Revision 1.0

 

1.    Classification

This document is classified Public.

​

2.    Purpose, Scope, and Users

This Website Privacy Policy explains how RCC National Pty Ltd (RCC, RCC National, we, us or our) collects, holds, uses, discloses and protects personal information through our website at www.rccnational.com.au. This includes our website forms, website enquiries, our Work With Us and trade application process, and any restricted member, subcontractor, supplier or trade portal made available through the website.
We have prepared this policy having regard to the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth) and other applicable Australian privacy, data security and recordkeeping obligations.

This policy applies to everyone who interacts with RCC through the website, including website visitors, customers, insured persons, property owners, trade applicants, subcontractors, suppliers, portal users, business representatives and other individuals. It should be read together with our Website Terms and Conditions and our Accessibility Statement. RCC also maintains separate internal privacy processes (including its Employee Privacy Policy and business Privacy Policy RCC-POL-002) that apply to its other systems, records and business activities.

 

3.    How to contact us about privacy

If you have a privacy enquiry, wish to access or correct your personal information, or wish to make a privacy complaint relating to this website, please contact us using the details below. Your enquiry will be directed to the appropriate RCC team for handling.

Contact details:
RCC National Pty Ltd
Address:  8/119–133 McEvoy Street, Alexandria NSW 2015
Phone:  1300 381 381
Email:  info@rccnational.com.au

 

4.    Browsing anonymously or using a pseudonym

You can browse most parts of our website without telling us who you are. However, if you submit a website form, ask us to respond to an enquiry, apply to work with RCC, or request access to a restricted portal, we will usually need your correct contact details and other relevant information so that we can respond to you, verify your request, assess your application or provide access. In these cases it is not practicable for us to deal with you anonymously or under a pseudonym.

 

5.    Personal information we collect through the website

The personal information we collect depends on how you use the website and which forms you submit. We also provide a short privacy collection notice near the submit button on our website forms, which links to this policy. The main categories of information we collect are set out below.

General website and technical information
When you visit the website, we and our service providers may collect technical and usage information, such as IP address, device type, browser type, operating system and general location information; pages visited, links selected, dates and times of access and referral sources; information from cookies, analytics, security and similar technologies; and information generated by tools that help protect the website from spam, misuse, unauthorised access and automated submissions.

Customer Contact Form
If you submit our Customer Contact Form (general enquiry form), we collect your name, email address, mobile or contact phone number, and the details of your enquiry, including any information you choose to include in the free-text message field. Please do not include unnecessary sensitive information in the free-text field. If your matter is urgent or involves an immediate risk to life, health, safety or property, please contact emergency services on 000, or call RCC on 1300 381 381.

Work With Us and trade application form
If you submit our Work With Us form (trade, subcontractor or supplier application), we collect the business and personal information needed to assess your application and manage supply chain risk. This form contains required fields and allows you to upload supporting documents. The information may include business name, trading name, ABN or ACN, entity type and contact details; the name, position, email and phone number of your nominated contact; service regions, trade categories and capability information; licence, registration, accreditation, insurance and qualification information; work health and safety, environmental, quality, risk and compliance information; regulatory, claims, litigation or insolvency information relevant to supplier assessment; and supporting documents you upload, such as contractor licences and insurance certificates. Because an application may be submitted by a sole trader, partner, director, officer, employee or nominated contact, some of this information may also be personal information about an individual.

Restricted member, subcontractor or supplier portal
RCC may provide a restricted portal for approved trades and suppliers. To request and manage portal access, we collect and use information such as business name, your first and last name, your email address, your portal access status and approval records, login and access records, and communications relating to your portal access. Access is requested by the trade and is manually approved by RCC, after RCC checks the request against its existing supply chain and trade records to confirm the business is a current RCC trade. RCC may refuse, suspend or remove access where reasonably necessary for security, compliance, document control or supply chain management. Documents made available through the portal are general or standard documents relevant to RCC’s trades, and the portal is not used to store documents specific to an individual trade, claim or project.

Sensitive information
Sensitive information includes information such as health information, membership of a professional association or trade union, criminal record information and certain regulatory or legal information. We do not seek sensitive information through our Customer Contact Form. We may collect some sensitive information through the Work with Us process where it forms part of the licensing, insurance, regulatory or compliance information you provide, and only where this is reasonably necessary for assessing your application and permitted by law. If you voluntarily provide sensitive information, you consent to RCC collecting and using it for the purpose for which you provided it, unless we are otherwise required or permitted by law to handle it.

​

6.    How we collect personal information

We may collect personal information directly from you when you use the website, submit a form, upload a document, send an email, call us or request portal access; from the business, employer or principal you represent, or from your nominated contact person; from RCC’s existing customer, supply chain, contractor, compliance and business records; from public registers and verification sources, such as ABN, licence, accreditation, insurance and regulatory registers, where relevant to assessing a trade application; and from RCC’s website hosting, security, email and technology service providers.

