Who we are

D’Omkara Accountants is an Australian accounting, taxation and professional services firm. Our website address is https://domkara.com.au.

This Privacy Policy explains how D’Omkara Accountants collects, holds, uses, discloses, protects and disposes of personal information. We manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Privacy (Tax File Number) Rule 2015 and other applicable taxation, professional, corporate and regulatory requirements.

Where applicable to the services we provide, we also handle personal information in accordance with the Tax Agent Services Act 2009, the Tax Agent Services (Code of Professional Conduct) Determination 2024, the Code of Professional Conduct administered by the Tax Practitioners Board, and the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 and associated AML/CTF Rules.

This Privacy Policy applies to current and former clients, prospective clients, authorised representatives, directors, shareholders, partners, trustees, beneficiaries, beneficial owners, employees, contractors, suppliers, website visitors and other individuals whose personal information we handle.

Personal information we collect

The personal information we collect depends on the nature of our relationship with you and the services we provide. It may include:

• your name, residential address, postal address, email address, telephone number, date and place of birth, occupation and employment details;
• identity information and identity documents, including driver’s licences, passports, Medicare cards and other government-issued documents;
• tax file numbers, Australian Business Numbers, Australian Company Numbers, director identification numbers and other government-related identifiers;
• taxation records, financial statements, bank statements, payroll records, superannuation information, asset and liability information, income, expenses and transaction information;
• business, company, partnership and trust information;
• information about directors, shareholders, partners, trustees, appointors, settlors, beneficiaries, officeholders, beneficial owners and persons exercising control;
• information about family members, dependants, employees, representatives, professional advisers and related parties;
• details of the services you request, advice provided, decisions made, instructions received and work performed;
• communications, correspondence, meeting notes, telephone records, electronic messages and documents supplied to us;
• payment information and records relating to fees, invoices and accounts;
• information required to comply with taxation, corporate, professional, identity verification, fraud prevention and AML/CTF obligations;
• information about complaints, disputes, investigations, legal proceedings or regulatory matters; and
• technical information collected when you use our website, portals or systems, including IP addresses, browser information, device information, access logs and security records.

Sensitive information and government-related identifiers

We may collect sensitive information where it is reasonably necessary to provide our services, manage risk, comply with the law or respond to a specific matter. This may include information about health, disability, racial or ethnic origin, religious beliefs, political associations, criminal history or membership of professional or trade organisations.

We will generally collect sensitive information with your consent unless collection is otherwise authorised or required by law. We do not use government-related identifiers as our own general identifiers unless permitted by law.

Tax file number information

We only request, collect, use, disclose, store and dispose of an individual’s tax file number where authorised under taxation, superannuation or other applicable law.

When requesting a tax file number, we will provide information about the legal authority for the request, why the information is required, whether providing it is compulsory and any consequences of not providing it. Tax file number information is not used as a general identifier and access is restricted to authorised personnel who require it to perform their duties.

Unauthorised collection, use or disclosure of tax file number information may constitute an offence and may also breach the Privacy (Tax File Number) Rule 2015.

AML/CTF and customer due diligence information

Where D’Omkara Accountants provides a service that is subject to AML/CTF requirements, we may be required to collect, verify, assess, use, retain and disclose additional information about clients, associated persons and transactions.

This information may include:

• identity and verification information about a client;
• the identity of beneficial owners and persons who own, control or influence a company, trust, partnership or other entity;
• the identity and authority of persons acting for or on behalf of a client;
• the identity of persons on whose behalf a service is being obtained;
• the nature and purpose of the business relationship or requested service;
• ownership, control and organisational structures;
• source of funds and source of wealth information;
• information relevant to politically exposed person, sanctions and other regulatory screening;
• information about transactions, instructions, activities and patterns of behaviour;
• customer risk assessments and changes in a customer’s circumstances;
• enhanced customer due diligence information where a higher level of risk is identified; and
• information relevant to suspected fraud, money laundering, terrorism financing, proliferation financing, tax crime or other unlawful activity.

We may obtain this information directly from you or from representatives, government records, public registers, professional advisers, identity verification services, screening services, financial institutions, related entities and other lawful sources.

We may conduct customer due diligence before providing a service and may review and update customer information throughout the relationship. If requested information is not provided, cannot be verified or does not adequately address an identified risk, we may be unable to commence or continue providing some services.

AML/CTF reporting and restrictions on disclosure

Where required or authorised by law, we may disclose personal information to AUSTRAC, law enforcement agencies, regulators or other government authorities. This may include information contained in regulatory reports, suspicious matter reports or supporting records.

