Privacy Policy

WHSEQ Pty Ltd (trading as HSE Direct)
ABN: 35 671 865 428
Address: 4/10 Eastbrook Terrace, East Perth, 6004.
Email: contact@hsedirect.com.au
Website: www.hsedirect.com.au

Last Updated: 31 October 2025

About Privacy Policy

WHSEQ Pty Ltd trading as HSE Direct (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you engage with our workplace health and safety consultancy services.

2. Information We Collect

We may collect the following types of personal information:

Contact Information: Name, email address, phone number, business address, job title and company name.

Professional Information: Details about your workplace, industry sector, safety management systems, incident reports, risk assessments, audit findings and compliance records.

Sensitive Information: Where necessary for our services, we may collect health information related to workplace incidents, injuries or health surveillance programs, with your explicit consent.

Technical Information: IP address, browser type, device information, website usage data and cookies when you visit our website.

Communication Records: Records of correspondence, consultation notes, meeting records and feedback.

3.How We Collect Information

We collect personal information directly from you through:

• Enquiry forms and service agreements
• Email, phone and in-person consultations
• Workplace inspections, audits and investigations
• Training sessions and emergency response planning activities
• Our website through contact forms, newsletter subscriptions and cookies

We may also collect information from third parties including workplace managers, contractors, regulatory bodies and incident witnesses where relevant to our consultancy services.

4. Purpose of Collection

We collect and use your personal information to:

• Provide workplace health and safety consulting, auditing and advisory services
• Conduct risk assessments, incident investigations and compliance audits
• Develop safety management systems, policies and emergency response plans
• Deliver training programs and educational materials
• Respond to enquiries and maintain client relationships
• Issue invoices and process payments
• Comply with legal and regulatory obligations under WHS legislation
• Improve our services and website functionality
• Send newsletters, safety updates and marketing communications (with your consent)

5. Disclosure of Personal Information

We may disclose your personal information to:

Service Providers: IT support, cloud storage providers, accounting services and website hosting providers who assist in delivering our services.

Regulatory Bodies: SafeWork NSW, SafeWork Australia or other relevant authorities when required by law or to ensure workplace safety compliance.

Professional Advisors: Lawyers, auditors and insurance providers when necessary for business operations.

Third Parties: With your consent or as required by law.

We do not sell your personal information to third parties.

6. Overseas Disclosure Privacy Policy

If we disclose your personal information to overseas recipients (such as cloud storage providers located outside Australia), we will take reasonable steps to ensure they comply with the APPs or are subject to substantially similar privacy policy protections. We currently use services located in [specify countries if known, e.g., United States for cloud storage].

7. Data Security Privacy Policy

We take reasonable technical and organisational measures to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Our security measures include:

• Secure password-protected systems and multi-factor authentication
• Encrypted data storage and transmission
• Access controls limiting staff access to personal information on a need-to-know basis
• Regular security audits and staff training on data protection
• Deactivation of user accounts when employees leave the organisation

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.

8. Your Rights

Under the Privacy Act, you have the following rights:

Access: You can request access to the personal information we hold about you.

Correction: You can request corrections to inaccurate, incomplete or outdated information.

Erasure (Right to be Forgotten): You can request deletion of your personal information where it is no longer necessary, consent has been withdrawn, or it was unlawfully collected.

Withdraw Consent: You can withdraw consent for marketing communications or data processing at any time.

Data Portability: You can request transfer of your data to another service provider in certain circumstances.

Object: You can object to certain data processing activities.

Complain: You can lodge a complaint with us or directly with the Office of the Australian Information Commissioner (OAIC).

To exercise these rights, please contact us using the details at the top of this policy. We will respond to requests within a reasonable timeframe, typically within 30 days.

9. Consent

Where we require your consent to collect, use or disclose personal information, we ensure that consent is:

• Freely given without coercion
• Specific to the purpose stated
• Informed with clear explanation of how information will be used
• Unambiguous and obtained through affirmative action
• Easily withdrawn at any time

We do not use pre-ticked boxes or bundled consent for unrelated purposes.

10. Automated Decision-Making

We may use automated systems for administrative tasks such as scheduling or data analysis. Where automated decision-making significantly affects you, we will provide transparency about the logic involved, the significance of such processing, and the consequences for you. You have the right to request human intervention in automated decisions.

Note: Full transparency obligations for automated decision-making must be implemented by 10 December 2026.

11. Children’s Privacy Policy

Our services are directed at businesses and adult professionals. We do not knowingly collect personal information from children under 18 without parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately.

12. Data Breach Notification

In the event of a data breach that is likely to result in serious harm (such as identity theft, financial loss or threats to safety), we will:

• Notify affected individuals as soon as practicable
• Notify the OAIC in accordance with the Notifiable Data Breaches (NDB) scheme
• Take immediate remedial action to contain and rectify the breach
• Provide information about steps you can take to protect yourself

13. Cookies and Website Analytics

Our website uses cookies and similar technologies to improve user experience and analyse website traffic. You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

14. Marketing Communications Privacy Policy

With your consent, we may send you newsletters, safety updates and promotional materials about our services. You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the revision date. We encourage you to review this policy regularly.

16. Contact Us and Complaints

If you have questions, concerns or wish to make a complaint about how we handle your personal information, please contact us:

WHSEQ Pty Ltd trading as HSE Direct
Email: contact@hsedirect.com.au

We will investigate complaints promptly and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au

You also have the right to take legal action for serious invasions of privacy policy under the statutory tort provisions introduced in June 2025.^[7][8]

This Privacy Policy complies with the Privacy Act 1988 (Cth) as amended by the Privacy and Other Legislation Amendment Act 2024, effective June 2025.