1. Introduction
This Privacy Policy explains how Rotation Group Limited and its subsidiaries (“we”, “us”, or “our”) collect, use, disclose, and protect personal information obtained through our website.
We operate in Australia, New Zealand, and Canada, and comply with applicable privacy legislation in each region, including:
- The Australian Privacy Act 1988
- The New Zealand Privacy Act 2020
- Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
2. Information We Collect
We collect limited information through our website:
- Contact information when you use our contact forms (name, email, phone number)
- Usage data through cookies and similar technologies (IP address, browser type, pages visited)
3. How We Use Your Information
We use your information to:
- Respond to your enquiries or requests
- Improve website performance, design, and functionality
- Analyse website usage to enhance user experience
- Fulfil our legal and regulatory obligations
4. Third-Party Services and Data Transfers
To operate our website and deliver services to you, we rely on trusted third-party service providers. These partners help us with hosting, security, analytics, email delivery, spam protection, and backups. We disclose the following in the interest of transparency and compliance with privacy regulations in both Australia and Canada.
Website Hosting
Our website is hosted on secure servers located in Australia. This means that most personal data submitted through our site (such as contact form details) is stored and processed within Australia and subject to Australian privacy laws.
Third-Party Services We Use
We use the following third-party service providers, which may process your data outside of Australia or Canada:
| Provider | Purpose | Location | Data Processed | Policy |
|---|---|---|---|---|
Google Analytics | To monitor website usage and performance | USA / Global | This service may collect information such as your IP address, device information, pages visited, and browser type. | Google Privacy Policy |
Postmark | To securely deliver transactional emails, such as form submission confirmations | USA | Name, email, message content | Postmark Privacy Policy |
Cloudflare & Turnstile | For content delivery, security, and DDoS protection. Turnstile (also by Cloudflare) helps prevent spam through our web forms. | Global | These services may collect IP addresses and behavioural data to detect and block malicious activity. | Cloudflare Privacy Policy |
Backblaze | Website backups | USA | Backup of form submissions, limited website data | Backblaze Privacy Policy |
Microsoft 365 (Outlook) | To receive and store form submissions sent via email | Global | This may include names, email addresses, phone numbers, and other information you provide through our web forms. These emails are stored in our Microsoft-hosted mailboxes and may be processed or stored in data centres located outside of Australia or Canada. | Microsoft Privacy Statement |
Data Transfers Outside Australia and Canada
While we host our website in Australia, some personal data may be transferred to or processed in other jurisdictions (such as the United States) via the above-listed providers. Where this occurs, we take reasonable steps to ensure your data is handled in accordance with applicable data protection laws, including the Australian Privacy Principles (APPs) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
5. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience. You can manage cookie preferences through your browser settings.
6. Information Sharing
We do not sell your personal information to third parties.
We may share your data with:
- Third-party service providers listed above
- Government authorities, when legally required
7. Data Security
We implement reasonable administrative, technical, and physical security measures to safeguard your personal information against loss, misuse, and unauthorised access.
8. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.
9. International Data Transfers
As we operate in Australia, New Zealand, and Canada, your information may be processed in any of these countries. We ensure appropriate safeguards are in place when transferring data between these jurisdictions.
10. Your Privacy Rights
Depending on your location, you have rights regarding your personal information:
New Zealand Privacy Rights
- Right to access your personal information
- Right to correct inaccurate information
- Right to make a complaint to the Privacy Commissioner (privacy.org.nz)
Australian Privacy Rights
- Right to access and correct your personal information
- Right to make a complaint to the Office of the Australian Information Commissioner (oaic.gov.au)
Canadian Privacy Rights
- Right to access your personal information
- Right to correct your personal information
- Right to withdraw consent where applicable
- Right to file a complaint with the Privacy Commissioner of Canada (priv.gc.ca)
In the event of a data subject request, we will follow a process to verify your identity and will provide a response within 20 working days.
To exercise these rights, please contact our Privacy Officer using the details in the “Contact Us” section.
11. Data Breach Notification
In the event of a data breach, we will promptly assess the situation and notify affected individuals and relevant authorities as required under Australian, New Zealand, and Canadian law.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. The updated version will be indicated by an updated “Last updated” date at the top of this policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please use our contact us form, or contact our privacy officer directly at [email protected], Or via the Contact Form on our website.