We may be legally prohibited from informing an individual that certain information has been collected, considered, used, retained or disclosed, or that a report has been or may be submitted to AUSTRAC. Nothing in this Privacy Policy requires us to provide information where doing so would breach an AML/CTF secrecy, confidentiality or tipping-off restriction, prejudice an investigation or otherwise contravene the law.

How we collect personal information

We generally collect personal information directly from you when you:

• contact us or make an enquiry;
• become a client or prospective client;
• complete an application, authority, questionnaire, declaration or onboarding form;
• provide documents or information through email, a client portal, document management system or another communication channel;
• meet or communicate with our staff;
• engage us to provide accounting, taxation, bookkeeping, corporate, advisory or related professional services;
• use our website, online systems or client portals; or
• participate in a survey, event, promotion or other business activity.

We may also collect personal information from your authorised representatives, employers, employees, related entities, financial institutions, legal advisers, other accountants, auditors, government agencies, the Australian Taxation Office, the Australian Securities and Investments Commission, the Tax Practitioners Board, AUSTRAC, public registers, identity verification providers and other third parties where you have authorised the collection or where collection is permitted or required by law.

In some circumstances, clients provide us with personal information about another person. Where you provide another person’s information, you must be authorised to provide it and should ensure that the person is aware that their information may be disclosed to and handled by us.

How we use personal information

We may collect, hold and use personal information to:

• provide accounting, taxation, bookkeeping, payroll, corporate compliance, business advisory and related professional services;
• identify clients, associated persons, representatives and beneficial owners;
• verify authority to act and obtain instructions;
• prepare, review and lodge taxation, corporate and regulatory documents;
• communicate with clients, representatives, government agencies and professional advisers;
• manage client relationships, engagements, appointments, work, billing and payments;
• maintain proper and accurate professional records;
• assess and manage legal, regulatory, professional, financial, security and reputational risks;
• conduct identity verification, customer due diligence and ongoing monitoring;
• detect, prevent, investigate and respond to fraud, cyber threats, unlawful conduct and misuse of our services;
• meet taxation, professional, corporate, AML/CTF and other legal or regulatory obligations;
• respond to complaints, disputes, audits, investigations and legal proceedings;
• manage and improve our business, systems, services, security and internal processes;
• train, supervise and support our personnel;
• maintain business continuity, backups and disaster recovery arrangements; and
• send service notices, regulatory updates and information about services that may be relevant to you.

You may ask us to stop sending direct marketing communications at any time by contacting us or using an unsubscribe facility included in the communication. We may continue to send communications that are necessary to administer an engagement or comply with legal and professional obligations.

Confidentiality of client information

D’Omkara Accountants treats information relating to the affairs of current and former clients as confidential.

Where services are provided by a registered tax practitioner, client information will not be disclosed to a third party unless:

• the client has provided permission;
• the disclosure is reasonably necessary to provide an authorised service and is covered by the client’s engagement terms or another valid authorisation;
• the disclosure is required or authorised by law; or
• another recognised legal or professional exception applies.

For these purposes, an outsourced service provider, subcontractor, related entity, technology provider or external professional may be considered a third party. Where required, we obtain client permission through our engagement terms, a separate authority or another clear form of consent before disclosing client information to such a provider.

Our confidentiality obligations continue after an engagement ends. However, confidentiality does not prevent a disclosure that we are legally required to make, including a disclosure to a court, regulator, government agency, law enforcement body or AUSTRAC.

Who we disclose personal information to

Depending on the services provided and the authority available to us, we may disclose personal information to:

• our employees, contractors and authorised personnel;
• related entities and service entities supporting our practice;
• the Australian Taxation Office, Australian Securities and Investments Commission, Tax Practitioners Board, AUSTRAC and other government or regulatory bodies;
• banks, financial institutions and payment providers;
• auditors, lawyers, insurers, consultants and other professional advisers;
• other accountants, tax practitioners, bookkeepers or advisers engaged by you or authorised to receive the information;
• identity verification, fraud prevention, sanctions and regulatory screening providers;
• cloud computing, email, telecommunications, document management, accounting, practice management, cybersecurity, data storage, backup and software providers;
• printing, mailing, document destruction and administrative service providers;
• courts, tribunals, law enforcement agencies and dispute resolution bodies;
• a purchaser, successor or adviser involved in a proposed sale, merger, restructure or transfer of our business, subject to appropriate confidentiality controls; and
• other persons where you have provided permission or where disclosure is authorised or required by law.

We do not sell or rent personal information or client lists to third parties.

Personnel and service providers who receive personal information are expected to access and use it only to the extent necessary for their authorised functions and are subject to applicable confidentiality, privacy, professional and security obligations.

Overseas disclosure and cloud services

We may use cloud, technology, professional or administrative service providers that store, process or support information from locations outside Australia.

