How we handle your personal information.

What we collect.

We collect personal information that you give us directly, most commonly when you request a quote, contact us by phone or email, or engage us for certification services. Depending on how you deal with us, that information may include:

• Your name and position
• Your email address and phone number
• Your business name and details about what the business does, its staff numbers and its sites
• The standards you are interested in and your certification history, including any transfer from another certification body
• Records of our correspondence with you

When you visit our website, our hosting infrastructure may record technical information that your browser sends, such as your IP address, the pages you visit and the time of your visit. We do not collect sensitive information as defined in the Privacy Act unless you choose to provide it and it is relevant to the services we deliver.

How we use it.

We collect, hold and use personal information so that we can:

• Respond to your enquiries and prepare quotes
• Plan, schedule and deliver audits and certification services
• Manage our engagement with you, including invoicing and record keeping
• Maintain the audit and certification records that accreditation requirements oblige us to keep
• Meet our legal and regulatory obligations

We do not sell personal information, and we do not use it for marketing unrelated to our services.

When we disclose it.

We disclose personal information where it is necessary to deliver our services or where the law requires it. That includes:

• Equal Assurance, the independent conformity assessment body that makes certification decisions and issues certificates arising from our audits
• JAS-ANZ, whose public register lists certified organisations so that certificates can be verified
• Service providers who support our business, such as IT, hosting and professional advisers, under obligations of confidentiality
• Government agencies, regulators or courts where disclosure is required by law

Where our service providers hold information on our behalf, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

How we hold and protect it.

We hold personal information in electronic systems protected by access controls, and in hard copy where our processes require it. We take reasonable steps to protect the information we hold from misuse, interference, loss, unauthorised access, modification and disclosure, and to destroy or de-identify information we no longer need. Accreditation and legal requirements oblige us to retain audit and certification records for defined periods.

Access and correction.

You can ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Email hello@certifyhub.au or write to Certify Hub, 6/76 Doggett St, Newstead QLD 4006. We will respond within a reasonable period. If we refuse access or correction, we will give you our reasons in writing.

Complaints.

If you believe we have handled your personal information in breach of the Privacy Act or the Australian Privacy Principles, contact us first at hello@certifyhub.au and we will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.

Changes to this policy.

We update this policy from time to time. The current version is always published on this page with its last updated date. Continued use of our website or services after an update means the current version applies.

Contact.

Certify Hub, 6/76 Doggett St, Newstead QLD 4006. Phone 1300 908 802. Email hello@certifyhub.au.