Privacy Policy

Duo Group

Last Updated: 15 April 2026

1. Introduction

This Privacy Policy sets out how the following entities (collectively referred to as “Duo Group”, “we”, “us” or “our”) collect, hold, use, disclose and otherwise handle personal information:

Duo Tax Quantity Surveyors Pty Ltd (ABN 77 606 673 107)
Duo Tax Property Valuers Pty Ltd (ABN 98 640 169 115)
Duo SMSF Valuers Pty Ltd (ABN 87 687 528 632)
Duo Tax Insurance Pty Ltd (ABN 42 665 523 964)
DuoQS Pty Ltd (ABN 16 644 740 867)
Depreciation Shop Pty Ltd (ABN 54 679 086 232)

This policy applies to all services provided by the Duo Group, including but not limited to tax depreciation services, quantity surveying services, construction cost estimating, property valuation services, SMSF property valuations, insurance services, and the Duo Inspector application (“Application”).

We are committed to protecting your privacy and complying with the Australian Privacy Principles (“APPs”) set out in the Privacy Act 1988 (Cth) (“Privacy Act”), as well as any applicable state or territory legislation.

By engaging our services or using the Application, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this policy periodically, as it may be updated from time to time to reflect changes in our business practices, legal requirements or regulatory expectations.

This policy is available on our website. You may also request a copy of this Privacy Policy in an alternative format (such as large print, audio or hard copy) by contacting us using the details set out in this policy.

2. Interpretation and Definitions

2.1 Interpretation

Words with initial capital letters have meanings as defined below. These definitions apply regardless of whether the terms appear in singular or plural form.

2.2 Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for you to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party. “Control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
Application refers to Duo Inspector, the software program provided by the Company.
Company (referred to as “the Company,” “Duo Group,” “We,” “Us,” or “Our” in this Policy) refers collectively to Duo Tax Quantity Surveyors Pty Ltd (ABN 77 606 673 107), Duo Tax Property Valuers Pty Ltd (ABN 98 640 169 115), Duo SMSF Valuers Pty Ltd (ABN 87 687 528 632), Duo Tax Insurance Pty Ltd (ABN 42 665 523 964), DuoQS Pty Ltd (ABN 16 644 740 867), and Depreciation Shop Pty Ltd (ABN 54 679 086 232).
Country refers to Australia.
Device means any device that can access the Service, such as a computer, mobile phone or digital tablet.
Government-Related Identifier means an identifier issued by a government agency, including but not limited to Tax File Numbers (TFNs), Australian Business Numbers (ABNs), Medicare numbers and driver’s licence numbers.
Personal Information (also referred to as Personal Data) has the meaning given to it under the Privacy Act 1988 (Cth), being any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether recorded in a material form or not.
Referral Partner means any third party who refers prospective or existing clients to us, including but not limited to real estate agents, property managers, accountants, financial advisers, mortgage brokers and building and pest inspectors.
Sensitive Information has the meaning given to it under the Privacy Act 1988 (Cth), and includes information or opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, biometric information, or biometric templates.
Service refers to the Application and all services provided by the Duo Group.
Service Provider means any natural or legal person who processes data on behalf of the Company for the purposes of providing, maintaining or improving the Service.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
You (also referred to as “your”) means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

3. Anonymity and Pseudonymity

You have the right to deal with us on an anonymous basis, or using a pseudonym, where it is lawful and practicable to do so. For example, you may make general enquiries about our services without identifying yourself.

However, given the nature of our services—including tax depreciation scheduling, quantity surveying, property valuation, construction cost estimating and insurance services—we are generally unable to provide our core services unless you identify yourself. This is because we need to verify property ownership details, comply with taxation law requirements (including Tax File Number obligations), and issue reports and schedules in the name of identified individuals or entities.

Where identification is required, we will inform you at the time and explain why anonymity or a pseudonym is not practicable for the particular service you have requested.

4. Personal Information We Collect

4.1 Information You Provide Directly

When using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to, full name, email address, phone number, postal address, property details (including address, type, construction date and cost), tax file number (where required and lawfully collected) and payment and billing information.

