Privacy Policy.
1 Purpose
This Policy outlines how Bam Bam Pile Driving (BBPD) protects personal information collected during our business operations. It ensures we handle information responsibly and comply with privacy laws in Australia (Privacy Act 1988 and Australian Privacy Principles).
2 Scope
This Policy applies to all personal information BBPD collects about our employees, job applicants, contractors, clients, site visitors, and other individuals we interact with during our project delivery and business activities.
3 Definitions
• Personal Information: Information that identifies or could reasonably identify an individual, whether true or not and whether recorded or not. Examples include names, contact details, employment history, medical information, and photos.
• Sensitive Information: Personal information requiring additional protection, such as health records, safety incident reports involving injuries, background checks, drug and alcohol test results, and cultural identification.
• Data Breach: Unauthorized access to, or disclosure of, personal information, or information that is lost in circumstances likely to result in unauthorized access or disclosure.
• APPs/IPPs: The Australian Privacy Principles and New Zealand Information Privacy Principles that regulate the handling of personal information.
​
4 Policy Statements
BBPD manages personal information according to these principles:
• Collection: We collect only information necessary for our business functions, such as:
-
o Contact details and qualifications for employment and project allocation
-
o Licenses, certifications, and competency records for compliance verification
-
o Emergency contact information for safety purposes
-
o Health information relevant to workplace safety and job requirements
-
o Client and supplier contact details for project delivery and business operations
We collect information directly from individuals where possible, through employment forms, induction processes, and project documentation. We explain why we need the information at the time of collection.
• Use and Disclosure: We use and disclose personal information only for the purpose it was collected or closely related purposes. For example:
-
o Employee information for payroll, rostering, and training
-
o Safety information for incident management and regulatory reporting
-
o Contractor information for site access and compliance verification
-
o Client information for project communications and relationship management
Information may be shared with third parties such as payroll providers, training organisations, clients (where required for site access), and regulatory authorities as necessary and permitted by law.
• Data Quality: We maintain accurate, complete, and up-to-date information by:
-
o Regularly updating employee qualification and license records
-
o Confirming contact details during project mobilisation
-
o Providing mechanisms for individuals to update their information
• Data Security: We protect personal information through:
-
o Secure electronic systems with appropriate access controls
-
o Lockable storage for physical records at project sites and offices
-
o Secure file transfer protocols for sharing sensitive information
-
o Regular backup of electronic data
-
o Training personnel on information handling requirements
• Access and Correction: Individuals may request access to their personal information or ask for corrections by contacting their supervisor or the P&C Department. We respond to these requests within 30 days.
• Retention and Disposal: We keep personal information only as long as needed for our business purposes or as required by law. For example:
-
o Employee records for 7 years after employment ceases
-
o Safety records according to WHS regulatory requirements
-
o Project personnel information for the duration of project plus required retention period
5 Responsibilities
• Privacy Officer (P&C Manager):
-
o Oversee compliance with privacy legislation
-
o Handle privacy inquiries and complaints
-
o Coordinate responses to data breaches
-
o Review privacy practices and procedures
-
o Provide guidance on privacy matters
• IT Department:
-
o Implement technical security measures to protect electronic information
-
o Maintain secure backup systems and monitor systems for unauthorized access
-
o Assist with data breach investigations involving IT systems
• Project Managers and Supervisors:
-
o Ensure appropriate handling of personal information on projects
-
o Maintain secure storage of physical records at project sites
-
o Ensure team members understand privacy requirements
-
o Control access to personal information on a need-to-know basis
• All Personnel:
o Handle personal information confidentially
o Only access information needed for your role
o Report potential privacy breaches immediately
o Secure physical documents and lock computer screens when unattended
6 Privacy Complaints
If you believe your privacy has been breached:
1. Provide details of your concern and any supporting information
2. We will investigate and respond within 30 days
7 Records
All privacy-related records, including access requests, complaints, investigations, and data
breach reports, are managed securely according to company records management procedures.
​
Issued: 01/10/2025
Review: 01/10/2026
Version: R01