Our privacy policy
Econstruct Consulting Pty Ltd understands that your privacy is important to you. We are committed to protecting the privacy of your personal information as you engage with us and use our services (which includes our software as a service products, any mobile device applications, and our websites) (together referred to as the “Services”). This Privacy Policy describes how we handle your personal information – that is, information about you and that identifies you, or can be reasonably linked to your identity. When we collect this information, we comply with the rules set out in the Privacy Act 1988 (Cth) (“Privacy Act“).
If we have further legal agreements with you, such as our Software as a Service Terms and Conditions, then you should also read those documents in conjunction with this Privacy Policy.
“We”, “our” means Econstruct Consulting Pty Ltd and its affiliates. “You”, “your”, “visitor”, or “user” means an individual whose personal information we handle.
What types of personal information do we collect?
We only collect your personal information where it is reasonably necessary for one or more of our functions or activities, such as where we need it to provide our Services, or to comply with the law. The kinds of personal information that we collect depends on how you interact with us.
Here are some examples.
When you engage with us directly (including at meetings, public forums, via telephone, email, our websites or on social media): The information you provide, such as your name and your contact details (telephone number and/or email address). When you attend one of our events, we may also collect security camera footage of you.
When you enter details into our website or any of our software products: the information you provide, such as the following: your name, address, phone number and email address; employee, provided contacts, representatives and company consultant names, charge out rates, phone numbers, email addresses and roles, administrator names, addresses, phone numbers and email addresses; and project client names and addresses and phone and email addresses, address and email address.
If you authorise third parties to integrate their software data with our software (eg, Xero integration): your relevant integration information required for linking requirements, along with any information we are able to access via that integration.
If you fill out one of our surveys: The information that you provide.
When interacting with the Services: information inputted by you regarding your or your businesses’ and/or your projects’ financial
circumstances, including assets, liabilities, income, expenditure, taxation information, insurance, superannuation and payroll data; the type of operating system and/or other software or firmware used by your computer or Mobile Device; the data you send and receive by using the Services, as well as the type and quality of that data; your GPS location; and the dates on which and the times at which you use the Services, including the duration of such use.When you conduct a transaction with us, our affiliates, or others: the information you provide, such as your name and your contact details (telephone number and/or email address).
When we collect information about you in support of a transaction: The information you provide such as credit card information.
In some places on our websites you have the opportunity to send us personal information about yourself, position within the company and projects and hourly wage rates: The information
you provide.
The above is not an exhaustive list.
We are generally unlikely to collect sensitive information about you, such as:
- health or genetic information;
- your racial or ethnic origin;
- your sexual orientation;
- your religious beliefs or affiliations; or
- genetic information.
If collection of sensitive information is reasonably necessary for one or more of our functions or activities, we will only collect sensitive information about you with your consent, or otherwise in accordance with the Privacy Act.
In certain cases we may collect personal information from publicly available sources and third parties, such as suppliers, recruitment agencies, contractors, our clients and business partners. If we collect personal information about you from a third party we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.
You have choices when it comes to the technology you use and the personal information you share. When we ask you to provide personal information, you can decline. Many of our services and products require some personal information to provide you with the requisite product or service. If you choose not to provide personal information necessary to provide you with it, the Services will not be in its best position to provide the outcomes and results that we strive for. Likewise, where we need to collect personal information by law or to enter into or carry out a contract with you, and you do not provide the personal information, we will not be able to enter into the contract. We will notify you if this is the case at the time.
Are Cookies Or Other Technologies Used To Collect Personal Information?
Yes, we may use cookies and related technologies, such as web beacons, to collect information about usage of our websites and software. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. One of the primary purposes of cookies is to provide a convenience feature to save you time.
The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you register with us, a cookie helps us to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such username logins, naming details and so on. When you return to the same website, the information you previously provided can be retrieved, so you can easily use the features that you customized.
A web beacon is a small graphic image that allows the party that set the web beacon to monitor and collect certain information about the viewer of the web page, web-based document or e-mail message. Third party vendors also may use cookies on our website.
