BidCrete is committed to providing quality services to you and this Policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.
Definitions
“Australian Privacy Principles” (APPs) means the Australian Privacy Principles contained in Schedule 1 of the Privacy Act 1988 (Cth), which govern the collection, use, disclosure, storage, security and management of Personal Information by organisations.
“BidCrete” means “we”, “our” and “us” and refers to BidCrete Pty Limited (ABN 11 634 154 064).
“Cookies” means small text files or similar technologies placed on a user’s device by a website to enable website functionality, remember user preferences, improve website performance and collect analytical information about website usage.
“Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether it is recorded in a material form or not.
“Privacy Act” means the Privacy Act 1988 (Cth), as amended from time to time, including the Australian Privacy Principles and the Notifiable Data Breaches Scheme established under that Act.
“Sensitive Information” means Personal Information that includes information or an opinion about an individual’s,
racial or ethnic origin,
political opinions or political association,
religious or philosophical beliefs,
trade union or professional association membership,
criminal record,
health information,
biometric information or biometric templates, or
sexual orientation or practices,
as defined by the Privacy Act 1988 (Cth).
Adoption of the Australian Privacy Principles (APPs)
BidCrete has adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.
A copy of the Australian Privacy Principles is available from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
What is Personal Information and why do we collect it?
Personal Information has the meaning given in clause 1.4. Examples of Personal Information we collect include:
names,
addresses,
email addresses,
phone and facsimile numbers,
company names,
ABNs,
payment details including credit card information,
Primary PurposeWe collect your Personal Information for the primary purpose of providing our services to you, providing information to our clients and marketing. We may send you marketing communications by email, SMS or other electronic means, where permitted by law. You may opt-out of receiving marketing communications at any time by using the unsubscribe facility or by contacting BidCrete.
Secondary PurposeWe may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure.You may unsubscribe from our mailing list at any time by contacting us in writing.When we collect Personal Information, we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it. Personal Information is collected for the following:
to provide services,
administer accounts,
verify identity,
comply with legal obligations,
prevent fraud, and
improve products.
BidCrete may use reputable third-party cloud service providers, including providers of customer relationship management, accounting, email hosting, document management, data storage and website hosting services. Some of these providers may store or process Personal Information outside Australia. These providers may be located in countries including Australia and other jurisdictions in which BidCrete or its service providers operate. Where this occurs, BidCrete takes reasonable steps to ensure those providers handle Personal Information in accordance with Australian privacy obligations.
Storage and Security of Personal Information
StorageBidCrete stores Personal Information electronically using secure cloud-based business systems and may also retain information in paper records where required for business or legal purposes.BidCrete may use reputable third-party service providers for customer relationship management, accounting, email hosting, document management, data storage, website hosting and other business functions. Some of these providers may store or process Personal Information outside Australia, as described in clause 4.3.
SecurityBidCrete takes reasonable physical, electronic and administrative steps to protect Personal Information from misuse, interference, loss and unauthorised access, modification or disclosure.These measures may include:
access controls restricting access to Personal Information to authorised personnel who require it to perform their roles;
password protection and multi-factor authentication where appropriate;
encryption where appropriate;
firewalls, antivirus and other network and endpoint security measures;
secure cloud storage and data backup and recovery measures;
email and web security controls;
physical security controls for offices and information systems; and
procedures for identifying, responding to and managing suspected security incidents and data breaches.
BidCrete regularly reviews its information security practices and may update its security measures as appropriate having regard to the nature and sensitivity of the Personal Information it holds and the risks associated with its use and storage.
Accuracy and QualityBidCrete takes reasonable steps to ensure that Personal Information it holds is accurate, complete and up to date.If you become aware that Personal Information held by BidCrete is inaccurate, incomplete or out of date, please contact us so that we can review and, where appropriate, correct the information.
Retention and DestructionBidCrete retains Personal Information only for as long as reasonably necessary to fulfil the purposes for which it was collected or to comply with legal, regulatory or contractual obligations.When Personal Information is no longer required, BidCrete takes reasonable steps to securely destroy or permanently de-identify it, unless retention is required or permitted by law.Certain business records may be retained for a minimum of seven years, or longer where required by law.
Sensitive Information
Sensitive Information has the meaning given in clause 1.6.
Sensitive information will be used by us for:
the primary purpose for which it was obtained,
a secondary purpose that is directly related to the primary purpose,
with your consent, or
where required or authorised by law.
Third Parties
Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.
Our website may contain links to third-party websites. BidCrete is not responsible for the privacy practices or content of those websites and encourages users to review their privacy policies.
Disclosure of Personal Information
Your Personal Information may be disclosed in a few circumstances including:
suppliers and contractors,
payment providers,
cloud service providers,
CRM providers,
accounting and financial service providers,
IT and cybersecurity providers,
professional advisers,
insurers,
delivery and logistics providers, and
government agencies and regulators where required,
where required or authorised by law.
Social Media
If you engage with any of our social media accounts, we will only collect information provided by you. This includes engagement by way of posts, comments, direct messages or poll entries. Most of such activities on social media are accessible to anyone using the same channel. We do not have control over these settings. We recommend that you check the privacy policies of the relevant social media channels to understand what information you are making public when you engage with us through those channels.
Website
If you visit our website, we automatically collect data that may include some personal information. We use Google Analytics and other measurement software to help analyse how the site is used based on the data we collect.
Cookies
Our website may use cookies and similar technologies to improve your browsing experience and help us understand how our website is used.
Cookies are small text files stored on your device when you visit our website. They enable certain website functions, remember your preferences and assist us in analysing website traffic and performance.
We may use cookies to:
operate and maintain our website,
remember your preferences and settings,
improve the functionality and performance of our website,
analyse website traffic and visitor behaviour through analytics services, and
help protect the security of our website.
Most web browsers automatically accept cookies; however, you can modify your browser settings to refuse or delete cookies. Please note that disabling cookies may affect the functionality and performance of certain parts of our website.
Some third-party service providers, such as website analytics providers, may also use cookies in accordance with their own privacy policies. BidCrete does not control the use of cookies by these third parties.
Data Breaches
If BidCrete becomes aware of an eligible data breach involving Personal Information, we will assess the incident in accordance with the Privacy Act and, where required, notify affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches Scheme.
Access to your Personal Information
You may access the Personal Information we hold about you to update and/or correct it, subject to certain exceptions. If you wish to access your Personal Information, please contact us via email support@bidcrete.com.au or PO Box 186, Carina Qld 4152. BidCrete will not charge any fee for your access request but may charge an administrative fee for providing a copy of your Personal Information.
To protect your Personal Information, we may require identification from you before releasing the requested information.
Correction of Personal Information
It is important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up to date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.
Policy Updates
This Policy may change from time to time and is available on our website.
Complaints and Enquiries
If you have any queries or complaints about our Privacy Policy, please contact us at support@bidcrete.com.au. We will acknowledge receipt of your complaint as soon as practicable and endeavour to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.