4.2 Sensitive Information

We do not generally collect Sensitive Information as defined under the Privacy Act. If we ever need to collect Sensitive Information (for example, health information in connection with an insurance claim related to a property), we will only do so with your explicit consent and in accordance with the APPs, unless an exception applies (such as where collection is required or authorised by law).

4.3 Usage Data

Usage Data is collected automatically when using the Service, to the extent reasonably necessary for the provision, maintenance and security of the Service, and may include your device’s IP address, browser type and version, pages of the Service you visit, the time and date of your visit, time spent on pages, unique device identifiers and other diagnostic data.

When you access the Service via a mobile device, we may also collect information including the type of mobile device, its unique ID, IP address, mobile operating system, browser type and other diagnostic data.

4.4 Information Collected While Using the Application

With your prior permission, we may collect pictures, photographs and other information from your Device’s camera and photo library while you use our Application. This information is used to provide and improve features of our Service. It may be uploaded to the Company’s or a Service Provider’s servers or stored on your Device. You can enable or disable access to this information through your Device settings at any time.

4.5 Information Collected from Third Parties

We may also collect personal information about you from third parties rather than directly from you. This includes information received from:

Referral Partners who provide us with your contact details, property details, and other relevant information to facilitate the provision of our services to you
Accountants, financial advisers or tax agents acting on your behalf
Government agencies or public registers, where lawfully available
Insurance providers, in connection with property-related insurance claims or services
Other professionals you have engaged in relation to a property or service we provide

Where we collect personal information about you from a third party, we will take reasonable steps to notify you of the collection, the circumstances of the collection, and the purposes for which the information was collected, unless doing so would be unreasonable or impractical. We will also inform you if the collection was required or authorised by law.

5. How We Collect Personal Information

We will only collect personal information by lawful and fair means. Where it is reasonable and practical to do so, we will collect personal information directly from you. This may occur when you:

Register for an Account or use our Service
Submit an enquiry or request through our website or Application
Communicate with us by email, telephone or in person
Engage us to provide services
Complete forms, surveys or questionnaires

Where personal information is collected from a third party (such as a Referral Partner), we will take reasonable steps to ensure that you are made aware of the information collected, the purpose of collection, and any third parties to whom the information may be disclosed.

Where collection of your personal information is required or authorised by or under an Australian law, or a court or tribunal order, we will notify you of this at or before the time of collection (or as soon as practicable afterwards).

6. Unsolicited Personal Information

If we receive personal information that we did not solicit (“unsolicited personal information”), we will, within a reasonable period, determine whether we could have collected the information under the Australian Privacy Principles. If we determine that we could not have collected the information, and the information is not contained in a Commonwealth record, we will destroy or de-identify the information as soon as practicable, provided it is lawful and reasonable to do so.

7. Notification of Collection

At or before the time we collect your personal information (or, if that is not practicable, as soon as practicable after collection), we will take reasonable steps to notify you of:

Our identity and contact details
The facts and circumstances of the collection, including whether it was collected from a third party
Whether the collection is required or authorised by law
The purposes for which we collect the information
The consequences if we do not collect the information
The entities or types of entities to whom we usually disclose the information
That this Privacy Policy contains information about how you may access and seek correction of your personal information, and how to make a complaint
Whether we are likely to disclose the information to overseas recipients, and if practicable, the countries in which they are located

8. Use of Your Personal Information

The Company may use personal information for the following purposes:

To provide and maintain the Service, including monitoring its usage, and to facilitate the provision of services across the Duo Group entities to you
To manage your Account and provide access to functionalities available to registered users
To perform a contract, including the development, compliance and undertaking of a purchase contract for services or products you have requested
To contact you by email, telephone calls, SMS or other forms of electronic communication, such as push notifications, regarding updates or informative communications related to the Service
To provide you with news and general information about similar products or services, unless you have opted out of receiving such communications
To manage your requests and provide customer support
For business transfers, such as mergers, sales or restructuring
For internal purposes such as data analysis, identifying usage trends, evaluating and improving our Service, developing new products and service offerings, and assessing marketing effectiveness
To comply with our legal and regulatory obligations

9. Quality of Personal Information

We take reasonable steps to ensure that the personal information we collect, use and disclose is accurate, up-to-date, complete and relevant, having regard to the purpose of use or disclosure.