From time to time we may allow third parties to collect data on our website, and those third-party advertisements may include a cookie or web beacon served by the third party – which we do not control. This Privacy Policy does not cover the use of information collected from you by third party ad servers.
You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of our websites you visit.
How Does Econstruct Consulting Pty Ltd Use Personal Information?
We use your personal information to deliver high quality products, services and experiences to you as well as to manage our business processes and to comply with the law. In particular, we use your data:
- to provide you with access and services in respect of the Services;
- to respond to questions, support, requests or complaints that you have made to us;
- to bill you for products/services you purchased;
- to gain an understanding of your needs so that we may improve and develop the Services;
- advertise and market to you, which includes sending promotional communications, targeting advertising, and presenting you relevant offers;
- ask for your opinion about our products or the products of others;
- for record keeping and analytical purposes and to research, develop and improve programs, products, services and content;
- for personalised user interfaces in respect of the Services;
- conduct and commission customer experience and market research;
- manage our business; and
- subject to your consent, for other purposes which may be notified to you from time to time.
For these purposes, we might also combine data we collect from different sources or contexts (for example, from your use of two differing products, content, services you purchase or use) or obtain from third parties to give you a more seamless, consistent, and personalized experience, for business purposes, and for other legitimate purposes.
We may use your information so that we and our business partners can promote and market products and/or services that we think may be of interest to you (including products and/or services provided by a third-party). This marketing may be carried out in a variety of ways (including by email or by customising online content) and may continue after you stop using the Services, until you opt-out. You may opt-out by emailing us at [email protected] or by following the “unsubscribe” instructions in any email communication you receive from us.
Finally, we do not use any automated decision making or profiling tools or technologies.
Does Econstruct Consulting Pty Ltd Disclose Personal Information To Others?
We disclose your information for the purposes outlined above in this Privacy Policy; to our service providers/vendors and service providers who ensure the operation of the Services, related bodies corporate, affiliates, business partners, and also to comply with the law. We may also disclose this information to:
- third parties who have your authorisation;
- companies that we hire to perform services or functions on our behalf;
- respond to legal process;
- protect our other clients;
- protect someone’s health, safety or welfare;
- maintain the security of our services, events, or products; and to protect our rights and property.
In all cases in which we share your personal information with a third party for the purpose of providing a service to us, we will not authorize them to keep, disclose or use your information with others except for the purpose of providing the services we asked them to provide. We will also generally require that the third party protect your personal information to the same extent that we do.
We will not use or disclose your personal information for any other purpose unless you have consented to that use or disclosure, or the relevant use or disclosure is otherwise permitted by the APPs or some other law.
For some sorts of transactions, in addition to our direct collection of information, our third party service vendors (such as IT services providers, mobile app stores, credit card companies, clearinghouses and banks) who may provide such services as data storage, security, credit, insurance, and escrow services may collect personal information directly from you to assist you with your transaction. We do not control how these third parties use such information, but we do ask them to disclose how they use your personal information before they collect it.
From time to time we may allow a third party to serve advertisements on our websites. If you share information with the advertiser, including by clicking on their ads, this Privacy Policy does not control the advertisers use of your personal information, and you should check the privacy policies of those advertisers and/or ad services to learn about their use of cookies and other technology before linking to an ad. We note that we do not allow such advertisements on our websites currently, however, we do reserve the right to include this functionality at a later date.
Personal information may be transferred to a third-party as a result of a sale, acquisition, merger, reorganisation or other change of control affecting us. If we sell, merge or transfer any part of our business, part of the sale may include your personal information.
Overseas Transfers of Personal Information
From time to time we may also engage service providers located outside of Australia, such as cloud-based storage solutions, who may have access to your personal information. It is not practicable to specify the jurisdictions in which those service providers are likely to be based.
As at the date of this Privacy Policy, we are not likely to disclose personal information to other overseas recipients. If in future we do propose to disclose personal information overseas, we will do so in compliance with the requirements of the Privacy Act. We will, where practicable, advise you of the countries in which any overseas recipients are likely to be located.
