyBooks website may use cookies and similar technologies for website functionality, security and analytics.

Cookies may collect information such as your browser type, device information, IP address and how you interact with the website.

You can manage or disable cookies through your browser settings, although doing so may affect some website functions.

The HandyBooks website is hosted using Wix and information submitted through website forms may be processed through Wix systems.


13. Accessing or correcting your personal information

You may ask me to provide access to personal information I hold about you or ask me to correct information that is inaccurate, incomplete or out of date.

I may need to verify your identity before providing access or making a correction.

To request access or correction, contact:

Heidi Bunn
HandyBooks
Email: hello@handybooks.com.au
Phone: 0414 330 449

I will respond within a reasonable period.

In some circumstances, access may be restricted or refused where permitted or required by law. If this occurs, I will explain the reason where I am legally permitted to do so.
 

14. Privacy enquiries and complaints

If you have a question or concern about the way HandyBooks has handled your personal information, please contact me:

Heidi Bunn
HandyBooks
Email: hello@handybooks.com.au
Phone: 0414 330 449

I will review your concern and respond within a reasonable period.

Information about Australian privacy rights and complaints is also available from the Office of the Australian Information Commissioner (OAIC):

www.oaic.gov.au
 

15. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to:

  • HandyBooks' services

  • technology and service providers

  • privacy practices

  • legal or professional obligations.

The current version will be published on the HandyBooks website.

Last updated: September 2026

bottom of page