Privacy Policy

the fine print

1. About this Privacy Policy

Brodie Long & Grew Pty Ltd, trading as BLG Business Advisers ("BLG", "we", "us" or "our") is committed to handling personal information in an open and transparent way.

This Privacy Policy explains how we collect, hold, use and disclose personal information, how you may access or correct that information, and how you may make a privacy related complaint.

We handle personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act), including the Australian Privacy Principles (APPs). Where we send commercial electronic messages, we also comply with the Spam Act 2003 (Cth) (Spam Act).

This Privacy Policy applies to personal information we collect in connection with our professional services, our website, our marketing and communications, and our dealings with clients, prospective clients, referrers and other individuals we interact with in the course of our business.

This Privacy Policy does not apply to information that is not personal information, or to records that are exempt under the Privacy Act, such as certain employee records.

This Privacy Policy was updated on 20 July 2026.

2. What is personal information?

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true and whether or not it is recorded in a material form.

Sensitive information is a subset of personal information and includes information such as health information, biometric information, criminal records, racial or ethnic origin, religious beliefs, political opinions, trade union membership and sexual orientation. We only collect sensitive information where reasonably necessary for our functions or activities and where permitted by law.

3. Kinds of personal information we collect and hold

The personal information we collect depends on the nature of our relationship with you and the services we provide. It may include:

identification and contact details, such as your name, job title, employer, business name, address, email address and telephone number;
identity verification information, such as date of birth and details from identification documents where required;
government-related identifiers and related information, such as tax file numbers, ABNs and other identifiers where collection, use or disclosure is authorised or required by law;
financial, taxation, superannuation, business and transactional information relevant to the services we provide;
information about company structures, trusts, officeholders, beneficial owners, shareholders, assets and liabilities, income, investments and insurance;
professional and background information, such as qualifications, employment history and information relevant to an engagement or referral;
records of communications and interactions with us, including enquiries, instructions, complaints and feedback;
information available from or provided through publicly available sources and professional or social media platforms; and
website, device and usage information collected through cookies, analytics tools and similar technologies, such as IP address, browser type, pages visited, referral source and time spent on our website.

If you give us personal information about another person, you must ensure you are authorised to do so and, where required, that the person has been told about this Privacy Policy.

Where lawful and practicable, you may deal with us anonymously or by using a pseudonym. However, if you do not provide information we reasonably require, we may be unable to provide services or respond to your request.

4. How we use the information we collect

We usually collect personal information directly from you, including when you:

engage us or enquire about our services;
complete forms, onboarding documents or identity verification steps;
communicate with us by email, phone, videoconference, in person, post or through our website;
subscribe to our publications, updates or event invitations;
attend meetings, training sessions, webinars or events; or
interact with our website, social media pages or digital content.

We may also collect personal information from third parties where it is unreasonable or impracticable to collect it directly from you, or where the law permits us to do so. For example, we may collect personal information from your representatives, related entities, referrers, public registers, regulators, government agencies, identity verification providers, financial institutions, software providers, or other service providers connected with the services we provide.

If we receive unsolicited personal information, we will deal with it in accordance with the Privacy Act, including by deciding whether we could have collected it lawfully and, if not, destroying or de-identifying it where lawful and reasonable.

Our website and subscription services are not directed to children under 16 and we do not knowingly collect personal information from children under 16 without appropriate authority.

5. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for purposes connected with our functions and activities, including to:

provide accounting, audit, taxation, advisory and related professional services;
verify identity, authority, instructions and client details;
manage engagements, billing, payments, administration, risk management and internal record-keeping;
communicate with you about our services, your matters, updates and administrative notices;
respond to enquiries, referrals, feedback and complaints;
improve our services, systems, training, quality assurance, website functionality and client experience;
organise and administer events, seminars, training and publications;
conduct due diligence, conflict checks, fraud prevention, security activities and related internal processes;
comply with legal, regulatory and professional obligations; and
otherwise as permitted or required by law.

We do not sell personal information and we do not disclose personal information to third parties for their own direct marketing purposes without consent.

6. Direct marketing and spam compliance

We may send you newsletters, alerts, invitations and other communications about our services, updates and events where permitted by law.

Where a message is a commercial electronic message for the purposes of the Spam Act, we will seek the required consent (which may be express or, where lawful, inferred), clearly identify ourselves as the sender, and include a functional unsubscribe facility.

You may opt out of marketing communications at any time by using the unsubscribe facility in the message or by contacting us using the details below. We will action unsubscribe requests within the period required by law.

Even if you opt out of marketing, we may still send you service, transactional or relationship communications where permitted by law.

7. Cookies, analytics and website tools

We may use cookies and similar technologies on our website to operate the site, remember preferences, understand website usage and improve performance and user experience.

Some cookies and analytics tools are provided by third parties, including website, customer relationship management and analytics providers. These tools may collect technical and usage information about your interaction with our website and communications.

