SBB Partners Privacy Policy

Version 1.4: 15 January 2026

1. Privacy Commitment

SBB Partners Pty Ltd (we, us or our) recognises the importance of protecting your privacy and the personal information in our care. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We provide collection notices at or before the time we collect personal information (or as soon as practicable afterwards) explaining the purposes of collection, consequences of non‑provision, usual disclosures (including any overseas disclosures), how to access and correct your information, and how to make complaints. This Privacy Policy explains the kinds of information we collect and how we collect, hold, use and disclose it (including personal and sensitive information). We may also agree other uses or disclosures with you from time to time. By using our websites, applications and services, or otherwise providing us with your information, you consent to our handling of your personal information as described in this Privacy Policy or as otherwise agreed with you. We may update this Privacy Policy from time to time; the revised policy will take effect when posted on our website.

2. Kinds of information collected

2.1 We may collect both personal and sensitive information from you.

2.2 Personal information is any information about you that identifies you or by which your identity may reasonably be determined. This may include your full name, address, phone number, email address and payment details.

2.3 Sensitive information (as defined in the Privacy Act) includes information about an individual’s health, racial or ethnic origin, religious beliefs, sexual orientation, biometric information and certain other categories. We collect sensitive information only with your consent (unless another exception applies) and only where reasonably necessary for us to provide our services.

2.4 Tax File Numbers (TFNs). TFNs are regulated under the Privacy (Tax File Number) Rule 2015. Where we handle TFN information, we do so strictly in accordance with that Rule, including applying appropriate security, access controls and disposal measures.

3. Collection of Personal Information

3.1 We collect personal information directly from you, via our online channels, and from third parties (including our affiliates) where permitted. Where we collect from third parties, we take reasonable steps to ensure you are aware of the collection (see APP 5).

3.2 We collect information to provide and improve our services, to perform due diligence and conflict checks, to manage our relationship with you, to communicate about services (including those of our affiliates), and to comply with legal obligations. If we cannot collect personal information, this may affect our ability to provide services to you.

4. Use of Personal Information

4.1 We use personal information for the purposes for which it was collected or as otherwise permitted by law. These purposes include delivering services, administering our websites and systems, client relationship management, billing, compliance and audit, recruitment and improving our services.

5. Disclosure of Personal Information

5.1 We may disclose personal information to: (a) contractors, agents and service providers who support our operations; (b) government bodies as required by law or necessary to provide services; (c) our affiliates to help provide services to you; (d) professional advisers; (e) other parties with your consent; and (f) as otherwise required or authorised by law.

6. Collection, use and disclosure of Sensitive Information

6.1 We collect sensitive information directly from you where reasonably necessary to provide services, and only with your consent unless an exception applies.

6.2 Tax File Numbers (TFNs). We collect, store, use and disclose TFN information strictly in accordance with the Privacy (Tax File Number) Rule 2015. TFN information must not be sent via insecure channels or entered into public AI tools.

7. Direct marketing

7.1 We will only use or disclose personal information for direct marketing where permitted by APP 7. Each direct marketing message includes a simple means to opt out, which we action promptly. If we did not collect your information directly, we will provide the source upon request. We do not use sensitive information for direct marketing without your consent.

8. Use of pseudonyms and unique identifiers

Where lawful and practicable, you may deal with us anonymously or using a pseudonym. However, for some services (for example, where legal or regulatory identification is required), this may not be practicable.

9. Cross-border disclosure

9.1 We may disclose personal information to service providers located outside Australia, including (as at the date of this Policy) the United States, the United Kingdom and the Philippines. Before any overseas disclosure, we take reasonable steps (including contractual and technical safeguards) to ensure the overseas recipient does not breach the APPs. We remain accountable under section 16C of the Privacy Act for mishandling by overseas recipients. We will update this Policy with destination countries as they change.

10. Collection of Credit Information and use and disclosure of Credit Information

Please refer to our Credit Information Management Policy for details about our handling of Credit Information.

11. Holding and security of your Personal Information and Credit Information

11.1 We take reasonable steps to keep personal information secure and up to date, including physical, technical and organisational measures such as locked premises, access controls, encryption and multi-factor authentication, and secure disposal.

11.2 We will destroy or de‑identify personal information when it is no longer needed for any purpose permitted by law, subject to legal record‑keeping requirements.

11.3 Notifiable Data Breaches (NDB). If a data breach is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the NDB scheme and take steps to mitigate harm.

12. Accessing and correcting Personal Information and Credit Information

12.1 You may request access to or correction of the personal information and Credit Information we hold about you. We will respond within a reasonable period and explain reasons if we refuse access or correction as permitted by law.

13. How to contact us about access, correction or privacy matters

Email: connect@sbbpartners.com.au
In writing: The Directors, SBB Partners, Level 1, 122 Wood Street, Mackay QLD 4740

14. Third party websites

Our websites may contain links to third-party sites. Their privacy practices are outside our control. We encourage you to review those sites’ privacy policies.

15. Complaints

If you believe we have breached our privacy obligations, please contact us using the details above. We aim to acknowledge and respond to complaints promptly and within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

16. Updates to this Policy

We may update this Privacy Policy from time to time by posting a new version on our website.

17. Meanings

“Act” means the Privacy Act 1988 (Cth). “Personal Information”, “Sensitive Information” and other capitalised terms have the meanings given by the Act or this Policy.