Privacy Statement

<p><span>This policy describes the type of personal information we collect at Clean Management Solutions Pty Ltd (</span><strong>CSM</strong><span>) ACN 125 303 059, a Trident Services Australia company (</span><strong>Trident</strong><span>), why we need it, how we use it and share it, and how we store it.</span></p>

We may collect and hold personal information about you (that is, information that can identify you) that is relevant to our functions and activities. The kinds of information we typically collect from you depends on our relationship with you. For all individuals we deal with, we may collect your name and other information relevant to providing you with the information, goods, and services you, or someone else on your behalf, is seeking. If you use our website, we may collect your IP address, browser type, date and time of visit, and geographic location.

<p>The kinds of personal information we collect from you to run our business and provide our services to you may include:</p>

<ul>
<li><strong>General personal or business details<span> </span></strong>such as your name, address, postcode, phone number, email address, job title, employer, business card details, image, date of birth, gender.</li>
<li><strong>Information to prove your identity<span> </span></strong>such as your driver’s license, passport, visa, birth/citizenship certificate, marriage certificate, proof of age/medicare/veterans/health care cards, bank statement, rates notice, utility bill, proof of enrolment with the Australian Electoral Commission, Aviation Security Identification Card (<strong>ASIC</strong>), current and previous addresses.</li>
<li><strong>Feedback and other information you give us<span> </span></strong>when we communicate such as your opinion, questions or complaints, preferences, social media information, medical details (if relevant), and the history of our interactions with you.</li>
<li><strong>Financial, billing, or transactional information<span> </span></strong>such as your bank account, credit card information, and tax file number</li>
</ul>

The kinds of personal information we collect include:

<ul>
<li><strong>Information we gather when you visit our website and other online services<span> </span></strong>(such as our Workforce Ready portal) including your device ID, device type, geolocation information, IP and MAC addresses, browser type and connection information, statistics on page views, ad data and information about the way you use our websites.</li>
</ul>

If you submit a Service Booking Request Form on our website, the kinds of personal information we collect from you include:

<ul>
<li><strong>General personal or business details </strong>such as your name, company name, address, postcode, phone number, email address and invoice number.</li>
</ul>

If you apply for a job with us, the kinds of personal information we collect from you include:

<ul>
<li><strong>Information contained in applications and resumes<span> </span></strong>such as your name and contact details, educational details, academic and other transcripts, qualifications, experience, employment history and skills.</li>
<li><strong>Interview and assessment information<span> </span></strong>such as your responses to criteria, notes made by interviewers, citizenship status or proof of right to work, criminal history, and medical history.</li>
<li><strong>References<span> </span></strong>from past employers and referees and background checks.</li>
</ul>

Sometimes we may need to collect sensitive information from you such as your health information (including your Covid 19 vaccination status), biometrics or criminal record. We collect sensitive information only with your prior permission and if it is relevant to your interaction with us; or we may do so when we are allowed or required by law. For example, we may collect health or biometric information as part of a job application, and we may also collect health information when we investigate a safety incident or in the form of dietary requirements for an event. We collect your criminal history information if you apply for a role with us and if you are required to obtain an Aviation Security Identification Card (ASIC) as part of your employment.

Personal information will generally be collected directly from you when you:

<ul>
<li>Communicate with us</li>
<li>Access our social media</li>
<li>Apply for employment with us</li>
<li>Register as a visitor to our offices</li>
<li>Apply for an online service booking request.</li>
</ul>

There may, however, be some instances where personal information about you will be collected indirectly because it is unreasonable or impractical to collect personal information directly from you. We will usually notify you about these instances in advance, or where that is not possible, as soon as reasonably practicable after the information has been collected. Sometimes we obtain personal information about you from others, such as:

<ul>
<li>Your employer</li>
<li>Our suppliers</li>
<li>Our service providers</li>
<li>Persons that you have authorised to give us your information (like referees or recruitment agencies)</li>
<li>Government and regulatory authorities</li>
<li>Publicly available sources (such as social media and online searches).</li>
</ul>

We use cookies to help our website function correctly, to understand how our website is used, and to improve your user experience when you are browsing. Our cookie data does not directly identify you, but they may link back to a database record about you. We use cookies to monitor usage of our website and to create a personal record of when you visit our website and what pages you view so that we may serve you more effectively.

The personal information that we collect and hold about you depends on your interaction with us. The main reason we collect, use, and hold your information is to run our business and provide our services through:

<ul>
<li>Communicating with you</li>
<li>For security and safety purposes (including managing incidents and investigations)</li>
<li>Confirming your identity for employment</li>
<li>To ensure you have the required work visas, licenses (for example, a security license) and identification for your employment (for example, an Aviation Security Identification Card)</li>
<li>Meeting our compliance obligations, including audits of employment documents under relevant legislation, and assisting government or law enforcement agencies</li>
<li>To meet client contractual requirements for vetting staff if required</li>
<li>Managing our website and online services</li>
<li>Conducting, monitoring, and analysing our businesses and internal operations (including training).</li>
</ul>