How Is Personal Information Secured?
We have implemented generally accepted standards of technology and operational security in order to protect personal information from loss, misuse, alteration, or destruction. This includes:
- training our staff on how to keep your information safe and secure
- third party data security measures employed by our third party data storage and security providers, and virus scanning tools.
- When we send your information overseas (for use or storage by our affiliates or vendor) we take steps to ensure their use complies with these security policies and we require them to take steps to use it appropriately.
- Destroying or de-identifying data when it’s no longer required by the business or under the law.
For clarity, these precautions apply only to the Services. We exercise no control over how your information is stored, maintained or displayed by third-parties or on third-party websites.
De-identified Information
We may de-identify your personal information or aggregate it in such a way that it cannot be used to identify you. Once we have de-identified information, it is non-personal information and we may treat it like other non-personal information.
We may use de-identified or aggregated information for a range of purposes, including to improve our Services and develop new products and services, and to undertake benchmarking and other analytics.
We may disclose de-identified information to several entities, including:
- advertisers and other third-parties for their commercial, marketing, research and promotional purposes;
- organisations approved by us that conduct research into consumer spending; and
- other users of the Services for the purpose of comparing their projects against that of broader industries.
Our de-identification procedure involves:
- removing personal identifiers;
- removing or altering other information that may allow you, your builder and your clients to be identified; and
- continuously assessing and managing the risk of re-identification.
User Details
You are responsible for maintaining the confidentiality of your usernames and passwords.
We maintain strict rules to help prevent others from guessing your password. We also recommend that you change your password periodically. You must not provide your usernames or passwords to any third-party. If you believe that your usernames or passwords may have been stolen or been made known to others, you must contact us immediately at [email protected]. In any event, you should change your password immediately. We are not responsible if someone accesses your account if they have obtained your usernames and/or passwords from you, your staff or affiliates or as a result of your breach of this Privacy Policy or the Software as a Service Terms and Conditions entered into between us (if applicable).
Links
The website may contain links to other sites that provide information that we consider relevant to your applications. Econstruct Consulting Pty Ltd is not responsible for the privacy practices or the content of such web sites and applications.
How Can A User Access, Change, and/or Delete Personal Information?
You can ask us to provide you with a copy of the personal information we have about you. Also, you may access, correct, update, and/or delete any personal information that you submit to the Services and there is no cost to do any of these things. To do this, we might need you to confirm your identity.
You can contact us to do the following via this email address: [email protected]
We aim to provide you with your personal information within 30 days of you asking for it. There may be cases in which we cannot provide this information to you – for example, where that information is commercially sensitive to us – but in any case we will write to you explaining this decision if this is the case.
If you ask us to change or correct your personal information, we will do this as soon as reasonably possible and if we’ve given that information to a third party you can ask us to let them know you need it changed at no fee to you. If we don’t think a change is necessary, we’ll write to you to let you know why. You can ask us to include a statement that says you believe our record about you is inaccurate, incomplete, misleading or out of date.
However, portions of your data, consisting of aggregate data derived from your usage of the Services, may remain on our production servers indefinitely. Your data may also remain on a backup server or media. We keep these backups to ensure our continued ability to provide the Services to you in the event of malfunction or damage to our primary production servers.
Personal information about employees
We may collect personal information about our employees and prospective employees, as part of their application and during the course of their employment, either from them or in some cases from third parties such as recruitment agencies.
This may include information about the employee’s health, their right to work in Australia, or other sensitive information. For some roles, employees may need to obtain a security clearance or provide a criminal history search.
Under the Privacy Act, personal information about our current or former employees may be held, used or disclosed by us in any way that is directly connected to the employment relationship. We handle information about our employees in accordance with legal requirements and our applicable policies in force from time to time.
How can a User make a Privacy Complaint?
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Phone: 1300 363 992
Email: [email protected]
Website: www.oaic.gov.au
In order to manage your complaint we will:
- keep a record of your complaint; and
- respond to it within 30 days (and if we feel more time will be needed, we will again let you know).