This page explains how your financial data is collected, used, and protected when using Accountability services powered by Basiq. It also outlines your rights under the Consumer Data Right (CDR), and how you can manage your consent at any time.
What Is the Consumer Data Right (CDR)?
The Consumer Data Right (CDR) is an Australian regulation that gives you control over your banking and financial data. It allows you to securely share data with trusted providers (like Accountability) to access better service only with your consent.
Your rights under CDR include:
-
Choosing what data you share and with whom
-
Knowing why the data is needed
-
Revoking your consent at any time
-
Requesting data deletion or de-identification
What Is an Accredited Data Recipient (ADR)?
An ADR is an organization approved under the CDR framework to receive and manage your data safely.
As an ADR (via our integration with Basiq), Accountability is required to:
-
Disclose how your data is used
-
Store and transfer your data securely
-
Protect your privacy at all times
How We Use Your Data
We only request the minimum amount of data necessary to provide our services. Your CDR data may be used for:
-
Personalized recommendations
-
Monitoring fraud and abuse
-
Generating operational insights using de-identified data
-
Sending notifications aligned with your preferences
How to Manage Your Consent
You can view, update, or withdraw your consent at any time using the method below.
By Email:- Contact our support team at support@counta.com
- Include your name and registered email address
- We will process your request within 24 hours
2. By Submitting a Support Ticket
Log in to your Accountability account and go to the Support Tickets section.
Submit a new request titled “Consent Management” and include your details.
Our team will review and action your request promptly.
What Happens to Your Data After Consent Ends?
You have the right to request data deletion at any time. Once your consent is withdrawn or expires:
-
Your data is deleted or de-identified
-
Any data we no longer need is securely destroyed
-
Our third-party processors (like Basiq) are instructed to erase any copies
De-identification Steps Include:
-
Removing personal info from records
-
Stripping timestamps or specific descriptors
-
Aggregating data to prevent identification
We may retain anonymized data for service improvements and fraud detection, but it will not be traceable to you.
Our Retention Policy
We retain your data for as long as your consent remains active and while you are a user of the Accountability platform.
-
If you withdraw consent or your subscription ends, your data is retained for a 180-day safety period to protect against accidental or malicious deletion.
-
After that period, your data may be scheduled for secure deletion or de-identification, unless we are required to retain it for legal, regulatory, or security purposes.
-
In compliance with applicable data protection laws, we may retain anonymized or archived records for a minimum period of seven (7) years from the date of last activity.
Questions?
If you have any questions or need help managing your data, please contact us: