How do I set a different charge-out rate for one staff member, and can I stop them seeing other people's time logs?

Charge-out rates are set per user, not per role. To give one staff member a different rate, either create a dedicated user with that rate or override the rate in Advanced mode.

Restricting a user so they can't see other people's time logs isn't currently possible - there's an open feature request for this.