Privacy Policy
Last updated: June 2026
StickIt is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you access or use the StickIt platform and website.
This policy also serves as our collection notice under Australian Privacy Principle 5 (APP 5). By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
1. Who We Are
StickIt is a financial administration platform that helps individuals and contractors manage their income, invoicing, tax obligations, and related financial tasks. References to "we", "us", or "our" in this document refer to StickIt and its associated services.
We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also comply with the Privacy (Tax File Number) Rule 2015 and the Notifiable Data Breaches (NDB) scheme.
2. Privacy Governance
2.1 Privacy Officer
StickIt has appointed a designated Privacy Officer who is responsible for overseeing our privacy practices, handling privacy enquiries and complaints, assisting with Privacy Impact Assessments (PIAs), and ensuring our compliance with applicable privacy laws. To contact our Privacy Officer, please use the details in Section 14.
2.2 Privacy Management Plan
StickIt maintains an internal Privacy Management Plan that sets out measurable privacy goals and targets, and documents how we meet our obligations under APP 1.2. This plan is reviewed at least annually by our Privacy Officer and updated to reflect changes in our practices, applicable law, and community expectations.
2.3 Staff Training
All StickIt staff who access or handle personal information are required to complete privacy training as part of their induction and on an ongoing annual basis. This ensures our team understands their obligations and handles your information appropriately.
2.4 Privacy Impact Assessments
Before introducing new features, products, or processes that involve the collection or use of personal information, StickIt conducts a Privacy Impact Assessment (PIA) to identify and mitigate any privacy risks. A register of completed PIAs is maintained internally by our Privacy Officer.
3. Information We Collect
3.1 Information You Provide to Us
When you register for and use our services, we may collect the following personal information:
- Identity information: full name, date of birth, government-issued identification numbers
- Contact information: email address, phone number, residential address
- Financial information: bank account details, income data, invoice information
- Tax information: tax file numbers (TFNs) and GST registration details
- Employment information: occupation, ABN or business registration details, client relationships
- Account credentials: username, password, and security preferences
3.2 Information Collected Automatically
When you use the StickIt platform, we may automatically collect technical data including:
- Device and browser information (IP address, browser type, operating system)
- Usage data (pages visited, features used, time spent on platform)
- Log data and error reports
- Cookies and similar tracking technologies
4. Tax File Numbers
The collection and handling of Tax File Numbers (TFNs) is specifically regulated under the Privacy (Tax File Number) Rule 2015, which sits alongside the Australian Privacy Principles. StickIt takes the following steps to comply with this Rule:
- We only collect your TFN where it is lawfully required for the purpose of calculating and administering your tax obligations
- Your TFN is stored securely and access is strictly limited to authorised personnel
- We do not disclose your TFN to any third party except where required by law (e.g. to the Australian Taxation Office)
- We do not use your TFN for any purpose other than those permitted under the TFN Rule
- You may choose not to provide your TFN, however this may affect our ability to provide certain tax-related services
5. How We Use Your Information
We use personal information collected for the following purposes, all of which are directly related to providing the StickIt service or are purposes you would reasonably expect:
- To create and manage your account and deliver StickIt's core services
- To process financial transactions, invoices, and payments on your behalf
- To calculate and assist with tax obligations, including PAYG withholding and GST
- To communicate with you about your account, updates, and service notifications
- To comply with legal and regulatory requirements under Australian tax law
- To detect, prevent, and respond to fraud, security incidents, or misuse of StickIt's services
- To improve and develop the StickIt platform through analytics and research
- To personalise your experience in ways directly related to your use of the platform
We will not use your personal information for any secondary purpose unless it is directly related to the primary purpose of collection, you would reasonably expect such use, or we have obtained your consent.
6. Sharing Your Information
We do not sell your personal information to third parties. We may share your information only in the following limited circumstances:
6.1 Service Providers
We engage trusted third-party service providers to support our operations, including cloud hosting, payment processing, identity verification, and analytics. These providers are contractually bound to protect your data and may only use it as directed by us.
6.2 Government and Regulatory Bodies
We may disclose your information to the Australian Taxation Office (ATO) or other relevant regulatory authorities as required by law, including obligations related to tax reporting and anti-money laundering compliance.
6.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or in response to a lawful request by public authorities.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you before this occurs and before your information becomes subject to a different privacy policy.
7. Overseas Disclosure of Personal Information
Some of the third-party service providers we use to operate the StickIt platform may store or process personal information outside of Australia. Where this occurs, we take reasonable steps to ensure that those overseas recipients handle your personal information in a manner consistent with the Australian Privacy Principles (APP 8).
By using our services, you acknowledge that your personal information may be transferred to, stored, or processed in countries outside Australia, including countries that may not have equivalent privacy protections. Where required, we enter into data processing agreements with overseas providers to ensure appropriate safeguards are in place.
If you would like more information about the countries in which your data may be held or processed, please contact our Privacy Officer using the details in Section 14.
8. Data Storage and Security
Your personal information is stored on secure servers, which may be located in Australia or overseas (see Section 7). We implement industry-standard technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction.
These measures include encryption of data in transit and at rest, multi-factor authentication, role-based access controls, and regular security audits. No method of internet transmission is completely secure, and we cannot guarantee absolute security.
9. Data Breach Notification
StickIt is subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. In the event of an eligible data breach, StickIt will:
- Conduct a prompt assessment to determine whether the breach is likely to result in serious harm
- Notify affected individuals as soon as practicable, providing details of the breach and recommended steps they should take
- Notify the Office of the Australian Information Commissioner (OAIC) as required by law
- Take immediate steps to contain the breach and prevent further harm
StickIt maintains an internal data breach response plan to ensure we are prepared to respond quickly and appropriately to any incident involving your personal information.
10. Data Retention
We retain your personal information for as long as necessary to provide our services and meet our legal obligations. Upon closure of your account, we may retain certain information for a period required by applicable law — including tax records, typically retained for seven years under Australian law — before securely deleting it.
11. Your Rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate, incomplete, or outdated information
- Request deletion of your personal information, subject to our legal obligations
- Opt out of receiving marketing communications at any time
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, please contact our Privacy Officer using the details in Section 14. We will respond to all requests within 30 days.
12. Cookies and Tracking
We use cookies and similar technologies to enhance your experience on the StickIt platform. Cookies help us remember your preferences, understand how you use our services, and deliver relevant content.
You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features.
13. Privacy Complaints
If you believe StickIt has breached your privacy or not handled your personal information in accordance with the Australian Privacy Principles, we encourage you to contact us first so we can work to resolve your concern directly.
Our Internal Complaint Process
- Submit your complaint to our Privacy Officer using the contact details in Section 14
- We will acknowledge your complaint within 5 business days
- We will investigate the complaint and respond with our findings and proposed resolution within 30 days
- If you are not satisfied with our response, we will advise you of further steps available
If you are not satisfied with our response, or if we fail to respond within 30 days, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact our Privacy Officer:
- Address: Sydney, Australia
We aim to respond to all privacy enquiries within 5 business days.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or community expectations. We will notify you of material changes via email or a prominent notice on the StickIt platform. The updated policy will take effect from the date noted at the top of this document. We encourage you to review this policy periodically.