PRIVACY POLICY

Purpose

Allen Price Pty Ltd (AP, we, us or our) recognises the importance of protecting the privacy and personal information of our clients, prospective clients, consultants, contractors, suppliers, employees, job applicants and other individuals with whom we interact.
This Privacy Policy explains how AP collects, holds, uses, discloses and protects personal information and how individuals may access or correct their personal information or make a privacy complaint.
AP is committed to managing personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs), to the extent they apply to Allen Price.

What personal information do we collect?

The types of personal information we collect and hold may include:

• name;
• postal and residential address;
• email address;
• telephone and mobile numbers;
• employer, company and position details;
• project and property-related contact information;
• correspondence and records of communications;
• information provided in enquiries and applications;
• information contained in project documents;
• payment and invoicing information;
• information required to administer our client and supplier relationships;
• information provided by job applicants, including employment history, qualifications
and references; and
• other information reasonably required to provide our services or conduct our
business.

We generally do not seek to collect sensitive information unless it is reasonably necessary for a particular purpose and permitted by law.

How do we collect personal information?

We may collect personal information:
• directly from individuals;
• by telephone, email, correspondence or meetings;
• through our website and online enquiry forms;
• when a person engages AP to provide professional services;
• through project correspondence and documentation;
• from clients, landowners, developers and other project stakeholders;
• from consultants, contractors and suppliers;
• from government agencies and local councils;
• through recruitment and employment processes;
• through our business management and project management systems; and
• from publicly available sources where reasonably necessary for our business activities.

Where personal information is collected from a third party, we will take reasonable steps to ensure that the individual is aware of the collection where required by the Privacy Act.

Why do we collect personal information?

AP may collect, hold, use and disclose personal information for purposes including:
• responding to enquiries;
• providing town planning, civil engineering, surveying and project management
services;
• managing development applications and related project matters;
• communicating with clients and project stakeholders;
• preparing proposals, fee estimates and engagement documentation;
• administering projects and engagements;
• issuing and administering invoices and payments;
• coordinating consultants and contractors;
• communicating with councils, government agencies and other authorities;
• managing business relationships;
• recruitment and employment administration;
• marketing and communications where permitted;
• maintaining business and professional records;
• managing our systems, security and technology; and
• complying with legal and regulatory obligations.

We will not use or disclose personal information for a purpose unrelated to the purpose for which it was collected unless permitted or required by law or otherwise authorised.

Disclosure of personal information

Depending on the circumstances, AP may disclose personal information to:
• clients and authorised representatives;
• landowners and project stakeholders;
• local councils and government agencies;
• planning authorities and other statutory authorities;
• consultants and contractors engaged in relation to a project;
• surveyors, engineers, planners and other professional advisers;
• accountants, auditors, lawyers and insurers;
• IT, software, cloud storage and business service providers;
• payment and financial service providers;
• recruitment service providers;
• professional and industry bodies where appropriate; and
• other persons where authorised or required by law.

AP does not sell personal information.

How we hold and protect personal information

AP takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
Depending on the information and system involved, safeguards may include:
• access controls and user permissions;
• password protection and authentication;
• Microsoft 365 and SharePoint security controls;
• secure business systems;
• restricted access to project information;

• staff confidentiality obligations;
• secure transmission of information;
• physical security controls;
• secure disposal of information; and
• incident and data breach response procedures.
Access to personal information is limited to people who reasonably require it for their role or authorised business purpose.

Retention and destruction

AP retains personal information only for as long as reasonably necessary for the purposes for which it is held, or as required by law, professional obligations, contractual requirements or legitimate business requirements.
When personal information is no longer required, AP will take reasonable steps to securely destroy or de-identify it, subject to any applicable retention requirements.

Access to personal information

An individual may request access to personal information AP holds about them. Requests should be made to:
Privacy Contact: The Privacy Officer
Email: consultants@allenprice.com.au
Phone: 4421 6544

We may need to verify the identity of the person making a request before providing access. We will generally respond to access requests within a reasonable period and in accordance with the Privacy Act.
If access is refused, AP will provide written reasons where required and explain available complaint mechanisms.

Correction of personal information

Individuals may ask AP to correct personal information we hold about them if they believe it is inaccurate, out-of-date, incomplete, irrelevant or misleading.
Requests should be directed to the Privacy Officer using the details above.
AP will take reasonable steps to correct personal information where appropriate.

Privacy complaints

If an individual believes AP has mishandled their personal information or breached the Privacy Act or APPs, they may make a complaint to us.Complaints should be directed to:
Privacy Contact: The Privacy Officer
Email: consultants@allenprice.com.au
Phone: 4421 6544

We will acknowledge and investigate privacy complaints and aim to resolve them as promptly as reasonably practicable.
If an individual is dissatisfied with our response, they may contact the Office of the Australian Information Commissioner (OAIC).

Data breaches

AP maintains a Data Breach Response Procedure.
Staff are required to immediately report suspected privacy or data breaches, including:
• emails sent to the wrong recipient;
• loss or theft of devices;
• unauthorised access to systems;
• accidental disclosure of personal information;
• compromised accounts;
• phishing or cybersecurity incidents; and
• loss of physical documents containing personal information.
Where an eligible data breach occurs, Allen Price will comply with applicable notification requirements under the Notifiable Data Breaches scheme.

Direct marketing

AP may use personal information to provide information about our services, projects, business activities, events and newsletters where permitted by law.
Individuals may request that AP stop sending direct marketing communications.

Website and cookies

Our website may collect information through contact forms, analytics, cookies and similar technologies.
Where applicable, information collected through these technologies may include IP address, browser information, device information, website activity and other technical information. Further information is provided in our Website Privacy Collection Notice and any applicable Cookies or Analytics Notice.

Changes to this Privacy Policy

AP may amend this Privacy Policy from time to time to reflect changes to our business, technology, legal requirements or privacy practices.
The current version will be made available on our website