EGC Website Privacy Statement

Last reviewed: 10 October 2026 | Version 2026.10-1

About EGC

J L Huang Pty Ltd (ACN 108 136 572) as trustee for Evergrowth Consulting Trust (ABN 27 433 203 612), trading as Evergrowth Consulting (EGC), provides accounting and taxation services. We do not provide audit, assurance, valuation, financial-planning or legal services.

This statement explains how we handle personal information received through our website and in connection with our services. It does not expand the services agreed with a client.

Our engagement and your permissions

Clients receive a more detailed Client Privacy Policy with their engagement package. Client-specific disclosure permissions are recorded within the engagement letter.

Reading this statement, using our website, receiving our Client Privacy Policy or leaving a permission entry unanswered does not give blanket permission to disclose client information. The agreed recipient, purpose, information and restrictions control each permission. A website update does not silently expand consent or change engagement terms.

Information we collect

We collect information reasonably needed to respond to enquiries, verify identity and authority, provide agreed services, manage fees, maintain professional records and meet applicable legal obligations. This can include contact details, identity-check records, financial and tax records, correspondence and instructions.

We usually collect information from you or your authorised representative. For agreed services, we may obtain relevant information from the ATO, a previous accountant, financial institutions or other advisers where authorised or lawfully permitted.

We seek sensitive information only where necessary for the work, explain its purpose and obtain consent where required. Please do not provide unrelated medical, family or identity information. If necessary information is not provided, we may be unable to perform the affected service and will explain this.

Do not enter tax file numbers (TFNs), passwords, identity-document images or detailed tax records into our general website enquiry form or send them through ordinary email. Contact us to arrange an approved secure transfer method. TFNs are handled only through an authorised tax workflow, not as general marketing identifiers or inputs to general-purpose AI.

How we use and disclose information

We use information for agreed work, responding to you, billing, professional obligations and appropriate record-keeping. Access by our personnel is limited to those who need it for the relevant work or practice administration. We do not sell client information.

Any marketing is separately managed, with an option to opt out, and must not repurpose sensitive tax information without authority. You can contact us to stop receiving marketing communications.

We do not disclose information about a client’s affairs to a third party without the client’s permission unless we have a legal duty to disclose. Any specifically applicable statutory protection is assessed on its actual conditions, not treated as a general discretion to disclose. Merely naming a recipient in this statement does not give that permission. TPB confidentiality guidance[1]

A spouse, group member, common director, guarantor or person paying an invoice does not automatically have access to another client’s tax affairs. Authority for a representative and any group service-information sharing is recorded in the engagement letter. Permission to share the minimum information needed for agreed group billing, fee recovery or a guarantee is separate from permission to share service information.

Service providers and professional recipients

Our onsite Microsoft data and terminal servers are supported by ACE Infotech Pty Ltd, and we use Microsoft E3 licensing for our business environment. Relevant engagement permissions cover information reasonably necessary for the described support, maintenance, security and actual business-system services. They do not authorise every available Microsoft product, backup service, external agent or identifiable AI input.

Where the corresponding permission is agreed, relevant information may also be provided to:

Fenton Green and QBE for EGC’s insurance administration, notifications, claims or defence.
Australian legal advisers for confidential engagement-related advice, professional obligations, disputes or lawful fee recovery.
CPA Australia Ltd and its appointed confidential practice-quality reviewer for an agreed review of EGC’s practice.

These permissions are limited to their agreed purposes and necessary information, not routine bulk uploading of client files. A CPA practice-quality review is not an audit service for the client. Website-service providers are described separately below.

Financial reports and tax returns

Before EGC sends a financial report or tax return directly to a third party, we require separate written authority identifying the recipient and documents, unless disclosure is legally required. This also applies to insurers, legal advisers and CPA reviewers. General permissions do not override this requirement, and substantial extracts are not a workaround.

Strictly necessary access during agreed IT support is different from an instruction to deliver a completed report or return to a new recipient. Clients may themselves forward their complete, unaltered final reports and returns for their own finance purposes without obtaining new EGC permission. Doing so does not create a separate EGC engagement with the recipient or an undertaking to answer its enquiries; the agreed engagement and report limitations continue to apply.

