Privacy Policy
Last updated: Monday 28 September 2026
Direct Management respects the privacy of the people whose information we handle. This policy explains how we collect, use, store and disclose personal information when you visit our website, enquire about our services or work with us.
In this policy, Direct Management, we and us mean Decisions Plus Pty Ltd trading as The Grow CFO Co. and Direct Management ABN 13 609 572 652. Our engagement agreements provide more specific information about the systems, people and arrangements involved in delivering services to each client, and seek permissions where required.
Information we collect
Depending on your relationship with us, we may collect your contact and business details; information you provide in an enquiry or meeting; and information needed to deliver bookkeeping, payroll, BAS and related services. Client records may contain personal information about business owners, employees, contractors, customers and suppliers.
We may also collect information about your use of our website, such as your device, browser and interactions with pages or forms. We collect information that is reasonably needed for our work or otherwise permitted by law.
How we receive and use information
We receive information directly from you and through documents, conversations and systems used in an engagement. We may also receive it from your authorised staff, accountant, software platforms or other people you ask us to work with.
We use information to respond to enquiries, assess and deliver services, communicate with you, manage our business, protect our systems and meet legal and professional obligations. If we do not receive information needed for an engagement, we may be unable to provide the relevant service.
We may send you relevant updates about our services where permitted. You can opt out of marketing emails using the unsubscribe option or by contacting us.
Who may access or receive information
Authorised members of our team and selected providers may access information where needed to deliver and support our services. This can include accounting, payroll, document management, workflow, communications, security and reporting platforms. We may also share information with your authorised representatives, your other advisers, regulators or government agencies where required or permitted.
Our team includes people working outside Australia, including in the Philippines. Our team and service providers may access, process or store information outside Australia, including in the Philippines, New Zealand, the United States, the United Kingdom, Ireland, Germany and Canada. The locations involved depend on the platforms and features used for a particular engagement. We provide more specific disclosures in our engagement agreements. We manage access according to role and take reasonable steps to assess providers and protect information.
Our engagement agreements explain the relevant service arrangements and seek client permission for disclosures to third parties where our professional obligations require it. This privacy policy does not replace those specific disclosures or permissions.
AI and automation
We use approved automation and AI tools to support workflows, organise information and identify matters for review. Our people remain responsible for checking outputs, investigating exceptions and making decisions. Where using a third-party AI tool would disclose information relating to a client’s affairs, we address that use and any required permission in our engagement arrangements.
Security and retention
We use administrative and technical safeguards appropriate to the information we handle. These include controlled access through approved systems, such as Practice Protect, and processes for granting, reviewing and removing access.
We retain information for as long as needed to provide services, meet legal and professional record-keeping obligations and address legitimate business needs. When information is no longer required, we take reasonable steps to destroy or de-identify it, subject to applicable requirements and backup processes.
Website cookies
Our website may use cookies needed for its operation and, if enabled, tools to understand website use or measure marketing. You can manage cookies through your browser and any controls provided on the website.
Access, correction and complaints
You may ask to access personal information we hold about you or request that we correct it. We may need to verify your identity first. Contact us if you have a concern about how we have handled your information. We will investigate and respond within a reasonable time, generally within 30 days.
If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
Data breaches
We assess suspected data breaches, take steps to contain them and notify affected people and relevant authorities where required by applicable law.
European privacy rights
Where EU or UK data protection law applies to particular information we handle, we will provide any additional information required for that activity and respond to requests to exercise applicable rights. These may include rights to access, correction, erasure, restriction, objection and data portability. Some requests may be limited by legal or professional record-keeping obligations.
Changes to this policy
We may update this policy when our practices, technology or legal obligations change. The latest version will appear on this page with its update date.
Contact
Direct Management
Decisions Plus Pty Ltd trading as The Grow CFO Co. and Direct Management ABN 13 609 572 652
enquiries@directm.com.au
1800 15 33 70
PO Box 4391 FOREST LAKE QLD 4078
Information for BAS clients
The Tax Practitioners Board (TPB) explains your obligations as a client and what you can expect from a registered tax practitioner in its Information for clients factsheet.
[Download the TPB Information for clients factsheet — PDF here]
You can also check a practitioner’s registration and learn how to make a complaint to the TPB.
Information specific to Direct Management and your engagement is provided in our engagement agreement.