We encourage you to contact us to update your personal information if it changes or if you believe the information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading.

10. Sharing and Disclosure of Your Personal Information

We may share your personal information in the following circumstances:

With Service Providers to assist in analysing and monitoring usage, providing the Service, or contacting you
In connection with business transfers, such as mergers, acquisitions or asset sales
With Affiliates, who are required to handle your personal information in accordance with the Australian Privacy Principles
With Referral Partners, where the sharing relates to the provision of our services or the ongoing management of the referral relationship
With business partners, where we have your express consent, to offer you relevant products or promotions
With other users, where you voluntarily share information in public areas of the Service
With government agencies, regulatory bodies, or as otherwise required or authorised by law

We will not use or disclose your personal information for a purpose other than the primary purpose of collection unless: (a) you have consented to the secondary use or disclosure; (b) the secondary purpose is related to the primary purpose (or, in the case of Sensitive Information, directly related) and you would reasonably expect us to use or disclose the information for that secondary purpose; or (c) the use or disclosure is otherwise required or authorised by or under an Australian law, a court or tribunal order, or the APPs.

11. Government-Related Identifiers

We collect Government-Related Identifiers, including Tax File Numbers (TFNs), only where it is reasonably necessary for us to verify your identity or to comply with our legal obligations, including obligations under the Taxation Administration Act 1953 (Cth) and the Privacy (Tax File Number) Rule 2015.

We will not:

Adopt a Government-Related Identifier (such as a TFN) as our own identifier for you
Use or disclose a Government-Related Identifier unless we are satisfied that the use or disclosure is reasonably necessary to verify your identity for the purposes of our activities, to fulfil our obligations to a government agency, or as otherwise required or authorised by law

TFNs and other Government-Related Identifiers are stored securely in accordance with section 12 of this policy and access is restricted to authorised personnel only.

12. Overseas Disclosure of Personal Information

We may disclose your personal information to recipients located outside Australia. This may occur where our Service Providers, cloud hosting providers or technology partners maintain servers or systems in other countries.

Your personal information may be transferred to, and maintained on, servers or systems located outside of Australia, including in the United States, the European Union, the United Kingdom, the Philippines and other jurisdictions where our Service Providers or their subcontractors operate (e.g., cloud infrastructure services, data processing centres or customer support operations). Data protection laws in these jurisdictions may differ from those in Australia.

Where we disclose personal information to an overseas recipient, we will take reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles in relation to your personal information, unless:

The recipient is subject to a law, or binding scheme, that has the effect of protecting the information in a way that, overall, is at least substantially similar to the way in which the APPs protect the information, and there are mechanisms available to you to enforce that protection; or
We have your informed consent to the overseas disclosure after expressly informing you that APP 8.1 will not apply to the disclosure

We may also disclose personal information to a recipient in a country, or a participant in a binding scheme, that is prescribed by the Privacy Regulations as providing substantially similar protections to the APPs (APP 8.3), without the need for the additional steps described above.

Before any overseas transfer occurs, we will take such steps as are reasonable in the circumstances to ensure that appropriate security measures and contractual protections are in place to safeguard your personal information.

13. Storage and Security of Your Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. In accordance with APP 11.1, we implement appropriate technical and organisational measures.

While we use commercially reasonable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you and the Office of the Australian Information Commissioner as soon as practicable in the event of an eligible data breach, in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act.

14. Retention and Destruction of Your Personal Information

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations. We may retain and use your information as necessary to:

Comply with applicable legal, taxation and regulatory obligations (including record-keeping obligations under the Taxation Administration Act 1953)
Resolve disputes
Enforce our agreements and policies
Conduct internal analytics, benchmarking and research
Protect our legitimate business interests, including the defence of legal claims

Usage Data may be retained for a shorter period, except where it is used to strengthen the security or improve the functionality of our Service, or where we are legally obligated to retain it for longer periods.

When personal information is no longer needed for any purpose for which it may be lawfully used or disclosed, we will take reasonable steps to destroy or de-identify it.

15. Your Rights Regarding Personal Information

15.1 Right of Access

You have the right to request access to the personal information we hold about you. To make an access request, please contact us using the details in section 22. We will respond to your request within a reasonable period (generally within 30 days).

