Contact
Tell us what’s complex
For complex tax matters not covered by our general price list, provide the details below and our senior team will assess your requirements. Standard returns can be configured and lodged directly via our Pricing page.
For complex tax matters not covered by our general price list, provide the details below and our senior team will assess your requirements. Standard returns can be configured and lodged directly via our Pricing page.
Last updated: June 2026
Xilestone Pty Ltd (ABN 41 653 808 050) ("Xilestone", "we", "us") provides tax agent services in Australia. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our use of cookies is covered separately in our Cookie Policy.
To provide our services we collect identity details (your full name and date of birth), contact details (email address, phone number, and address), your tax file number (TFN), your ABN or ACN where relevant, and the financial records and supporting documents you provide to us.
When you pay online, your card details are collected directly by our payment processor. Card numbers never pass through, and are never stored on, our systems.
If you provide personal information about another person, for example a spouse or dependants included in your return, you confirm that you are authorised to provide it and that they know where to find this policy.
We collect information directly from you, through this website or by email. As your registered tax agent, and with your authority, we may also collect information from the Australian Taxation Office, for example pre-fill information available through ATO systems.
Where relevant to your return, and with your authority, we may also obtain required summaries and annual statements (for example rental property or investment statements) directly from your property manager, financial institution, or other relevant providers.
If you are transferring to us from a previous accountant or tax agent, we can obtain your historical records and account access directly from them, with your authority.
Because identity is fundamental to preparing and lodging tax returns, we cannot provide our services anonymously or under a pseudonym.
Your information is used solely to prepare, review, and lodge your tax returns and related documents with the ATO, to administer your engagement (including payment, invoicing, and record-keeping), and to communicate with you about your engagement. We do not use your information for marketing without your explicit consent.
TFNs are collected under the authority of taxation law and handled in accordance with the Privacy (Tax File Number) Rule 2015. We are legally required to keep your TFN strictly confidential, and we may only use or disclose it for authorised taxation purposes. Access to TFNs within our systems is restricted to personnel who need it to deliver your engagement.
We will never ask you to send your TFN by email. If we need it, we will direct you to our secure online form.
Your information is transmitted over encrypted connections and held in access-controlled systems available only to authorised personnel.
We retain client records for 5 years in accordance with ATO general record-keeping requirements, or 7 years for companies under the Corporations Act, after which they are securely destroyed or de-identified.
We disclose your information to the ATO in the course of providing tax agent services, and to the service providers that support our operations, being our payment processor (Stripe) and secure cloud infrastructure providers, strictly for those purposes. We do not sell, rent, or trade personal information, and we do not share it with any third party for their marketing. We may also disclose information where required or authorised by law.
Some of our service providers process data outside Australia, for example payment processing in the United States. We take reasonable steps to ensure your information is handled consistently with the APPs wherever it is processed.
If you introduce yourself through our careers page, we collect your name, contact details, and anything you choose to include in your message or CV. We use this information to assess your suitability for current or future roles, engagements, or business opportunities with Xilestone. Please do not include your TFN or other government identifiers in your CV or message. We keep careers submissions on file so we can reach out if a suitable opportunity arises, and you can ask us to remove your details at any time by contacting support@xilestone.com.au.
You may request access to, or correction of, the personal information we hold about you at any time, free of charge, by contacting us at support@xilestone.com.au.
We may update this policy from time to time to reflect changes in our practices or the law. The current version, with its effective date, will always be published on this page.
If you have a concern about how we have handled your personal information, contact us first at the address above and we will respond within 30 days. If you are not satisfied with the outcome, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.