Privacy Policy

Environmental Group Australia Pty Ltd (ABN 83 671 599 143) (EGA, we, us, our) complies with Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act). This Privacy Policy sets out EGA’s privacy obligations to you and explains the types of personal information that we may collect, hold, use and with whom the information is shared. It also sets out how you can contact us if you have any queries or concerns about this information.

EGA collects personal information from our clients, customers of our clients, our suppliers, employees, contractors and job applicants. The types of personal information we may collect include contact information (such as your name, date of birth, address, email address, telephone number, emergency contact information), details and copies of your identity documentation, licences (including Driver and industry licencing), banking details, medical examination records.

All personal information collected by EGA is solely used for our business functions and activities. It may be used for:

EGA will take reasonable steps to ensure personal information that it keeps is accurate, up-to-date and relevant to the purposes for which it is to be used.

EGA must only use or disclose your personal information to the extent necessary to comply with laws, perform EGA’s functions or exercise its rights.

Personal information may be collected by EGA by way of provision of personal information by individuals via the phone, online contact forms and employment applications, user-generated content; market research, emails, EGA websites and related apps, during face-to-face meetings and interviews, or provided to Us in any other way. Where necessary and with your consent, we supplement the information we receive from you with information from third party sources.

EGA takes all reasonable steps to protect your personal information from loss, misuse or unauthorised disclosure, modification or destruction.  EGA’s code of conduct and information security policies prohibit employees from looking at, recording or disclosing personal information about you except in course of performance of their duties. Security measures include:

limiting access to the information we collect about you to “a need-to-know” basis;

requiring any third-party providers to have adequate security measures; and

limiting physical access to our premises and putting in place other physical, electronic, and procedural safeguards in line with industry standards.

Under the APPs, you may be able to obtain a copy of the personal information that we hold about you. The APPs provide some exceptions to your rights in this regard. To make a request to access this information, please contact us in writing to one of the contact addresses below. We will require you to verify your identity and specify what information you require. We may charge a fee to cover the cost of verifying the application and locating, retrieving, reviewing and copying any material requested.

We endeavor to ensure that the personal information we hold about you is accurate, complete and up-to-date. Please contact EGA at admin@egau.com.au if you believe that the information we hold about you requires correction or is out-of-date.

We will endeavor to respond to written requests within 30 business days after a request is received by us.

EGA will only engage in direct marketing practices in accordance with the law. We will only use your Personal Information for direct marketing if we have collected such information directly from you, and if it material of a type which you would reasonably expect to receive from us. We do not use sensitive personal information for direct marketing.

Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link. You also may contact admin@egau.com.au at any time to request that you no longer receive any marketing information from us.

As part of providing our services, EGA may disclose your personal information to our related bodies corporate, third party suppliers and contractors of services, banks or other financial institutions, customers, our professional advisers and our external service providers that provide services to us. In these cases, EGA expects these organisations to protect the privacy of that personal information.

We may also disclose your personal information if it is required or authorised by law, where disclosure is necessary to prevent a threat to life, health or safety, Work, Health and Safety Investigations or where we are otherwise permitted by the PIPP Act, Privacy Act, other relevant legislation or authorised by you.

EGA takes all reasonable steps to ensure that it deals with reputable entities for the purposes of securely storing personal information.

EGA only retains personal information for periods required by law and/or our business operations. Otherwise EGA will take reasonable steps to securely destroy or permanently de-identify the personal information.

Accessing EGA’s websites will result in some information being logged including the time of access, IP address and the pages that have been viewed or accessed.

Our website may contain links to third party websites. We do not operate these websites and therefore are not responsible for the collection or handling of personal information by the operators of these websites.

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device’s internal memory.

Our website does not use these “cookies” explicitly. However, the website may use third party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

EGA complies with the requirements of the Notifiable Data Breach scheme. A notifiable data breach happens when there is unauthorised access to, unauthorised disclosure of, or loss of, personal information which is likely to result in serious harm to the individual to whom the information relates. 

In addition to the Privacy Act, individuals located in the European Union (EU) may also have rights under EU based rules known as the General Data Protection Regulation (GDPR). The key obligations under the GDPR include Notice, Individual Rights, and Retention. Each user has a right of confirmation (to confirm whether or not Personal Information concerning the user is being processed), access (the right to request what Personal Information is stored about the user and obtain a copy of that said information), erasure (the right to request that any Personal Information concerning the user be erased without delay when no longer required, or when the user withdraws consent), rectification (the right to rectify any inaccurate information concerning the user), portability (the right to receive the Personal Information concerning the user, which was provided to us, in a readable format), object (the right to object the processing of the Personal Information concerning the user unless we can demonstrate compelling legitimate grounds for the processing which overrides the interests, rights, and freedoms of the user/data subject, or for the establishment, exercise or defense of legal claims), restriction of processing (the right to restrict processing where the accuracy of the Personal Information is contested by the user/data subject for a period enabling the controller to verify the accuracy of the Personal Information; or the processing is unlawful and the user/data subject opposes the erasure of the Personal Information and requests instead the restriction of their use instead; or we, the controller, no longer need the Personal Information for the purposes of the processing, but they are required by the user/data subject for the establishment, exercise or defense of legal claims), as set out in Articles of the General Data Protection Regulations of the EU.

If you believe that EGA has breached one or more of its privacy obligations, your complaint (including a summary of the privacy concern or alleged breach and copies of any relevant documentation) shall be addressed to one of the contacts provided in EGA Contact Details section below. EGA will investigate the complaint and will endeavor to respond to you within 30 business days. EGA will take immediate steps to redress proven privacy concerns or breaches.

If you do not receive a response from EGA after 30 days or if you are not satisfied with the response, you can then lodge a complaint with the Office of the Australian Commissioner (OAIC): telephone: 1300 363 992 | at www.oaic.gov.au).

This policy can be viewed at our website at https://egau.com.au/. Alternatively, you can request a copy of this policy using our contact details below.

We may periodically update this policy without prior notice to you to reflect changes in our information practices or relevant laws. We will post the update policy on this website and indicate at the top of this policy when it was last updated.

Postal Address: 63E Fitzroy Street, Marrickville, NSW 2204

T: +61 1300 884 164

E: admin@egau.com.au