This Privacy Policy (Policy) outlines the personal data handling practices of the Mainmark group of companies (collectively – Mainmark).

For the purposes of this Policy, a reference to “our”, “us” or “we” is a reference to Mainmark; and a reference to “you” is a reference to a prospective, past or current customer or client of Mainmark or other person from whom we collect and handle personal data.  The specific legal obligations of Mainmark when collecting and handling your personal data is governed by the New Zealand Privacy Act 2020 (Privacy Act).  We will update our Policy when data handling practices change.  Updates will be published on our website.

Website data:

• As a user of our website, we may collect customer data as above, however we also may collect data such as your browser session and geolocation data, device and network information, statistics on page views and sessions, acquisition sources, search queries, browsing behaviour, information about your access and use of the website, including through the use of cookies, your communications with our website, the type of browser you are using, the type of operating system you are using, and the domain name of your internet service provider.

This data is anonymous and is not linked to the name or identity of a user.

We may collect the above types of personal data directly from you or from third parties.

We collect the following types of personal data:

Customer data:

• As a prospective, past or current customer or client, we may collect data such as your name, email address, country of residence, phone number, signature, company or business name, billing address, credit or other bank card details, including name, card number, expiry date and CVV/CVC, and details about your problem/enquiry, including the address of the property that requires our services, and the nature of the problem.

Supplier data:

• As a supplier, we may collect data such as your name, contact information, signature and your title/role at the business whose services we are using.

Employment data:

• As a prospective, past or current employee, we may collect data such as your name, contact information, signature, employment and other vocational experience, academic history, tax file numbers and bank account details.
• As a prospective, past or current employee, we may also collect health information, including information collected during general health assessments, project specific medical assessments, and drug and alcohol screenings.
• As a referee for a prospective employee, we may collect data such as your name, contact information and your title/role at the business or educational institution in which you work/ed.

Details of your racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices and/or criminal record may be revealed to us throughout the recruitment process or during your employment with us.

• to communicate with you, as a prospective, past or current client, supplier, employee, or referee of a prospective employee;
• for internal business administrative purposes;
• for you to access and use our website;
• for analytical, market research or business development purposes, including to improve our website and your experience;
• for marketing and advertising purposes, including to send you promotional information, but only where you have opted to receive such promotional information;
• to comply with our legal obligations and resolve any disputes we may have; to consider an employment application

Your personal data is stored securely and indefinitely on our servers in Australia and in a database on an application called Salesforce, whose privacy policy can be accessed here.   We may also store some personal data physically in secured filing cabinets in our offices, for example, employment data.  We have implemented technical, administrative and physical security measures that are designed to protect personal information from unauthorised access, disclosure, use and modification.  However, you acknowledge that despite the measures we have implemented, the transmission of any data over the internet is not without risk.

We may use cookies on our website from time to time.  Cookies are text files placed in your computer’s browser to store your preferences.  Cookies, by themselves, do not tell us any personally identifiable information.  However, they do allow third parties, such as Google and Facebook, to cause our advertisements to appear on your social and other media feeds as part of our retargeting campaigns.  If and when you choose to provide us with personal data, this information may be linked to the data stored in the cookie.

We may use Google Analytics to collect and process data.  To find out how Google uses data when you use third party websites or applications, see here.

We may disclose your personal data to:

• anyone, with your consent;
• our employees, contractors and/or related entities;
• anyone we believe, in good faith, requires your personal data in complying with or as a result of a law, regulation, legal process, court order or subpoena;
• third party service providers that are providing a service to you which is ancillary or of benefit to the service that we provide to you, for example, IT service providers, data storage, web-hosting and server providers, data analytics providers, debt collectors, marketing or advertising providers, professional advisors and payment systems operators;
• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred;
• credit reporting agencies, courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you; and
• courts, tribunals, regulatory authorities and law enforcements officers, in connection with any actual or prospective legal proceedings, investigations or in order to establish, exercise or defend our legal rights.

  We request that all third parties handle your personal data in accordance with this Policy and in compliance with the principles set out in the Privacy Act .

Your personal data will:

• • be processed lawfully, fairly and in a transparent manner by us;
  • only be collected and used for the specific purposes outlined above;
  • be processed in a way that is adequate, relevant and limited to what is necessary in relation to the purpose for which the personal data was collected;
  • be kept up to date, where possible and within our control to do so;
  • be kept in a form which permits us to identify you, but only for so long as necessary for the purposes for which the personal data was collected; and
  • be processed securely and in a way that protects against unauthorised or unlawful processing and against accidental loss, destruction or damage;
• We have internal policies in place which set out where and how we collect personal data, how it is stored and what we do with it;
• We will comply with notification requirements set out in the Privacy Act should your personal data be the subject of a data breach; and
• Where valid, we will comply with your requests to access and correct personal data we hold about you.

Choice and consent:

You have the right to refrain from providing your personal data to us, however, if you do, it may affect your ability to use our website, products and services, and to communicate with us.  By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal data in accordance with this Policy.  If you are under 18 years of age, you must have, and you warrant to the extent permitted by law to us that you have, your parent or legal guardian’s permission to access and use our website and they (your parent or guardian) have consented to you providing us with your personal data. If you are a third party providing personal data about somebody else, you represent and warrant that you have such person’s consent to provide the personal data to us.

Access:

You have the right to obtain confirmation that we collect, hold and use your personal data, and access to your personal data that we hold.

Rectification:

You have the right to request to have inaccurate personal data rectified and incomplete personal data completed, where relevant.

Objection:

You have the right to object to our use of your personal data.

Complaints:

If you believe we are in breach of the Privacy Act  and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach.  We will promptly investigate your complaint and respond to you in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint.  You also have the right to contact the Office of the New Zealand Privacy Commissioner if you wish to make a complaint.

You can contact us by sending an email or letter to our Privacy and Data Protection Officer:

Email: privacyofficer@mainmark.com

Post: PO Box 191 Northbridge NSW 1560, Sydney, Australia