You can usually control cookies through your browser settings. If you disable cookies, some parts of our website may not function properly.

8. Third party websites

Our website may contain links to third party websites, platforms or services that are operated by other organisations and are not under our control.

If you access a third party website, any personal information you provide will be collected, held, used and disclosed in accordance with that third party’s privacy policy, and not this Privacy Policy. This may include disclosure of your personal information to overseas recipients.

We encourage you to review the privacy policies and terms of use of any third party websites before providing your personal information so that you understand how your information will be handled.

9. Technology and artificial intelligence

We may use technology solutions, automation tools and artificial intelligence tools to support our operations and service delivery, for example to assist with document processing, drafting, research support, workflow management or administrative tasks.

Where we use these tools, we do so subject to appropriate oversight, confidentiality controls and professional judgement. We remain responsible for the services we provide to you.

10. Disclosure of personal information

We may disclose personal information for the purposes described above to:

our related entities and personnel;
contractors, consultants and service providers who assist us to operate our business and provide services, including IT, document management, cloud hosting, website, CRM, marketing, verification, administration and security providers;
your authorised representatives, advisers and related parties;
professional advisers, insurers, auditors and financiers;
event or training partners, where relevant to your participation and with appropriate controls; and
courts, tribunals, regulators, government agencies, law enforcement bodies and other persons where disclosure is required or authorised by law, professional standards or a court or tribunal order.

We take reasonable steps to require third parties that handle personal information on our behalf to protect that information appropriately.

If we publish testimonials, reviews or similar content that identifies an individual, we will do so with the individual’s consent and will take reasonable steps to remove or de-identify that information if consent is withdrawn.

11. Overseas disclosure

We may disclose personal information to service providers and personnel located outside Australia where reasonably necessary for our operations or service delivery.

This may include recipients located in the Philippines, the United States and countries in the European Economic Area where our technology, hosting, communications or support providers operate or store data.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the APPs, unless an exception applies under the Privacy Act.

12. Potential disclosure in connection with business sales or acquisitions

We may disclose personal information in connection with a proposed or actual sale, merger, reorganisation or other transfer of all or part of our business or assets. This may include disclosure to prospective acquirers, investors, professional advisers and financiers for the purpose of conducting due diligence and implementing the transaction.

Where practicable, we will limit the information disclosed to that which is reasonably necessary for the relevant purpose and may use de-identified or aggregated information. Any disclosure will be subject to appropriate confidentiality obligations, and we will take reasonable steps to ensure that recipients handle personal information in a manner consistent with this Privacy Policy and applicable law.

13. Government related identifiers and sensitive information

We may collect and use government-related identifiers, such as tax file numbers and details from identification documents, where reasonably necessary and where authorised or required by law. We do not adopt a government-related identifier as our own identifier unless permitted by law.

We only collect sensitive information where reasonably necessary for our functions or activities and where permitted by law, including with consent where required.

14. AML/CTF and identity verification

Where we provide services that are subject to anti-money laundering and counter-terrorism financing obligations, we may collect, verify and use additional personal information to comply with those obligations.

Depending on the engagement, this may include information about identity, beneficial ownership, control, authority to act, the nature and purpose of the engagement, and source of funds or source of wealth where relevant.

We may obtain this information from you, your representatives, public registers, verification providers and other lawful sources, and may disclose it to service providers, regulators, government agencies or law enforcement bodies where required or authorised by law.

In some circumstances, the law may restrict what we can tell you about AML/CTF-related collection, use or disclosure.

15. Security of personal information

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Those steps may include physical, technical and organisational safeguards such as access controls, secure systems, password protections, staff confidentiality obligations, training, secure disposal processes and contractual protections with service providers.

No method of transmission over the internet or method of electronic storage is completely secure. Although we take reasonable steps to protect personal information, we cannot guarantee absolute security.

16. How long we keep personal information

We keep personal information for as long as it is reasonably necessary for the purpose for which it was collected, for our legitimate business needs, and to comply with legal, regulatory, taxation, accounting, professional and record-keeping obligations.

Marketing preferences and unsubscribe records may be retained for as long as reasonably necessary to honour your communication preferences and comply with applicable laws.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it, or to securely store it until destruction or de-identification is practicable.

17. Access and correction

You may request access to the personal information we hold about you, and request correction of that information, by contacting us using the details below.

We will respond within a reasonable period and will generally provide access unless an exception under the Privacy Act applies. If we refuse access or correction, we will give written reasons where required.

To help us respond, we may ask you to verify your identity and specify the information you are seeking.

18. Complaints

If you have a question, concern or complaint about how we have handled your personal information, please contact us using the details below.

We will acknowledge your complaint and aim to respond within 30 days or such other period as is reasonable in the circumstances.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

19. Contact details

BLG Business Advisers

PO Box 460

Wollongong NSW 2520

Email: office@blgba.com.au

Phone: (02) 4229 2211

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will be published on our website and will take effect from the date of publication.