Privacy Policy
This policy establishes how the Group protects personal information, sensitive information, client information and confidential information encountered or held in the course of its operations. It supports lawful, transparent and secure information handling and the protection of client property and privacy.
This policy applies to all Group workers, contractors and subcontractors and to personal or confidential information in any form, including paper records, emails, systems, photographs, audio, video, identification documents, recruitment records and information encountered at client sites.
- Collect only information reasonably necessary for legitimate business, employment, contractual, safety or legal purposes.
- Use and disclose personal information only for the purpose for which it was collected, a related lawful purpose, with consent where required, or where otherwise authorised or required by law.
- Limit access to information to authorised persons with a genuine need to know.
- Take reasonable steps to keep information accurate, current and secure and to protect it from misuse, interference, loss and unauthorised access, modification or disclosure.
- Provide individuals with access to and correction of their personal information where required by law, subject to lawful exceptions.
- Retain records only for as long as required by law, contract or legitimate business need, then securely destroy or de-identify them.
- Workers must not read, photograph, copy, record, remove or disclose client documents, screens, conversations or other information unless authorised for their work.
- Client devices, telephones, printers, files, removable media and consumables must not be used unless expressly authorised.
- Security doors, keys, access cards and credentials must be protected and unauthorised persons must not be admitted.
- Accidental exposure, loss, damage, unauthorised access or disclosure must be reported immediately to the supervisor or manager and documented.
The Group may collect identity, contact, employment, qualification, right-to-work, licence, reference, criminal history, working-with-children and other information reasonably required for recruitment, employment, deployment and legal compliance. Sensitive information will be collected and handled only where lawful and necessary.
Electronic information must be protected by appropriate access controls, passwords and other security measures. Hard-copy information must be stored securely. Access is restricted according to role and business need. Workers must comply with Group information-security requirements and must not share passwords or credentials.
Suspected or actual loss, unauthorised access, cyber incident or disclosure must be reported immediately. The Group will contain and investigate the incident, assess whether serious harm is likely, preserve evidence, take corrective action and, where the Notifiable Data Breaches scheme applies, notify affected individuals and the Office of the Australian Information Commissioner as required.
Before personal information is disclosed overseas or provided to a service provider, the Group will assess applicable privacy obligations, contractual safeguards, security controls and the purpose of the disclosure. Overseas disclosure will be managed in accordance with the Australian Privacy Principles where they apply.
Privacy enquiries, complaints, access requests and correction requests must be referred to senior management or the nominated privacy contact. Requests will be handled fairly, confidentially and within applicable legal timeframes.
Workers must not make covert audio, video or other recordings of workplace conversations, meetings or client activities. Recording may only occur where authorised and lawful, with any consent or notice required by the applicable jurisdiction.
| Reference | Application |
|---|---|
| Managers / Supervisors | Ensure privacy controls are implemented, restrict access, respond to incidents and escalate potential data breaches. |
| Workers | Protect personal and client information, follow need-to-know controls and report any suspected breach immediately. |
| Contractors / Subcontractors | Meet equivalent confidentiality, privacy and information-security requirements. |
- POL 20 - I.T Security and Computer Use Policy
- POL 27 - Recruitment and Appointment Policy
- POL 31 - Risk & Opportunity Policy
- POL 34 - Employment Separation and Termination Policy
- POL 53 - Code of Integrity and Conduct Policy
- POL 73 - Data Handling and Classification Policy
- POL 81 - Information Security & Cyber Security Policy
- POL 82 - Records Management Policy
- SCH 01 - Records Retention Schedule
- PRO 44 - Record Keeping & Archiving Process
| Reference | Application |
|---|---|
| Privacy Act 1988 (Cth), Australian Privacy Principles and Notifiable Data Breaches scheme | Collection, use, disclosure, access, correction, security, breach assessment and notification requirements where applicable. |
| Privacy (Tax File Number) Rule 2015 | Collection, storage, use, disclosure, security and destruction requirements for tax file number information. |
| Applicable State and Territory privacy, health-records and workplace-surveillance laws | Additional jurisdiction-specific requirements for personal information, health information, recording and surveillance. |
| Fair Work Act 2009 (Cth) and Fair Work Regulations 2009 | Employment-record handling, confidentiality and workplace obligations where applicable. |
| ISO/IEC 27001:2022 + Amd 1:2024 | Information security management, risk-based controls and protection of confidentiality, integrity and availability. |
| ISO 9001:2015 + Amd 1:2024 | Control of documented information, competence, monitoring and continual improvement. |
| ISO 14001:2026 | Documented information and environmental records where relevant. |
| ISO 45001:2018 + Amd 1:2024 | Confidentiality and protection of WHS, health and incident information. |
| ISO 26000:2010 | Privacy, human rights, ethical behaviour and organisational governance. |
| ISO 31000:2018 | Privacy and information risk identification, treatment, monitoring and review. |
This policy will be reviewed at least annually and sooner where legislation, regulatory guidance, client requirements or operational risks change.
This Privacy Policy provides information on how SKG Cleaning Services (hereafter referred to as "we" or "us" or "our") manages personal information collected; including personal information collected through this website or through operation of our services.
We realise the importance of ensuring that personal information is treated confidentially and are committed to ensuring that all personal information is only collected, disclosed, used and stored in accordance with the National Privacy Principles set out under the federal Privacy Act 1988.
‘Personal Information’ is information or an opinion (including information or an opinion forming part of a database) whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
Any personal information that we collect will only be used and disclosed for the purpose for which it has been provided to us.
Personal information may need to be disclosed to external service providers engaged by us in order for those service providers to fulfil their service obligations. For example, IT service providers who assist in managing servers and networks used by us may need to access client data in order to maintain the servers and networks.
Where personal information is disclosed to an external party, we will take steps to ensure that the external party treats such information confidentially and in accordance with the federal Privacy Act 1988.
If you have registered through our website to receive email or other communications from us, we may use your contact details to send you newsletters, marketing emails or invitations to our seminars or events, which may be of interest to you. However, you may at any time opt out of receiving such materials by emailing us and requesting to unsubscribe. Upon receiving such a request, we will remove your contact details from our distribution lists.
You may request us to provide you with access to personal information we hold about you. We will process all requests for access to personal information in accordance with the National Privacy Principles. In most cases, we will provide you with access to your personal information. However, we may refuse access in certain situations as listed in the National Privacy Principles. If we refuse to give you access, we will provide you with reasons for our refusal.
If any personal information we hold about you is not accurate, complete or up to date, please let us know and in most cases, we will use all reasonable efforts to update the information.
We are committed to keeping secure the data you provide to us and we will take all reasonable precautions to protect your personally identifiable information from loss, misuse or alteration.
From time to time it may be necessary for us to revise our privacy policy. We reserve the right to change our privacy policy at any time without prior notice. We will notify you of the changes by posting an updated version of the policy on our website.
