Effective 4 August 2026 · Version 1.0
Privacy Policy
This policy explains how Last Place You Look collects, uses, discloses and protects personal information, and how you can access, correct or complain about the information we hold.
In short. We collect only what we need to provide our services. Our free online assessment tools run entirely in your browser and do not send your answers to us or to anyone else. We do not sell personal information, we do not use tracking or advertising cookies, and we do not run analytics on this website.
1. Who we are
Last Place You Look provides fractional CFO, bookkeeping, governance and advisory services to not-for-profit and small business clients in Australia, and publishes digital tools and templates.
In this policy, "we", "us" and "our" mean Last Place You Look. "You" means any person whose personal information we handle, including website visitors, users of our free tools, clients, prospective clients and suppliers.
2. Our approach
We handle personal information in accordance with the Privacy Act 1988 and the Australian Privacy Principles. We do this as a matter of practice, whether or not we are required to in a given circumstance.
We also handle information belonging to our clients, which frequently includes personal information about their employees, volunteers, donors and service users. Where we handle that information on behalf of a client, we do so under the terms of our engagement with them, and the client remains responsible for how that information is collected and used. Our obligations of confidentiality to clients continue after an engagement ends.
3. What we collect, and why
Visitors to this website
This website does not use tracking cookies, advertising cookies or analytics. We do not build profiles of visitors.
Our hosting provider automatically records standard server information for security and reliability, including IP address, browser type, the page requested and the time of the request. We do not use this information to identify individuals.
People who use our free assessment tools
Our self-assessment tools, including the Governance Gap Checklist, run entirely within your browser. Your answers and your resulting report are never transmitted to us, stored on any server, or shared with anyone.
If you choose to use an option that emails a report to us, that opens a message in your own email program. Nothing is sent unless you send it, and you can edit or discard the message first. If you do send it, we receive whatever you have chosen to include and handle it under this policy.
Clients and prospective clients
To provide our services we collect information such as name, role, organisation, contact details, correspondence and the financial, governance and operational records relevant to the engagement. Where we provide bookkeeping or payroll services, this can extend to employee and contractor details, tax file numbers, superannuation details and bank account details.
We collect this information directly from you wherever possible. Sometimes we receive it from a third party you have authorised, such as your accounting software, your bank, your auditor or a funder.
If you do not provide the information we need, we may be unable to provide the service.
Sensitive information
We do not seek sensitive information, such as health information, and we collect it only where it is necessary for an engagement and you have consented, or where the law requires or permits it.
4. How we use personal information
- To provide, administer and improve our services
- To communicate with you about an engagement or an enquiry
- To prepare reports, returns, acquittals and lodgements
- To meet our legal, taxation, professional and record-keeping obligations
- To manage our own accounts, including invoicing and debt recovery
We use personal information only for the purpose for which it was collected, for a directly related purpose you would reasonably expect, with your consent, or where required or authorised by law.
5. Who we disclose it to
We do not sell personal information, and we do not disclose it for another organisation's marketing purposes.
We may disclose personal information to:
| Recipient | Purpose |
|---|---|
| Software and service providers | Accounting, document storage, email and website hosting used to deliver our services |
| Your own advisers | Your auditor, accountant, lawyer or funder, where you have asked or authorised us to |
| Regulators and authorities | The Australian Taxation Office, the ACNC and others, where required or authorised by law |
| Our professional advisers | Our own accountant, lawyer or insurer, where necessary |
Where we engage a supplier who will handle personal information on our behalf, we require them to protect it to a standard consistent with this policy.
6. Overseas disclosure
Some of the services we use store information outside Australia, most commonly in the United States. This includes our website hosting and parts of our email and document storage.
Before disclosing personal information to an overseas recipient, we take reasonable steps to satisfy ourselves that the recipient handles it consistently with the Australian Privacy Principles.
7. How we protect it
- Access is limited to those who need it
- Multi-factor authentication is enabled on systems holding personal information
- Devices are encrypted and kept current with security updates
- Records are stored in approved systems, not on personal accounts or devices
- Information is securely destroyed or de-identified when it is no longer needed
No system is completely secure. If we suspect a data breach, we assess it promptly. Where a breach is likely to result in serious harm, we notify the affected individuals and the Office of the Australian Information Commissioner as soon as practicable, in accordance with the Notifiable Data Breaches scheme.
8. How long we keep it
We keep client and financial records for at least seven years after an engagement ends, as required by taxation, corporations and charities law. Some records are kept longer where a funding agreement, a professional standard or another law requires it. Information we no longer need for any purpose is destroyed or de-identified.
9. Marketing
If you ask to receive updates from us, we will send them and you may opt out at any time using the link in the message or by contacting us. We do not add people to a mailing list without their consent, and we do not use assessment results to target you.
10. Accessing and correcting your information
You may ask what personal information we hold about you, ask for a copy, and ask us to correct it if it is wrong. Contact us at the address below and we will respond within 30 days.
There is no charge for making a request. We may charge a reasonable cost for supplying the information, and we will tell you before we do. We may refuse access on a ground permitted by the Privacy Act 1988, and if we do we will give you our reasons in writing.
Where the information belongs to one of our clients rather than to us, we will direct your request to them, since they are the appropriate organisation to answer it.
11. Complaints
If you think we have mishandled your personal information, contact us first at inthelastplaceyoulook@gmail.com. We will acknowledge your complaint promptly, investigate it, and tell you the outcome and our reasons.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, or by telephone on 1300 363 992.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the effective date shown at the top. Material changes will be brought to the attention of current clients directly.
13. Contact us
Privacy enquiries, access requests and complaints:
inthelastplaceyoulook@gmail.com