Before disclosing personal information overseas, we consider the nature of the information, the purpose of the disclosure, contractual safeguards, provider security arrangements and applicable legal requirements. Where required, we take reasonable steps to ensure that an overseas recipient handles personal information consistently with the Australian Privacy Principles.

The countries in which information may be processed can vary depending on the systems and providers used for a particular engagement. Information about likely overseas locations and relevant providers may be requested by contacting us. Where client permission is required for an overseas or outsourced disclosure, that permission will generally be addressed in our engagement terms or a separate authority.

Security of personal information

We take reasonable administrative, physical and technical measures to protect personal information from misuse, interference, loss, unauthorised access, unauthorised disclosure, alteration and destruction.

Depending on the nature and sensitivity of the information, these measures may include:

• role-based access restrictions and least-privilege access;
• multi-factor authentication and account security controls;
• encryption and secure transmission methods;
• device management, endpoint protection and system monitoring;
• logging, auditing and review of access to sensitive records;
• secure client portals and document exchange systems;
• backups, business continuity and disaster recovery controls;
• staff confidentiality obligations, privacy training and security awareness;
• supplier due diligence and contractual security requirements;
• physical security for offices, records and equipment; and
• secure destruction or de-identification of information that is no longer required.

Access to highly sensitive information, including identity records, tax file numbers, AML/CTF risk information and suspicious matter information, is restricted to authorised personnel with a legitimate need to access it.

No method of electronic transmission or storage can be guaranteed to be completely secure. If you believe information provided to us has been compromised, you should contact us immediately.

Data breaches

We maintain procedures for identifying, containing, assessing and responding to suspected data breaches.

Where a breach is likely to result in serious harm and the requirements of the Notifiable Data Breaches scheme are met, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law. We may also notify regulators, insurers, law enforcement agencies, technology providers or other parties where necessary to investigate, contain or respond to an incident.

How long we retain personal information

We retain personal information for as long as reasonably necessary to provide our services, maintain proper professional records, protect our legal interests, respond to enquiries or disputes and comply with taxation, corporate, professional, AML/CTF and other legal obligations.

Where applicable:

• records of tax agent services are generally retained for at least five years after the relevant service has been completed;
• AML/CTF program, customer due diligence and designated service records are generally retained for at least seven years or for another period required under applicable AML/CTF legislation; and
• other taxation, accounting, employment, corporate, trust and business records are retained for the period required by the relevant law or for longer where reasonably necessary.

Some information may be retained after an engagement ends where necessary to comply with law, support an audit or investigation, resolve a dispute, establish or defend a legal claim, maintain professional records or prevent fraud.

When personal information is no longer required for a lawful purpose, we take reasonable steps to securely destroy it or permanently de-identify it.

Accessing and correcting personal information

You may request access to personal information we hold about you and may ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

Before providing access or making a correction, we may need to verify your identity and authority. We may refuse or limit access where permitted or required by law, including where access would:

• unreasonably affect another person’s privacy;
• reveal commercially sensitive or confidential information;
• prejudice an investigation or enforcement activity;
• breach legal professional privilege;
• contravene a taxation, AML/CTF, secrecy or tipping-off restriction; or
• otherwise be unlawful.

If we refuse an access or correction request, we will generally provide the reason and information about available complaint mechanisms, unless we are prohibited from doing so.

Website, cookies and online services

Our website, client portals and online services may use cookies, analytics, access logs and similar technologies to operate securely, remember preferences, measure performance and understand how visitors use our services.

Information collected may include your IP address, browser type, device information, operating system, referring website, pages visited, session information and the date and time of access.

You can configure your browser to reject or restrict cookies. Disabling cookies may prevent some parts of our website or online services from operating correctly.

Our website may contain links to external websites or embedded content operated by third parties. We are not responsible for the privacy, security or content practices of those third parties, and you should review their applicable privacy policies.

Privacy enquiries and complaints

If you have a question, wish to request access or correction, or believe we have not handled personal information appropriately, you may contact us using the details below.

Please provide sufficient information for us to understand and investigate your enquiry or complaint. We will acknowledge and assess privacy complaints within a reasonable period and may contact you for further information.

If you are not satisfied with our response, you may be entitled to make a complaint to the Office of the Australian Information Commissioner or another relevant regulatory or professional body.

Contact details

D’Omkara Accountants
Email: privacy@domkara.com.au
Address: SE 2 4/24-28 Collins St, Melbourne VIC 3000
Phone: (03) 9579 4450

Changes to this Privacy Policy

We may amend this Privacy Policy when our services, systems, legal obligations or information handling practices change. The current version will be published on our website. We encourage clients and website users to review this Privacy Policy periodically.

Last updated: 29 July 2026.