Skip to Content

Privacy Policy

WAO Connect Pty Ltd (ABN 67 632 872 523) trading as WAO Business ("WAO", "we", "us", "our") is committed to protecting the privacy of the personal information we handle.

This policy explains how we collect, use, disclose and secure personal information, and how you can access it, correct it or complain about our handling of it. It applies to our website, our services and our dealings with clients, candidates, partners and enquirers.

1. The kinds of personal information we collect

We collect different information depending on your relationship with us.

If you enquire through our website or contact us: your name, email address, phone number, company name, the subject of your enquiry and the content of your message.

If you are a client, or work for one: contact and role details, and the information necessary to deliver our services. Because we work inside your accounting system, this will include access to financial records that may contain personal information about your employees, customers, suppliers and contractors.

If you apply for a role through WAO Talent: your CV, work history, qualifications, referee details, salary expectations, right-to-work status, the results of the WAO Odoo Finance Assessment, and interview and reference notes.

If you visit our website: technical information including IP address, browser and device type, pages visited and referring source. See section 8.

2. Sensitive information and tax file numbers

2.1 Tax file numbers. Where we perform payroll-related bookkeeping, we may have access to tax file numbers held in your Odoo environment. We handle TFN information in accordance with the Privacy (Tax File Number) Rule 2015. We do not use or disclose TFN information except as required to perform the services or as required by law, and we do not use it to establish or confirm identity.

2.2 We do not collect sensitive information as defined in the Privacy Act 1988 (Cth) unless it is necessary for our services and you consent, or we are required or authorised by law.

3. How we collect personal information

We collect personal information directly from you wherever practicable — through our website forms, discovery calls, service delivery and recruitment processes.

We also collect personal information indirectly. When we perform bookkeeping inside a client's Odoo environment, we access personal information about that client's employees, customers and suppliers, who have not dealt with us directly. Our clients are responsible for ensuring they have the authority and have given the notices needed to permit that access.

4. Why we collect, hold, use and disclose it

We use personal information to:

  • respond to enquiries and provide quotes;
  • deliver our services, including bookkeeping, BAS workpaper preparation, finance health checks, recruitment and partner services;
  • verify identity and manage access to systems;
  • meet our obligations under taxation law and other legal requirements;
  • manage billing, accounts and our client relationship;
  • match candidates to roles and present shortlists to clients;
  • improve our website and services; and
  • send service communications and, where you have opted in, marketing.

You may opt out of marketing at any time using the unsubscribe link or by contacting us. We will continue to send communications necessary to deliver the services you have engaged us for.

5. Who we disclose it to

We may disclose personal information to:

  • our personnel and contractors, on a need-to-know basis;
  • clients, where you are a candidate and we present your application;
  • partners, where you have engaged us through a Partner Connect arrangement;
  • service providers who support our operations, including cloud hosting, our ERP and CRM platform and email providers;
  • professional advisers, including lawyers and accountants; and
  • government agencies and regulators, where required or authorised by law, including the Australian Taxation Office.

We do not sell personal information.

6. Data location and overseas disclosure

6.1 Client financial data is hosted within Australia.

6.2 Some members of our delivery team work from Sri Lanka and access client Odoo environments from there to perform our services. This access is limited to what the services require, is subject to the same confidentiality obligations and access controls as our Australian personnel, and we take reasonable steps to ensure personal information accessed overseas is handled in accordance with the Australian Privacy Principles.

6.3 Apart from the access described in 6.2, we do not disclose personal information to overseas recipients. If that changes, we will update this policy to identify the countries involved.

7. How we secure it

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:

  • role-based access control and restricted administrative privileges;
  • read-only service accounts for diagnostic engagements, where full access is not required;
  • treating staging and test data with the same sensitivity as production data;
  • encryption in transit;
  • confidentiality obligations binding our personnel; and
  • secure destruction or de-identification of information no longer required.

We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law. Financial records are generally retained for seven years in accordance with taxation record-keeping requirements.

If we become aware of a data breach that is likely to result in serious harm, we will assess it and notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

8. Website cookies

Our website runs on Odoo and uses cookies necessary for the site to function, such as session and language settings. We do not currently use third-party advertising or session-replay tools. If we add analytics tools, we will update this section to describe them. You can control cookies through your browser settings; disabling them may affect site functionality.

9. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details in section 11.

We will respond within a reasonable period, ordinarily 30 days. We do not charge for making a request. If we refuse access or correction we will tell you why in writing and explain how to complain.

Where we hold personal information as part of a client's records, a request may need to be directed to that client as the entity that controls the information. We will help you identify the right contact.

10. Complaints

If you believe we have breached the Australian Privacy Principles, contact us using the details below. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992 · GPO Box 5218, Sydney NSW 2001.

11. Contact us

Privacy Officer
WAO Connect Pty Ltd trading as WAO Business
Unit A1/35–39 Bourke Road, Alexandria NSW 2015
sales@waobusiness.com.au · +61 2 8317 1300

12. Changes to this policy

We may update this policy from time to time. The current version is always available at waobusiness.com.au/privacy-policy.

Last updated: 23 September 2026