Mischel & Co Group Pty Ltd | Last updated 4 November 2026
Mischel & Co Group Pty Ltd (Mischel & Co, we, us or our) protects the personal and confidential business information entrusted to us. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Privacy (Tax File Number) Rule 2015 and other applicable legal and professional requirements.
This policy explains how we collect, hold, use, disclose and protect personal information and how an individual may request access or correction or make a privacy complaint.
1. Information We Collect
The information we collect depends on the services requested and our legal, regulatory and professional obligations. It may include:
- identification and contact information, including name, date of birth, occupation, address, email address, telephone number and identity-verification details;
- government-issued identifiers, including tax file numbers, where collection is authorised by law;
- financial, banking, taxation, superannuation, insurance and payment information;
- corporate and business records, including trust deeds, corporate registers, meeting minutes and ASIC records;
- customer due diligence information, including ownership, control, beneficial ownership, representatives, politically exposed person and sanctions-screening information;
- complaint, incident, employment, contractor or service-provider information where relevant;
- sensitive information contained in taxation, employment or other records where relevant and lawfully collected; and
- website and communication information, including enquiries, correspondence, IP address, browser or device information and website interaction data.
2. How We Collect Information
We usually collect information directly from the individual, a client, director, trustee, partner, authorised representative or another member of a client group. We may also collect information from authorised third parties, public or official registers, government bodies, professional advisers and approved service providers, or where collection is required or permitted by law.
Where lawful and practicable, a person may interact with us anonymously or using a pseudonym. This will rarely be practicable for professional services because we must identify clients, confirm authority, maintain accurate records and complete applicable customer due diligence.
If we receive information we did not request, we assess whether it may lawfully be retained and securely destroy or de-identify it where appropriate.
3. How We Use and Disclose Information
We use and disclose information to assess and manage client relationships; provide accounting, taxation, audit, assurance, advisory and corporate compliance services; communicate with clients and representatives; verify identity; complete customer due diligence, screening, monitoring and reporting; manage billing and records; and meet legal, professional, ethical, insurance and quality-management obligations.
Subject to confidentiality, authority and applicable law, information may be disclosed to:
- directors, trustees, partners, authorised representatives, members of an appropriately authorised client group and persons responsible for governance;
- government, law-enforcement and regulatory bodies, including the ATO, ASIC, TPB, AUSTRAC and OAIC;
- professional bodies, authorised quality reviewers, insurers, legal advisers and specialists;
- approved identity-verification, technology, administration, data-processing and other service providers; and
- other parties where consent or authority has been provided or disclosure is otherwise required or permitted by law.
Where we provide services to a client group, we may share information within that group where necessary to perform the engagement and where the sharing is appropriately authorised or otherwise permitted by law.
AML/CTF laws may restrict what we can tell a person about certain assessments, reports or disclosures.
4. Website Cookies and Analytics
When a person uses our website, we may collect contact-form information and technical data such as IP address, browser or device type, pages visited and the time and duration of a visit. Our website may use cookies or similar technologies for security, functionality and website analytics. Browser settings can be used to block or delete cookies, although this may affect some website functions.
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites and recommend reviewing their privacy information.
5. Service Providers and Overseas Disclosures
We may use approved service providers for identity verification, technology, cloud storage, administration, accounting file preparation, data entry and business support. Providers receive only the information reasonably required for the approved service and are subject to appropriate confidentiality, privacy and security requirements.
Some providers or their subprocessors may store, process or access information outside Australia. Where practicable, likely overseas countries are identified below or in the relevant collection notice, engagement documentation or current provider information. We take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.
Some approved service providers or their personnel may store, process or access personal or business information in India and Malaysia.
6. Security, Retention and Data Breaches
We use reasonable physical, technical and organisational safeguards to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. Access is restricted to authorised personnel and approved providers who require it for their role, and information is transmitted using approved secure methods.
We retain information for as long as reasonably required for legal, taxation, regulatory, professional, insurance, quality-management, backup and archiving purposes. Certain AML/CTF records are generally retained for seven years. When information is no longer required, we take reasonable steps to securely destroy or de-identify it, subject to lawful backup and archival processes.
We record the identity-verification information required for our services and obligations. Full copies or images of identity documents are not routinely retained after successful verification unless retention is required, authorised or approved for a documented reason.
If we become aware of a suspected loss, unauthorised access or disclosure of personal information, we will contain and assess the incident under our Data Breach Response Plan. Where required, we will notify affected individuals and the OAIC. Please contact our Privacy Compliance Officer if you believe information provided to us may have been compromised.
7. Access and Correction
An individual may request access to personal information we hold about them or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will verify identity before responding and generally respond within 30 days. If access or correction is refused or limited, we will provide written reasons and available complaint options unless the law permits otherwise.
We do not charge for making a request. We may charge a reasonable amount for providing access where permitted, after advising the requester of the likely cost.
8. Direct Marketing
We may use contact details to send professional updates, newsletters or information about our services where permitted by law. A recipient may opt out at any time by using the unsubscribe facility or contacting us.
9. Privacy Complaints
A privacy complaint may be made to our Privacy Compliance Officer by telephone, email or in writing. Please describe what happened, when it occurred, the information involved and the outcome sought. We will acknowledge the complaint, investigate it fairly and aim to provide a written response within 30 calendar days, or explain why more time is required.
If the complainant is not satisfied with our response, they may contact the Office of the Australian Information Commissioner (OAIC) on 1300 363 992 or at www.oaic.gov.au/privacy/privacy-complaints.
10. Tax File Number and AML/CTF Information
We collect, use, disclose and retain tax file number information only where authorised by taxation, superannuation or other applicable law. We do not use TFNs as general identifiers and restrict access to authorised personnel.
Where applicable, we collect and retain customer due diligence records and make disclosures required or authorised under AML/CTF legislation. These obligations may prevent us from providing information about certain assessments, reports or regulatory disclosures.
11. Changes and Contact Details
We may update this policy to reflect changes in law, professional requirements, systems or business practices. The current version is available at www.mischco.com.au/privacy-policy/.
Privacy Compliance Officer
Mischel & Co Group Pty Ltd
Suite 1201, 1 Queens Road, Melbourne VIC 3004
Phone: (03) 9684 9999
Email: admin@mischco.com.au
Web: www.mischco.com.au/contact/