Privacy Policy
Licensee: CROSSMULLER PTY. LIMITED
Licence Class: MB
Licence Number: 000110262
Last updated: 23 September 2025
1. Intent and Scope
This Privacy Policy applies to CROSSMULLER PTY. LIMITED (ACN 088 327 093) and all of its related bodies corporate and entities from time to time (together, “Crossmuller”, “we”, “us”, or “our”), including the brand and website crossmullersecurity.com.au (“Crossmuller Security”).
Crossmuller is committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Policy explains how we collect, hold, use, and disclose personal information, how you may access and correct your information, and how to lodge a privacy complaint.
Note: crossmullersecurity.com.au is a site spun off from crossmuller.com.au and operated by Crossmuller. Unless stated otherwise, references in this Policy to “our website” include crossmullersecurity.com.au and any pages, forms, or services we operate under the Crossmuller Security brand.
2. References
Privacy Act 1988 (Cth)
Australian Privacy Principles (APPs)
3. The Information We Collect
We collect personal information that is reasonably necessary for our business functions and activities, including delivering security, engineering, technology, and related services. The types of information we may collect include:
3.1 Personal Information
Identity and contact details: name, business name, role/title, postal and email address, phone number(s).
Employment-related details: CV/resume, qualifications, licences, certifications, right to work status, referees, and background information provided for recruitment or contracting opportunities.
Government-related identifiers (where permitted by law): e.g., driver licence or passport details (for identity verification, site access, compliance, and security accreditation), tax file numbers (for payroll where applicable).
Customer and supplier account details: billing information, ABN/ACN, bank details (for payment processing), and transaction history.
Communications and preferences: enquiries, support requests, complaint details, marketing preferences, and responses to surveys or forms.
3.2 Sensitive Information
Health information (e.g., pre-employment medicals) and criminal history information (e.g., security industry screening) may be collected with your consent or where required or authorised by law (for example, to satisfy security licensing or site-access requirements). We handle sensitive information in accordance with the APPs and applicable state-based security licensing laws.
3.3 Website, Device and Usage Data
Technical data: IP address, device identifiers, browser type and version, time zone setting, operating system, and platform.
Usage data: pages visited, navigation paths, referring/exit pages, session duration, interaction data, and other analytics about how you use our website and services.
Cookies and similar technologies: see Section 6.
4. How We Collect Personal Information
We usually collect personal information directly from you, including when you:
submit an enquiry via our website, email, phone, post, or in person;
complete forms (e.g., account applications, site access forms, event registrations, surveys, promotions);
subscribe to newsletters, alerts, or marketing communications;
apply for employment, contracting, or work experience;
engage with us on social media; or
transact with us as a customer or supplier.
We may also collect information from third parties where it is unreasonable or impracticable to collect it directly from you, for example:
recruitment agencies, referees, and background screening providers;
medical service providers (pre-employment or site access assessments);
customers, suppliers, and contractors in the course of providing or receiving services;
publicly available sources and government or regulatory bodies; and
analytics and service providers that support our website and business operations.
Where we collect information from third parties, we rely on them to have obtained your consent where required.
5. Why We Collect, Use and Disclose Personal Information
We collect, use, hold, and disclose personal information to:
Provide our products and services, including project delivery, support, maintenance, and fulfilment;
Verify identity (including for financial transactions, security licensing and accreditation, site access, and safety compliance);
Respond to enquiries, manage customer and supplier accounts, and administer contracts;
Recruit and manage personnel, including assessing candidates and meeting legal and safety obligations;
Operate, secure, and improve our website and systems, including analytics, testing, monitoring, and reporting;
Conduct training, events, and communications;
Send marketing communications (including direct marketing) about our services where permitted; you may opt out at any time (see Section 9);
Comply with laws, regulations, and law enforcement requests; and
Any other purpose notified at the time of collection, to which you have consented, or which is otherwise authorised by law.