<p>Except as otherwise permitted by law, we only collect sensitive information about you if you consent to the collection of the information and if it is reasonably necessary for the performance of our functions, as set out above.</p>

Generally, we only use or disclose personal information about you for the purposes for which it was collected (as set out above). We share your information with third parties that assist us run our business and deliver our services. We require third parties to only use the personal information we disclose to them, for the specific role we ask them to perform. These third parties include:

<ul>
<li>Service providers assisting with our operations such as our human resources providers, our occupational health physician, and employee assistance partner</li>
<li>Banks, payment card agents and payment gateway providers</li>
<li>Software and technology providers such as network services, cloud storage, software, and IT support providers</li>
<li>Government, regulators, and law enforcement agencies such as the Department of Home Affairs, WorkCover and the police</li>
<li>Administrative support such as recruitment, debt recovery and document destruction</li>
<li>Organisations that help identify illegal activities and prevent fraud; and</li>
<li>Our professional advisors such as insurers, accountants, auditors, and lawyers.</li>
</ul>

We will also share your information with your authorised representatives and if we are required by law to do so. In some circumstances we may also disclose employees’ personal information to clients and prospective clients for the provision of services or for compliance audits.

We run our business in Australia and generally only use systems located within Australia. We engage third parties (such as cloud storage providers) who use data centres based in Australia. We do not disclose your information with overseas recipients.

We do not share, sell, rent, or disclose your personal information other than as described in this Privacy Policy or as permitted under the Act. We would only share information with government agencies if required/authorised by law.

We store personal information in hardcopy and electronic form in secure buildings and systems or use trusted third parties. Some of the steps we take to protect those records include:

<ul>
<li>Maintaining up-to-date policies and standards for employees and contractors to follow</li>
<li>Giving our employees information security and privacy training</li>
<li>Using firewalls, passwords, email scanning products, access control, intrusion detection systems, monitoring tools and virus scanning and appropriate encryption to maintain network and system security; and</li>
<li>Keeping buildings secure by using access control, alarms, and CCTV. When we use third parties to store personal information (such as cloud storage providers), we require them to take appropriate measures to protect it in accordance with applicable laws and industry best practice.</li>
</ul>

If you contact us via our website, we archive your personal information in our web hosting / social platforms and delete it after resolution. Some enquiries are also shared with other CMS and/or Trident personnel to assist with an investigation. We hold personal information for as long as we need it for our business purposes or as allowed or required by law.

<p>If you access another party’s website or application from our websites (Linked Services), you may allow that other party to collect or share information about you. That other party will deal with your personal information in accordance with its own privacy policy.</p>

You can contact us to request access to your personal information or ask us to correct or update information that we hold about you in writing. Contact us using the details in the ‘Contact Us’ section and we will consider and respond to your request. There is no fee to make a request but, if your request is complex or we will incur extra costs in carrying it out, we may charge you a reasonable fee for preparing the information. If there is a fee, we will let you know, and you will need to pay it before we start.

We try and make your information available within 30 days after you ask for it unless we refuse access. If we refuse access in circumstances prescribed by the Privacy Act or only allow access to some information, we will tell you why in writing (unless it would be unreasonable to provide those reasons), including details of the mechanisms available to you to make a complaint. If your information does not need correcting, we will also tell you why in writing. We will always confirm your identity before giving you access or making any update.

If you have a complaint about how we deal with your personal information, please contact us via the channels below. We aim to respond to complaints quickly and to resolve them within 30 days. However, if your complaint is complex and we need more time to investigate it, we will contact you and let you know.

If you are not satisfied with our response, you can make a privacy complaint with the Office of the Australian Information Commissioner (<strong>OAIC</strong>). To lodge a complaint, visit the ‘Complaints’ section of the Information Commissioner’s website, located at <a href=”http://www.oaic.gov.au/privacy/privacy-complaints” target=”_blank”>http://www.oaic.gov.au/privacy/privacy-complaints</a>, to obtain the relevant complaint forms, or contact the OAIC at <a href=”mailto:enquiries@oaic.gov.au”>enquiries@oaic.gov.au</a> or visit <a href=”http://www.oaic.gov.au/” target=”_blank”>www.oaic.gov.au</a>.

If you have any queries or concerns about our privacy policy or the way we handle your personal information, please contact our privacy officer at:

<strong>Online:</strong>        Use our Feedback Form at <a href=”http://www.tridentservices.com.au/” target=”_blank”>www.tridentservices.com.au</a>

<strong>Email:         </strong><a href=”mailto:privacy@tridentservices.com.au”>privacy@tridentservices.com.au</a>

<strong>Phone:</strong>        +61 7 3395 6311 (ask for the Privacy Officer)

<strong>Post:</strong>           Privacy Officer, Trident Services Australia, P.O. Box 628, Cannon Hill, Qld, 4170.

For more information about privacy in general, you can visit the Office of the Information Commissioner’s website at <a href=”https://web.archive.org/web/20231021020055/http://www.oaic.gov.au/”>www.oaic.gov.au</a>.

You can find the most up to date version of our Privacy Policy on our website.