Privacy Policy

This Privacy Policy sets out how Ledgerburo Accounting & Advisory ("Ledgerburo", "we", "our", or "us"), operating from Ahmedabad, Gujarat, India, collects, uses, protects, and discloses personal and financial information.

We deliver professional back-office accounting, bookkeeping, tax preparation, and specialised Self-Managed Superannuation Fund (SMSF) support primarily to accounting practices and CPA firms in Australia. We recognize the sensitive nature of the financial records entrusted to us and treat client privacy as our highest priority.

As a dedicated outsourcing partner to Australian firms, our processes and security controls are intentionally structured to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), alongside the Information Technology Act 2000 of India.

We implement strict data governance controls so our Australian practice partners can comfortably meet their regulatory obligations under Australian law when engaging offshore resourcing support.

Depending on the nature of our engagement with your accounting practice, we may process:

• Practice Information: Partner and staff names, firm business addresses, email IDs, professional phone numbers, and workflow preferences.
• Financial & Accounting Records: General ledgers, bank transactions, invoices, payroll data, financial statements, and business activity records provided for processing.
• Tax & SMSF Information: Tax file records, BAS/IAS documentation, trustee minutes, pension records, and audit workpapers strictly necessary for compliance tasks.
• Technical Data: IP addresses, browser types, and standard access logs collected when accessing our public website.

Information provided to Ledgerburo is used solely for the agreed professional purposes, including:

• Executing bookkeeping, account reconciliations, and financial reporting.
• Preparing BAS, FBT, tax returns, and complex SMSF workpapers.
• Communicating directly with your team regarding workflow progress and queries.
• Complying with contractual obligations and applicable legal requirements.

We implement comprehensive technical and organizational safeguards to protect your firm’s information from unauthorized access, loss, or disclosure:

• Cloud-Based Access: Our team primarily operates directly within your practice's authorized cloud software (e.g., Xero, MYOB, BGL, Class, QuickBooks) without downloading files to local drives.
• Secure Network Infrastructure: Encrypted connections, enterprise firewalls, commercial antivirus, and restricted USB/external media ports.
• Confidentiality Agreements (NDAs): Every Ledgerburo team member is bound by strict non-disclosure agreements and confidentiality clauses.
• Role-Based Access Control: Team members are only granted access to the specific accounts and clients assigned to them.

Because Ledgerburo's operations center is situated in Ahmedabad, India, information shared by Australian accounting firms is accessed across borders.

Under APP 8 (Cross-Border Disclosure of Personal Information), we take reasonable steps to ensure that all data processed by our Indian team receives data protection equivalent to Australian standards through contractual data processing agreements and secure remote portal access.

We retain personal and financial records only for as long as necessary to fulfill the operational requirements of our engagement agreement or to comply with statutory legal guidelines.

Upon completion or termination of an engagement, and upon request by the client practice, all client-specific work records are either securely archived or permanently deleted in accordance with data destruction best practices.

Partner accounting firms and authorized individuals have the right to request access to the personal data we hold about them, request corrections of inaccurate details, or withdraw specific processing consents.

If you are an individual client of an accounting practice that partners with Ledgerburo, please submit your access or correction inquiry directly to your accounting firm, as they remain the primary data controller.

If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection protocols, please get in touch with our team: