This statement and the policy outlined herein are not intended to and do not create any contractural or other legal rights in or on behlf of any party.

Introduction

This privacy policy explains the privacy practices of Gippsafe Pty Ltd and their owned or related group entities (as applicable) (“GippsSAFE Security, Gippsafe”, “we”, “us”, and “our”).

GippsSAFE Security is committed to protecting any personal data that we have collected from you and respecting your privacy. As we want you to be confident that your personal data is safe and processed in accordance with your consent, we have adopted this Privacy Policy to let you know:

• How we collect, and the purpose for collecting, personal data;
• What we do with personal data;
• The reasons for sharing personal data with other companies;
• How long we’ll keep personal data; and
• The rights and choices you have with regards to your personal

Your provision of your Personal Data to us is voluntary. However, if you elect not to provide certain Personal Data, you may be unable to use the Service and we may be unable to provide the information or services that you have requested.

If you have any questions regarding this privacy policy and/or any other data protection queries relating to GippsSAFE Security please contact admin@gippssafe.com.au.

How we use your information

 This privacy policy applies to information we collect about:

• Visitors to our website
• People who interact with us on social media
• Subscription to our marketing communications
• Contacts who provide details at exhibitions, conferences and other marketing events
• Collection of information via surveys
• Provide services to our clients
• Our client’s customers who use our services
• People that apply for a position at Gippsafe Pty Ltd

Changes to our Privacy Policy

 From time to time, we may update this privacy policy to reflect new or different privacy practices.

We will place a notice online when we make material changes to this privacy policy so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. Please ensure that you read this privacy policy regularly.

You might find external links to third party websites on our application. This privacy policy does not apply to your use of a third party site.

Visitors to our website

 When someone visits www.gippssafe.com. au, we will use third party services (cookies) to track activity, this enables us to understand how we can improve our website to make it more relevant to our visitors.

Completion of forms on our website

 From time to time we collect very basic personal information through forms on our website to better define services offered by us, and to ensure that the advice and guidance is appropriate to your needs. On these forms we typically collect;

• Name
• Contact Number
• Email Address
• Job Role
• Organisation Name
• Country
• Market Sector
• Security Solution Interest

At the time of completing the online requests for personal information you will be informed as to the purpose of data collection.

The data provided in the forms is stored in the GippsSAFE Security CRM, Marketing Automation Tool and the Website Content Management Tool. The data collected will be provided to a third party partner, if the enquiry actually needs to be managed by them.

People that interact with us through social media

 GippsSAFE Security uses social media platforms to engage with the community.

The social media platforms (LinkedIn and Instagram), will provide basic information on the number of followers and level of engagement. No further details are provided, unless a user has identified themselves as an individual (by posting a message), in which time only information that they have shared either via the message or on their public profile will be shared.

If the user is a contact within the marketing automation tool (because they are a customer or have previously contacted GippsSAFE Security), the marketing automation tool will also track that the user has visited our social media pages.

Location Based Services

Certain Services require details of your location (for example, in order to provide you with local weather information). Depending on your browser and mobile device settings, we may receive this information automatically or following a request which you accept. We may share this data with certain third parties in order to provide these location based services. If you elect to disable location based services, you may not be able to use some or all of the features of the relevant Service.

Accuracy

Please provide accurate Personal Data and update it as necessary in the manner specified below. In the absence of any updates, we will assume that the Personal Data submitted is correct.

Security

We recognise the need and take reasonable steps to ensure that Personal Data we have collected remains secure. While we have security measures in place as required by the Contract and at law in order to protect against the loss, misuse, alteration of and unauthorised access to Personal Data under our control, you acknowledge that there remains a risk that Personal Data transmitted over the internet and stored by computer may be intercepted or accessed by an unauthorised third party.

Collection of information via surveys

From time to time GippsSAFE Security will conduct surveys. Contacts are invited to complete the survey either via email, or from the GippsSAFE Security website.

From time to time we will use a third party survey tool. This is solely for the purpose of conducting the survey and analysing results. Your personal data will not be passed to a third party for marketing purposes.

Provide services to our clients

In order to deliver services to our clients, we store a range of details for different contacts within the organisation. Personal details collected typically include;

• Name
• Telephone number
• Email address
• Job Title
• Job Function
• Postal address

In addition, GippsSAFE Security will store copies of correspondence relevant to providing the service, for example support notifications and product maintenance updates.

All data is stored within GippsSAFE Security systems and is not shared with, but may be hosted by third parties, with the exception of when we need to instruct a third party to deliver a physical item such as a piece of hardware or document to a contact. At this time, only required information will be shared including;

• Name
• Company Name
• Postal Address
• Job Title
• Telephone number
• Email address

All third parties used by GippsSAFE Security use the data provided solely for the provision of delivering the service and are bound by the GippsSAFE Security Non-disclosure Agreement.

People that apply for a position at GippsSAFE Security

We will from time to time collate and be in receipt of résumés/curriculum vitaes from prospective employees and recruitment consultants.

The data collected typically includes;

• Name
• Address
• Salary expectations / Reward
• Previous employment details
• Education
• Certifications/Licences
• References

If you are a successful candidate we will also request to collate the following as required by statutory requirements for employment in the region that you will be employed:

• Evidence of Education
• References
• Police Check
• Visa / Passport / Birth Certification – to verify your ‘right to work’ in the country of employment

We retain résumés / curriculum vitaes and contact details for up to 24 months if there is not an immediate opportunity available for you. At this point we will either delete the information or contact you to request consent to further retain your details if we believe that you remain a good fit for the company.

Use of cookies

GippsSAFE Security uses cookies to track activity on www.GippsSAFE.com.au and digital engagement via social media or electronic direct mail. The tracking software is provided by Google which use cookies to track visitor usage. The software will save a cookie to your computer’s hard drive in order to track and monitor your engagement and usage of the website.

Google analytics will not store, save or collect personal information.

Other cookies may be stored to an individual’s computer’s hard drive by external vendors where the website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer.

Right to inform, access, amend or delete

An individual has a right under the relevant data privacy law to contact GippsSAFE Security at any time in writing to admin@gippssafe.com.au to find out what information we have related to them and to request that their personal identifiable information be amended or deleted from our records.

We will oblige the request unless:

• There is a legal exemption applicable
• There is a statutory requirement for us to retain the information for a specific period
• By carrying out the request it will impede the service(s)
• After a record has been deleted, if a contact re-establishes communication with GippsSAFE Security, their contact record will be treated as a new record.

Right of access to Personal Data – you have a right to request that we provide you with a copy of your Personal Data that we hold and you have the right to be informed of;

• The source of your Personal Data;
• The purposes, legal basis and methods of processing;
• The data controller’s identity; and (d) the entities or categories of entities to whom your Personal Data may be transferred

Right to rectify or erase Personal Data – if you wish to delete, deactivate or amend the Personal Data, you have a right to request that we rectify inaccurate Personal Data. We may seek to verify the accuracy of the Personal Data before rectifying it.

Right to complain

An individual has the right to contact GippsSAFE Security at any time in writing to admin@gippssafe.com.au to inform us of any actual or potential issues in the processing of the personal information.

We will endeavour to manage the complaint and resolve any issues. If at this time the individual is dissatisfied with the outcome they may contact admin@gippssafe.com.au

If at this stage the individual is still not satisfied with the outcome, they should contact the Office of the Australian Information Commissioner https://www.oaic.gov.au/individuals/how-do-i-make- a-privacy-complaint, or equivalent body in your country of residence.

Data Retention

The length and time that GippsSAFE Security will retain your data, will depend on how we obtained your data and the purposes that your data is used.

Data captured for marketing purposes

Data captured for marketing (including sales) purposes, includes data captured from;

• Visitors to our website
• People who interact with us on social media
• Subscription to our marketing communications
• Collection of information via surveys

The data will be retained for a minimum period of three years, unless the contact exercises their right to be deleted within that period. This amount of time is required in order to ensure that the individual and GippsSAFE Security representatives are able to maintain communication, retain a record of previous communication and measure effectiveness of marketing campaigns.

If there is no activity within the three year period, and the data is no longer required to deliver a service to the contact, the personal identifiable information will be deleted. Before the data is deleted, the contact will receive an email notifying them that there has been inactivity on their record and that GippsSAFE Security will delete their data, unless they request via clicking on a link, for GippsSAFE Security to retain their data.

After the personal identifiable information has been deleted, if a contact re-establishes communication with GippsSAFE Security, their contact record will be treated as a new record.

Definition of activity

Activity is classified as;

• Visit to GippsSAFE Security website and the completion of any forms
• Completion of a GippsSAFE Security survey
• Contact with GippsSAFE Security Support, Sales or Account Management teams via telephone or email
• Engagement via GippsSAFE Security social media platform

Contact details of our clients

All contact details of our clients will be retained for the duration that the client remains an active customer of GippsSAFE Security and unless the contact exercises their right to be deleted.

Once the client is no longer a customer of GippsSAFE Security, all contact details will be marked as inactive.

After a period of a maximum of three years and if there has been no activity with GippsSAFE Security, the contact details will be deleted. This amount of time is required to enable GippsSAFE Security to retain a record of previous communication and measure effectiveness of marketing campaigns.

Before the data is deleted, the contact will receive an email notifying them that there has been inactivity on their record and that GippsSAFE Security will delete their data, unless they request via clicking on a link, for GippsSAFE Security to retain their data.

After a record has been deleted, if a contact re-establishes communication with GippsSAFE Security, their contact record will be treated as a new record.

Marketing

We will not send you marketing material unless you or your Company has requested it and we will not sell your Personal Data to anyone, or otherwise disclose your Personal Data to any third party except as may be requested from time to time by your Company, as outlined in this privacy policy or as may otherwise be required or permitted by law.