Privacy Policy

Who we are

SiteWarden is operated by HRSG Group Pty Ltd (ABN 55 653 992 495), an Australian company. In this policy, "we", "us" and "our" mean HRSG Group Pty Ltd.

This policy explains what personal information we collect, why we collect it, how we hold it, and what you can do about it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If you have a question about anything in this policy, contact us at support@sitewarden.com.au.

What we collect

Information you give us. When you contact us, request access, or set up a register, we collect details such as your name, email address, phone number, company name, and any information you include in your message.

Information you put into the product. If you use SiteWarden to keep a tool or test-and-tag register, that register contains data you enter — equipment details, test results and dates, site and job references, and the names or identifiers of the people who carried out or recorded a test. Some of that is personal information about your workers.

Information collected automatically. When you visit this website we collect standard technical information including IP address, browser and device type, pages viewed, referring page, and the date and time of your visit. We use Google Tag Manager and Google Analytics for this. See Cookies and analytics below.

We do not collect sensitive information as defined in the Privacy Act, and we ask that you do not enter sensitive information (such as health or biometric data) into a register.

Why we collect it

We use personal information to:

• provide the SiteWarden service and maintain your register;
• respond to your enquiries and provide support;
• send you service-related messages about your account;
• understand how the website and product are used, so we can improve them;
• meet our legal, tax and record-keeping obligations.

We do not sell personal information. We do not use your register data to build advertising profiles, and we do not share it with other customers.

Where your data is stored

SiteWarden is operated from Australia. The application and its databases are hosted on infrastructure in Singapore (Railway, Southeast Asia region). Each company's register is held in its own database.

Because this involves storing personal information outside Australia, we disclose it here under Australian Privacy Principle 8 (cross-border disclosure of personal information). By using SiteWarden you consent to your information being stored and processed in Singapore. We take reasonable steps to ensure our hosting providers handle information in a way consistent with the APPs, but you should be aware that overseas recipients may be subject to different laws from those in Australia.

Who we share it with

We share personal information only where necessary, and only with:

• Service providers who help us run SiteWarden — hosting, email delivery, analytics and payment processing. They may only use the information to provide that service to us.
• Professional advisers such as accountants and lawyers, where required.
• Law enforcement or regulators, where we are required or authorised by law to do so.

We do not disclose your register data to anyone else without your instruction.

Cookies and analytics

This website uses cookies and similar technologies. Essential cookies are needed for the site to work. Analytics cookies, set through Google Tag Manager and Google Analytics, help us understand which pages are useful and where people get stuck.

Google may process this information on servers outside Australia. You can read Google's practices at policies.google.com/privacy.

You can block or delete cookies through your browser settings. Blocking analytics cookies will not stop you using the site or the product.

How long we keep it

We keep personal information for as long as we need it for the purposes described above, and then for as long as we are required to keep it by law — for tax and corporate records, generally seven years.

If you close your account, we will delete or de-identify your register data within a reasonable period, except where we are required to retain it. You can export your data at any time before then.

Keeping it secure

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, modification or disclosure. These include encrypted connections (HTTPS), access controls, separate databases per company, and limiting staff access to what is needed.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask us to:

• give you access to the personal information we hold about you;
• correct it if it is inaccurate, out of date or incomplete;
• delete it, where we are not required to keep it;
• export your register data.

Email support@sitewarden.com.au. We will respond within a reasonable period, normally within 30 days. We may need to verify your identity first. If we refuse a request, we will tell you why in writing.

Complaints

If you think we have breached the Australian Privacy Principles, contact us first at support@sitewarden.com.au and we will investigate and respond.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or by calling 1300 363 992.

Changes to this policy

We may update this policy from time to time. The version published on this page is the current one, and the date at the top shows when it last changed. If we make a significant change, we will take reasonable steps to let account holders know.