Introduction

How personal data is used

Personal data is used only for purposes that are compatible with the reasons for which it was originally collected, unless the user is informed of a new purpose and, where required, provides consent. Typical uses include responding to enquiries, operating and improving the website, complying with legal duties, and maintaining security. The Company aims to limit processing to what is necessary and proportionate in each context.

• • To respond to enquiries, requests for information, or feedback submitted through contact forms, email, or other communication channels.
• • To provide and manage access to content, tools, and features on the website, including any user specific settings or preferences.
• • To operate, maintain, and improve the website’s performance, usability, security, and content based on aggregated usage patterns.
• • To send administrative information such as policy updates, service notices, or responses to user requests, where appropriate.
• • To conduct internal analysis, quality assurance, and planning activities that support the delivery of services and information.
• • To comply with legal, regulatory, tax, or accounting obligations, and to cooperate with competent authorities where required.
• • To establish, exercise, or defend legal claims, including preventing, investigating, or addressing potential misuse of the website.

User rights

Subject to applicable law, users have a number of rights in relation to their personal data. These rights are not absolute and may be subject to conditions or exemptions, for example where fulfilling a request would adversely affect the rights of others or conflict with legal obligations. The Company will assess each request on a case by case basis and explain the outcome where possible.

• • Users may request confirmation of whether the Company processes their personal data and obtain access to that data.
• • Users have the right to request correction of inaccurate personal data and completion of incomplete data held by the Company.
• • Users may request deletion of personal data where it is no longer needed, has been unlawfully processed, or must be erased to comply with legal obligations, subject to applicable exceptions.
• • Where applicable, users may request to receive certain personal data in a structured, commonly used, and machine readable format, and to transmit that data to another controller.
• • Where processing is based on legitimate interests or involves direct marketing, users may object to such processing, and the Company will assess the request in accordance with applicable law.
• • Users may request restriction of processing in certain situations, for example while the accuracy of data is being verified or where processing is contested.

Data security

The Company takes appropriate steps to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Security measures are designed to be proportionate to the nature of the data and the risks associated with processing. While no system can be completely secure, the Company aims to reduce risks through layered safeguards and regular review of its practices.

International data transfers

Personal data may be stored or processed in countries other than the one in which the user is located. Where data is transferred internationally, including outside Australia or the user’s jurisdiction, the Company aims to implement appropriate safeguards, such as contractual clauses or equivalent mechanisms, to protect the data in accordance with applicable laws. Users acknowledge that data processed in other jurisdictions may be subject to access by foreign authorities under local laws.

• • Data may be transferred to hosting providers or cloud services located in other countries, subject to appropriate contractual and security safeguards.
• • Where analytics or communication tools are provided by organisations based outside Australia, related data may be processed in their respective jurisdictions.
• • In some cases, support or maintenance services may involve remote access to systems from other countries under controlled conditions.
• • International transfers are carried out with regard to applicable legal requirements, including the use of standard contractual clauses or similar mechanisms where appropriate.

Cookies and similar technologies

The website uses cookies and similar technologies to support core functions, remember user preferences, and understand how the website is used. Some cookies are essential for security and basic navigation, while others help measure performance or customise content. Users can manage cookie preferences through browser settings or, where provided, on site controls. Further details about cookie types, purposes, and storage periods are set out in the separate Cookie Policy.

Users who choose to block or delete certain cookies should be aware that this may affect website functionality, including the ability to access secure areas, remember preferences, or complete forms efficiently.