AI-assisted work

Our approved enterprise AI product families are Perplexity Enterprise Pro and Microsoft Copilot in the enterprise environment. Under the base engagement, our policy permits AI-assisted research and drafting only with generic or genuinely sanitised material that does not disclose client confidential affairs or identifiable personal information. Removing names alone is insufficient.

Identifiable client files, TFNs, credentials, identity documents and sensitive personal records are not authorised inputs, including for web-search grounding or external agents. If material cannot be established to meet this restriction, it must not be used as an AI input. Any proposed use of identifiable client information requires a separate assessment and written arrangement, not permission inferred from this website or ordinary IT-support consent.

Material AI outputs must be checked by a competent person, and EGC remains responsible for its services. Enterprise no-training commitments apply within the providers’ covered services and terms; they do not mean zero retention, Australian-only processing or identical protections for every external agent or other recipient. Perplexity enterprise terms[2]; Microsoft enterprise data protection[3]

Website enquiries, cookies and external features

Our enquiry form asks for your name, email address, subject and message. We use those details to respond and manage your enquiry. Please limit what you send to what is necessary and use the secure-transfer arrangements above for client records. EGC contact page[4]

The website uses Google Analytics, includes a Google Maps embed on the contact page and references Google-hosted font resources. It also sets a language-preference cookie. These website features are distinct from the enterprise AI tools used for professional work; their presence does not authorise uploading client files to Google services. EGC website[5]; EGC contact page[6]

Google Analytics helps measure website use. Information sent through analytics can include visited page URLs, browser and device information, language, session information and cookie identifiers; Google also receives an IP address when a browser connects to its services. These identifiers are not necessarily anonymous. Google Analytics data collection[7]; Google’s use of information from partner sites[8]

The website’s cookies include pll_language and Google analytics-related cookies such as _ga, _ga_ followed by a property identifier, _gid and _gat. Some cookies remain after the browser closes; expiry and renewal depend on the cookie, settings and browser restrictions. A cookie’s expiry is not a promise that related server records are deleted at the same time. EGC website[9]; Google Analytics cookie information[10]

Loading a Google map or a Google-hosted resource connects your browser to Google, whose handling is governed by its privacy policy and relevant settings. Website hosting and technical services also process the requests needed to deliver and protect the site; these requests can contain technical information such as an IP address, requested page and browser details. We do not represent website traffic or logs as necessarily anonymous. Google Privacy Policy[11]

You can use browser controls to block or delete cookies and restrict third-party content. Some features, including remembered language or embedded content, may then work differently or not be available. Google also provides privacy controls and a Google Analytics browser opt-out add-on through its information for users of sites using Google services. Blocking cookies alone does not necessarily stop every analytics transmission or external connection. Google privacy controls[12]; Google Analytics tagging and cookies[13]

Overseas handling

Depending on the authorised service and recipient, information may be handled outside Australia. Our Client Privacy Policy provides further provider and purpose details. This statement is not a waiver of applicable overseas-handling obligations.

Microsoft describes possible Copilot processing in the United States, European Union and other regions. Australian storage-at-rest commitments do not establish Australian-only processing, and this geographic description does not authorise identifiable AI inputs. Microsoft Copilot data handling[14]

Perplexity’s enterprise terms and data-processing agreement do not promise Australian-only processing or zero retention. Different content types and settings can have different retention arrangements. Perplexity enterprise terms[15]; Perplexity DPA[16]; Enterprise retention[17]

QBE’s published privacy policy identifies overseas recipients in China, Denmark, France, Germany, Hong Kong, India, Ireland, New Zealand, the Philippines, Singapore, Thailand, the United Kingdom, the United States and Vietnam, including a Philippines shared-service centre. This does not mean every EGC record goes to every country. QBE’s policy describes analytics and machine-learning uses; enterprise AI suppliers’ no-training commitments do not extend to insurance recipients. QBE Privacy Policy[18]

Google operates globally and states that information may be processed on servers outside the country where you live. We do not promise Australian-only handling of information received through Google website features. Google’s retention arrangements vary with the information, purpose and settings. Google Privacy Policy[19]

A new or materially different disclosure of client affairs requires assessment, an explanation and any required permission before we rely on it. No unidentified software, offshore contractor, external identity or biometric provider, or undisclosed client-file backup arrangement is authorised merely by this statement.

