Privacy policy

Last updated: 25 October 2026

Murray Business Solutions Pty Ltd ATF Murray Business Solutions Practice Trust ("MBS", "we", "us") is an accounting practice in Adelaide. Looking after your tax, super and business affairs means we hold a lot of personal information about you and your family. This policy explains what we collect, why, what we do with it, and how you can see it, correct it or complain.

We follow the Australian Privacy Principles in the Privacy Act 1988.

What we collect

What we collect depends on the work we do for you. It can include:

your name, address, phone number and email address
your date of birth
your tax file number (TFN) and Australian Business Number (ABN)
bank account details
identity documents, such as a driver's licence or passport
details of your income, assets, debts, business and investments
superannuation and self-managed super fund (SMSF) details
information about your family members, where it's relevant to your affairs
health or other sensitive information, only where it's needed for the work (for example, an insurance or disability matter) and with your consent.

We also hold information about people who aren't our clients: family members of clients, employees of client businesses (for payroll), people who refer clients to us, and people who apply for a job with us.

How we collect it

Mostly from you: in person, by phone, by email, by post, through our secure document upload, and through our website's newsletter sign-up.

We also collect information from others when it's needed for your work, such as the ATO and ASIC (through their online services for tax agents), your bank, Xero or other accounting software you use, your previous accountant, and your other advisers. Where we can, we'll tell you when we've collected information about you from someone else.

Why we collect it and how we use it

We use your information to:

prepare tax returns, financial statements, BAS and IAS
run payroll for client businesses
administer SMSFs and arrange their audits
meet ASIC requirements for companies and trusts
give you business and SMSF advice
verify your identity and manage our relationship with you, including billing
meet our legal and professional obligations as a registered tax agent and a CPA Practice
send you our monthly newsletter and occasional updates, such as after a Federal Budget, if you've asked for them.

If you don't give us information we need, we may not be able to do the work, or do it correctly.

Who we share it with

We share your information only where it's needed for the work, where you've agreed, or where the law requires it. This can include:

the ATO, ASIC and other government agencies
your SMSF's auditor (we don't audit the funds we administer)
banks and lenders, at your request
lawyers, financial planners, loan brokers and other specialists we refer you to, with your agreement
your next accountant, if you move and ask us to send your records
insurers, including our own professional indemnity insurer
CPA Australia's quality reviewers, who check our work as part of their quality review program
our IT support provider
the companies that provide our software and online services, described below.

When we use outside services that don't need to know who you are, we remove names and identifying details wherever we can.

We never sell your information.

Your tax file number

We collect and use TFNs only for tax, super and other purposes the law allows, and we protect them as the Privacy (Tax File Number) Rule 2015 requires. Please don't email your TFN, ID or bank details. Use our secure document upload, or give them to us in person.

How we store and protect it

We hold your information in our practice management, accounting and document storage systems, and in paper files while we're working on them. We use providers for practice management, accounting software, document storage and e-signing, client engagement and payments, meeting notes, email newsletters, secure file transfer, and AI tools.

To protect it:

multi-factor login is required on our core systems
staff sign confidentiality agreements and complete regular security training
access to sensitive folders is restricted, and changes to files are logged
our IT support provider monitors our systems, and we keep regular backups
paper documents are kept secure while we hold them, and destroyed through a secure disposal service.

Information stored overseas

Most of our providers store information in Australia. Some, including our email newsletter service and some AI and meeting tools, are based in the United States and may store or process information there. We choose providers with care and require them to protect your information.

AI tools and meeting notes

We use AI tools to help draft and check our work. We remove names and identifying details first wherever we can. A qualified member of our team always reviews the result, and no decision about you is made by software alone.

We may record and transcribe meetings to keep accurate notes. We'll always tell you at the start if we're recording. We save the notes to your client file and then delete the recording from the transcription service.

How long we keep it

When our work for you ends, we return your paper records to you, or securely destroy them. We keep electronic records so we can answer questions from you, the ATO and other regulators, and meet our record-keeping obligations.

Our website

Our website doesn't use analytics, tracking or advertising cookies, and doesn't set cookies of its own.

If you sign up for our newsletter, your details come to us by email and are kept with our other correspondence. Our "Send us your documents" page shows an upload form from a secure file transfer service, Filemail, which handles your files under its own privacy policy. That form sets one cookie on Filemail's own site, which keeps your upload connected while it runs.

Our newsletter

We send our monthly newsletter, and occasional updates, only to people who've asked for them. Every email has an unsubscribe link, or you can ask us at [email protected].

Seeing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by emailing [email protected]. We'll check who you are, then respond within 30 days. There's no charge. If we can't give you access or make a correction, we'll tell you why in writing.

Data breaches

If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

Questions and complaints

Please send any question or complaint about privacy to [email protected], or write to us at Level 2, 64 Hindmarsh Square, Adelaide SA 5000. Paula Murray, our Director, or a senior member of our team will look into it, and we'll reply in writing with the outcome.

If you're not satisfied with our response, you can complain to the OAIC: oaic.gov.au, phone 1300 363 992.

Changes to this policy

We'll update this policy when our practices change. The date at the top shows when it last changed.