Data Processing Agreement

How Belmont Wattle Accountants processes personal data in line with the Privacy Act 1988.

1. Purpose

This Data Processing Agreement ("DPA") outlines how Onboard processes personal and financial data on your behalf for the provision of accounting services.

2. Data Processed

Categories of data processed include:

Identity data (name, date of birth, TFN)
Contact data (email, phone, address)
Financial data (income, expenses, tax records)
Business data (ABN, ACN, business records)

3. Processing Activities

Preparation and lodgement of tax returns
Financial statement preparation
BAS and GST reporting
Communication with the ATO
Advisory and compliance services

4. Security Measures

Onboard implements appropriate technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and audit logging.

5. Sub-processors

We may engage authorised sub-processors. A current list is available upon request.

6. Data Breach Notification

In the event of a data breach, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

7. Duration

This DPA remains in effect for the duration of the service relationship and for any period required by law afterwards.