Identity checks and security

We verify identity and representative authority using appropriate methods. We generally retain a verification record rather than copies of identity documents. Any external identity or biometric route is explained before use, with a suitable alternative where available and any required permission; it is not authorised by general IT-support permission.

We take reasonable protective measures appropriate to our information and systems. No system can be promised to be invulnerable, and this statement does not certify particular security configurations. Please use our approved secure transfer method and promptly report suspected compromise.

Retention, access and correction

We retain information for applicable legal and professional periods and genuine business or preservation needs, then securely delete or de-identify it when lawful. Longer retention may be needed for assets, losses, disputes or other continuing matters. Different records and backups have different retention triggers and cycles.

Removal from active systems does not guarantee immediate erasure from every backup. A deletion request cannot override required retention or preservation duties. Clients should retain their own records and copies.

You may contact Ken Huang to request access to or correction of personal information. We verify identity proportionately, consider applicable rights and lawful limits, explain our response and disclose any justified charge before incurring it.

Incidents and privacy concerns

Our obligations depend on the information and activities involved. We comply with applicable tax-practitioner confidentiality and TFN-related requirements. Small-business status does not make all data-breach notifications voluntary; mandatory obligations can apply to TFN information even where broader Australian Privacy Principles coverage does not apply. OAIC Notifiable Data Breaches guidance[20]

We assess suspected incidents promptly, contain them where practicable and make required notifications under the applicable legal thresholds. Where the Notifiable Data Breaches assessment duty applies, we take all reasonable steps to complete a reasonable and expeditious assessment within 30 calendar days after becoming aware of the grounds for suspicion. Required notifications are made as soon as practicable; the assessment period is not permission to delay necessary action. OAIC assessment and notification guidance[21]

Please contact us with a privacy concern. We aim to acknowledge it within five business days and provide a substantive response within thirty days or explain a delay. These are service targets, not replacements for shorter legal requirements. You may contact the OAIC about matters within its jurisdiction or the TPB about tax-practitioner conduct without waiving other rights.

Changing permissions and this statement

You may change or withdraw a permission by contacting us. We will not rely on withdrawn permission for future disclosure. Withdrawal does not undo completed lawful disclosure, override required retention, preservation or legal duties, or itself cancel accrued fees or an existing guarantee.

If a permission is necessary for a proposed service method, we discuss an appropriate alternative and any agreed scope, timing or cost effect rather than assume permission. Permissions continuing after an engagement ends remain limited to their valid purposes, applicable law and any withdrawal.

We will date updates and communicate material changes affecting client information or permissions. Updating this website does not itself create consent for a new disclosure.

Contact us

Privacy contact: Ken Huang, Evergrowth Consulting.

Email: info@evergrowthconsulting.com.au
Telephone: +61 3 9887 0777
Business address: Unit 22, 573 Burwood Highway, Knoxfield VIC 3180
Postal address: PO Box 4281, Knox City Centre VIC 3152

Please do not include TFNs, passwords or unnecessary sensitive records in a privacy enquiry. We can arrange an appropriate secure method if further information is needed.

[1]TPB confidentiality guidance: https://www.tpb.gov.au/confidentiality-client-information

[2]Perplexity enterprise terms: https://www.perplexity.ai/hub/legal/enterprise-terms-of-service

[3]Microsoft enterprise data protection: https://learn.microsoft.com/en-us/microsoft-365/copilot/enterprise-data-protection

[4]EGC contact page: https://evergrowthconsulting.com.au/en/contact-us/

[5]EGC website: https://evergrowthconsulting.com.au/en/privacy-statement/

[6]EGC contact page: https://evergrowthconsulting.com.au/en/contact-us/

[7]Google Analytics data collection: https://support.google.com/analytics/answer/11593727?hl=en

[8]Google’s use of information from partner sites: https://policies.google.com/technologies/partner-sites

[9]EGC website: https://evergrowthconsulting.com.au/en/privacy-statement/

[10]Google Analytics cookie information: https://support.google.com/analytics/answer/11397207?hl=en

[11]Google Privacy Policy: https://policies.google.com/privacy

[12]Google privacy controls: https://policies.google.com/technologies/partner-sites