Ecoblue International Pty Ltd ABN 88 983 129 129 is committed to protecting the privacy of its employees, customers, suppliers, and other stakeholders. This Privacy Policy outlines how we manage, collect, and safeguard the personal information entrusted to us, in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
1. Collection of Personal Information
Ecoblue collects personal information only to the extent that it is necessary for our functions or activities. The types of personal information we may collect include, but are not limited to:
Customers, clients, and suppliers;
Job applicants, employees, and contractors;
Other individuals who come into contact with Ecoblue.
We may collect this information directly through forms, face-to-face interactions, interviews, telephone conversations, or from third-party sources such as references.
2. Purpose of Collection
We collect personal information for the following purposes:
- To provide products and services requested by individuals;
- To manage and improve our products, services, and customer relationships;
- To communicate with individuals regarding products, services, and updates;
- For market research or service improvement activities.
3. Method of Collection
Personal information is primarily collected directly from individuals. Where it is impractical to collect directly, we may collect information from third parties such as referees, government agencies, or publicly available sources.
4. Use and Disclosure of Personal Information
Ecoblue will use personal information for the primary purpose for which it was collected, and may disclose this information to:
- Ecoblue entities;
- Service providers and contractors engaged to assist in the operation of our business;
- Insurers, regulatory authorities, and legal entities, where required by law;
- Third parties authorised by individuals.
In some cases, if you choose not to provide certain personal information, we may be unable to deliver our products or services effectively.
5. Security of Personal Information
We are committed to safeguarding your personal information. Ecoblue will take reasonable steps to prevent misuse, loss, unauthorized access, or disclosure of personal information.
When personal information is no longer required, it will be securely destroyed or de-identified.
6. Access and Correction of Personal Information
Ecoblue aims to ensure that personal information is accurate, up-to-date, and complete. You may request access to the personal information we hold about you. If you believe the information is inaccurate or incomplete, we will take reasonable steps to correct it.
Requests for access to personal information should be submitted in writing. In some cases, we may charge a reasonable fee for providing access.
7. Data Breach Response
Ecoblue takes data protection seriously. In the event of a data breach that may result in serious harm to individuals, we will follow our Data Breach Response Plan to assess the breach, take corrective actions, and notify affected individuals within 30 days, as required by law.
If we determine that a breach is notifiable, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable.
8. Privacy Complaints
If you believe that Ecoblue has breached this Privacy Policy or the Privacy Act, you may lodge a complaint by contacting our Marketing and Communications Manager. We will investigate your complaint and respond in writing. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
9. Updates to this Privacy Policy
Ecoblue’s Privacy Policy will be reviewed periodically to reflect changes in the law, technology, or our operations. Please check this page regularly to stay informed of any updates.
10. Contacting Ecoblue
For more information or to raise privacy-related concerns, you can contact us via:
Email: customerservice@ecoblue.com.au
Phone: 1300 272 444
Address: 78 Mordaunt Circuit, Canning Vale WA 6155
ANNEXURE 1 – Notifiable Data Breaches Response Plan
What is a Notifiable Data Breach?
A Notifiable Data Breach is one that is likely to result in serious harm to any individual whose information is compromised. “Serious harm” includes physical, psychological, emotional, financial, or reputational harm.
Steps for Managing a Data Breach:
