PRIVACY POLICY (AS PER 2025)

About this policy

1.1 The Company, (‘we’ or ‘us’) handle personal information in accordance with the Privacy Act 1988 (Privacy Act) and the Australian Privacy Principles (APPs) set out in the Privacy Act.

1.2 The APPs specify how we must collect, use, disclose, ensure the quality of, and secure personal information. They also set out your rights to access and seek correction of your personal information

1.3 Collection of personal information: We only collect personal information where that information is reasonably necessary for, or directly related to: • our business activities including sales and marketing. • managing employment and personnel matters, particularly in relation to our members, staff and contractors. • managing customer enquiries, complaints and privacy requests.

When you use our website, we send you a temporary cookie that functions as your identification card. A different identification card is sent each time you use the website. While we use cookies to track your visit to our website, our web servers automatically log the IP/Internet address of your computer, this information does not identify you personally. Most browsers are initially set to accept cookies. You can set your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Please refer to your computer browser instructions or help screens to learn more about these functions. If you reject all cookies, you may not be able to use our websites.

1.4 The information we collect might include: • Information about your identity • Your address and contact details (e.g. residential or business address, telephone number, email address or fax number) • Information about your personal circumstances (e.g. age, marital status, family and personal relationships, or your need for an interpreter and the relevant language) • Information about your education or employment (e.g. educational or professional qualifications, occupation, work history, referee comments or remuneration) • information about your business or financial affairs (e.g. bank account details, business interests and financial circumstances and history).

We might also collect sensitive information about you, including information about: • Your membership of a trade or professional association, or a trade union • Any disability or injury you have.

1.5 We only collect sensitive information: • With your consent • When it is required or authorised under Australian law, or • When it is otherwise permitted under the Privacy Act.

1.6 Use and disclosure of personal information We use and disclose your personal information for the purpose for which it was collected and will only use or disclose it for another purpose where this is permitted under the Privacy Act. In general, we do not use or disclose your personal information for another purpose unless one of the following applies: • You have consented • You would reasonably expect us to use or disclose the information for that other purpose and it is either related or, in the case of sensitive information, directly related to the purpose for which it was collected • It is required or authorised by or under an Australian law or a court/tribunal order • It is necessary to lessen or prevent a serious threat to somebody’s life, health or safety, or to public safety • It is reasonably necessary for an enforcement related activity conducted by, or on behalf of, an enforcement body (e.g. the Australian Federal Police or other such Authority), or • We have reason to suspect that unlawful activity, or misconduct of a serious nature, which relates to our functions or activities has been, is or may be, engaged in, and we believe that the use or disclosure is necessary in order to take appropriate

1.7 Storage and security of personal information Most personal information is stored by the Company electronically with some information also stored on paper files. We take steps to protect your personal information from misuse, interference and loss and from unauthorised access, modification or disclosure. These steps include: • Security measures, including authentication requirements for accessing our electronic systems and keeping audit log of systems access by users. • Physical security measures, including restricting physical access to our offices and secure storage for information held on site with access to classified material limited to specific the Company personnel who have the required level of clearance. • Secure storage for information held offsite. • Procedures and training for dealing with suspected data breaches.

1.8 Complaints This policy outlines the Company’s personal information handling practices, including how to make a complaint about the way we have handled your information.

1.9 Disclaimer Given that the data is collected via the internet, the Company will not be held liable for any data obtained as a result of any hacking or security breach.

CARACALLA