When personal information is no longer required for these purposes, we will take reasonable steps to destroy or de-identify it, subject to legal and audit retention requirements.
6. Cookies, Analytics and Online Tracking
We use cookies and similar technologies (e.g., pixels, tags, local storage) to:
enable core site functionality (e.g., session management, security, forms);
remember your preferences; and
understand and improve site performance through aggregated analytics.
You can manage cookies via your browser settings, though some features of our website may not function properly if cookies are disabled.
We may use analytics tools and service providers to collect website and usage data described in Section 3.3. These providers may process data on servers in Australia or overseas (see Section 8).
7. Disclosing Personal Information
We may disclose personal information:
Within the Crossmuller group (e.g., to related companies or entities) for operational purposes consistent with this Policy;
To service providers who support our operations (e.g., IT hosting, cloud storage, analytics, payment processors, background screening, logistics/couriers, professional advisors, and business support services);
To customers, suppliers, contractors, and site operators where necessary for project delivery, site access, safety, and compliance;
To law enforcement, regulators, and government authorities as required or authorised by law; and
With your consent or as otherwise notified at the time of collection.
We require third parties who handle personal information on our behalf to use appropriate confidentiality, privacy, and security safeguards.
8. Overseas Disclosures
Some service providers or systems we use may be located, or may store information, outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient will handle it in a manner consistent with the APPs (for example, through contractual safeguards).
9. Direct Marketing and Your Choices
We may send you information about our products, services, events, and initiatives that we believe may be of interest. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us (see Section 13). Even if you opt out of marketing, we may still send service or transactional communications where permitted by law.
10. Security of Your Information
We hold personal information in electronic and paper-based records and take reasonable steps to protect it from loss, misuse, unauthorised access, modification, or disclosure, including during secure destruction. Measures we take include, as appropriate:
password-protected systems, access controls, role-based permissions, encryption in transit and/or at rest;
firewalls, anti-malware, logging, monitoring, and intrusion detection/prevention;
staff confidentiality obligations and training; and
physical and logical controls tailored to internal and external threat risks.
No system can be guaranteed as completely secure. If a data breach occurs that is likely to cause serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme where applicable.
11. Access to and Correction of Personal Information
You may request access to, or correction of, your personal information we hold. To do so, please contact the Privacy Officer (see Section 13). We may need to verify your identity before actioning your request.
We aim to respond within 30 days. We may charge a reasonable fee where permitted by law if your request requires substantial effort. If we refuse access or correction (for example, due to legal restrictions), we will provide a written explanation and information on how to complain.
12. How Long We Keep Your Information
We retain personal information for as long as necessary to fulfil the purposes outlined in this Policy, including to satisfy legal, accounting, audit, and compliance requirements. When no longer needed, we take reasonable steps to destroy or de-identify the information.
13. How to Contact Us
Privacy Officer
Email: privacyofficer@borgs.com.au
Mail: Privacy Officer, 2 Wella Way, Somersby NSW 2250, Australia
14. Complaints
If you have concerns about how we have handled your personal information, please contact our Privacy Officer (details above). We will investigate and respond in writing with the outcome.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). Contact details are available on the OAIC website or via their enquiries line.
15. Third-Party Sites and Services
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy statements of every website and service you interact with.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes take effect when posted on our website. If we make material changes, we will note this at the top of the Policy (and may take additional steps to inform you where appropriate). Please review this Policy periodically.
17. Additional Information for Candidates and Site Visitors
Where you apply for roles with Crossmuller Security or require site access, we may collect additional information (e.g., licences, certifications, right-to-work checks, medicals, criminal history checks) with your consent or where required by law or site operator policy. We will provide you with further notices where required.
18. Children’s Privacy
Our services are generally not directed to children. If you believe we have collected personal information about a child without appropriate consent, please contact the Privacy Officer so we can take appropriate steps.
By using crossmullersecurity.com.au or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.