If we refuse to provide access, we will give you a written notice setting out:

The reasons for the refusal (except to the extent that providing reasons would undermine the basis for the refusal)
The mechanisms available to you to make a complaint about the refusal, including escalation to the Office of the Australian Information Commissioner

No fee will be charged for making an access request or for providing access to your personal information.

15.2 Right of Correction

You have the right to request the correction of any personal information we hold about you that is inaccurate, out-of-date, incomplete, irrelevant or misleading. We will take reasonable steps to correct the information within a reasonable period.

If we refuse to correct personal information, we will provide you with a written notice setting out:

The reasons for the refusal
The mechanisms available to you to make a complaint about the refusal, including escalation to the Office of the Australian Information Commissioner

No fee will be charged for requesting a correction.

15.3 Right of Deletion

You have the right to request the deletion of your personal information. You may delete certain information via your Account settings or by contacting us. However, we may need to retain certain information where we have a legal obligation, a legitimate business need, or where the information is used for analytics, benchmarking or research purposes. Where we decline a deletion request, we will provide you with written reasons and information about how to make a complaint.

16. Direct Marketing

We may use your personal information to send you marketing communications about products and services offered by any Duo Group entity, or by our business partners, that we believe may be of interest to you. We will only do so where we have your consent or where otherwise permitted by law.

You may opt out of receiving direct marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email
Contacting us using the details in section 22

We will action your opt-out request within a reasonable period and free of charge. If you opt out, we will stop using your personal information for direct marketing purposes, although we may still contact you in relation to your Account or for service-related communications. Each direct marketing communication we send will also inform you of your right to opt out and your right to request the source of the personal information used for that communication.

You may also request that we provide you with the source of the personal information used for direct marketing purposes. We will action any such request within a reasonable period and free of charge.

17. Automated Decision-Making

As at the date of this policy, the Duo Group does not use automated decision-making systems (including artificial intelligence) that substantially and directly make, or are related to making, decisions that could reasonably be expected to significantly affect individuals’ rights or interests.

If we introduce any such automated decision-making processes in the future, we will update this Privacy Policy to disclose:

The types of personal information used in the automated decision-making process
The types of decisions that are made, or substantially contributed to, by automated means
How individuals may seek a review of, or contest, a decision made by automated means

This section is included to comply with the amendments to APP 1.7 commencing 10 December 2026 under the Privacy and Other Legislation Amendment Act 2024.

18. Children’s Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and become aware that your child has provided us with personal information without your consent, please contact us. If we become aware that we have collected personal information from anyone under 18 without parental or guardian consent, we will take steps to delete that information from our systems.

We are aware of the Children’s Online Privacy Code being developed by the OAIC under the Privacy and Other Legislation Amendment Act 2024, which is expected to be enforceable from 10 December 2026. We will review and update our practices to ensure compliance with the Code once it is registered.

19. Links to Other Websites

Our Service may contain links to external websites not operated by us. If you click a third-party link, you will be directed to that third party’s website. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements or regulatory expectations. We will notify you of any material changes by posting a prominent notice on our Service and, where practicable, by email, prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically. Changes become effective when posted on this page. Your continued use of the Service after a revised Privacy Policy is posted constitutes your acceptance of those changes. The “Last Updated” date at the top of this policy indicates when it was most recently revised.

21. Privacy Complaints

If you believe that we have breached your privacy or have not handled your personal information in accordance with this Privacy Policy or the Australian Privacy Principles, you may lodge a complaint with us.

How to lodge a complaint

Please submit your complaint in writing to:

Email: [email protected]
Post: 34/11-21 Underwood Rd, Homebush NSW 2140
Phone: (02) 8999 1133

How we handle complaints

We will investigate your complaint and respond to you within a reasonable period. If you are not satisfied with our response or how we have handled your complaint, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

22. Contact Us

If you have any questions about this Privacy Policy, wish to make an access or correction request, or would like to obtain a copy of this policy in an alternative format, you can contact us:

Email: [email protected]
Post: 34/11-21 Underwood Rd, Homebush NSW 2140
Phone: (02) 8999 1133