 

7.    Why we collect, use and disclose personal information

We collect, use and disclose website-related personal information for purposes including responding to website enquiries and customer service matters; assessing Work With Us, trade, subcontractor and supplier applications; verifying business details, licences, insurance, accreditations and compliance information; managing RCC’s supply chain, trade partner records and access to the restricted portal; operating, securing, maintaining and improving the website and the restricted portal; detecting, preventing and responding to spam, fraud, cyber threats, unauthorised access and misuse; meeting RCC’s legal, regulatory, safety, insurer, contractual, audit and recordkeeping obligations; managing complaints, incidents, investigations and legal claims; and sending service, operational, administrative and security communications. We will only use and disclose personal information for a purpose set out in this policy, for a directly related purpose you would reasonably expect, or where you have consented or we are otherwise required or permitted by law.

 

8.    Marketing and promotional communications

RCC does not use personal information collected through the website to send newsletters, marketing or promotional communications. We may use your contact details to send communications that relate to your enquiry or application, or that are operational, administrative or security-related in nature. If this position changes in the future, we will only send marketing electronic messages where permitted by the Spam Act 2003 (Cth) — that is, where we have an appropriate consent or other lawful basis — and every such message will identify RCC as the sender and include a working unsubscribe option.

 

9.    Who we disclose personal information to

We may disclose personal information where reasonably necessary for the purposes described in this policy, including to:

•    RCC personnel who need the information to perform their role, on a need-to-know basis (for example, customer service, compliance, supply chain, operations, IT and management);

•    RCC’s technology and service providers, including Wix as our website hosting and platform provider, and our email, cloud storage, security and business-system providers, who handle the information on RCC’s behalf under appropriate arrangements;

•    external website developers or support providers, where access is approved and required for website development, maintenance or support;

•    where your enquiry relates to a specific insurance claim, project or service, the insurer, client or other party involved in that matter, where reasonably necessary to respond to or progress your enquiry;

•    regulators, government agencies, law enforcement bodies, courts and tribunals, where required or authorised by law;

•    RCC’s professional advisers, such as legal advisers and auditors; and

•    other parties where you have consented or disclosure is otherwise permitted by law.

Information submitted through the Work With Us process is assessed internally by RCC. We do not disclose Work With Us application information to insurers, clients or other external parties for the purpose of assessing or approving your application. RCC does not sell personal information, and access to the restricted portal is limited to approved users.

 

10.    Website form submissions, email routing and storage

Submissions from our website forms are sent to RCC by email: Customer Contact Form submissions are sent to info@rccnational.com.au, and Work With Us, trade or subcontractor form submissions are sent to trades@rccnational.com.au. Form submissions are held on the website platform (Wix) for a short period — currently around two days — and are then automatically deleted from the website. After a submission is emailed to RCC, the information is retained in RCC’s email systems and may be transferred into RCC’s internal records and business systems so that the enquiry or application can be actioned, assessed and recorded. Access to the info@ and trades@ mailboxes is restricted to authorised RCC personnel on a need-to-know basis, and access is reviewed periodically.

 

11.    Website hosting, Wix and other technology providers

Our website is hosted on Wix. Wix and its related service providers may process, store, secure and transmit website-related information as part of providing website hosting, forms, account security, portal, analytics and support services. We may also use other technology service providers, such as email, cloud storage, security, anti-spam, support and business-system providers. These providers may have their own privacy, security and data-handling arrangements, and we take reasonable steps to select and manage providers that are appropriate to the nature of the information and services involved.

 

12.    Overseas storage and disclosure

Because our website is hosted on Wix and we use cloud-based technology services, personal information collected through the website may be stored or processed outside Australia. Based on information made available by Wix, Wix may store or process website-visitor information in locations including the United States of America, Ireland, South Korea, Taiwan and Israel, and may use other countries where necessary to provide its services or comply with law. Other service providers we use may store or process information in Australia or overseas. Where we disclose personal information to an overseas recipient, we will take the steps required of us by the Australian Privacy Principles, unless an exception applies.

 

13.    Cookies, analytics and similar technologies

The website may use cookies, analytics tools, security tools, anti-spam tools, log files and similar technologies to help us operate the website, understand how it is used, protect it from misuse, and improve its content and performance. These generally fall into essential cookies needed for website operation, security and portal functionality; performance or analytics cookies used to understand website traffic; functional cookies used to remember settings; and marketing or third-party cookies, where enabled. At launch, the website is not expected to use analytics or marketing cookies. RCC intends to enable standard website analytics and business tools provided by Google (such as Google Analytics and Google Business tools) to understand website use. The website does not use social media tracking pixels, and RCC reviews its cookie and analytics settings before changes are made to the live website. Where required, we may use a cookie banner or privacy-settings tool to help you manage non-essential cookies, and you can also control cookies through your browser settings, although some parts of the website may not work as intended if cookies are disabled.

 

14.    How we store and protect personal information

We take reasonable technical and organisational steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure. Depending on the context, these steps include using reputable website hosting and cloud technology providers; requiring two-factor authentication for website administrator accounts where available; restricting administrator and collaborator access based on role and need; removing or restricting external developer access after the website goes live, except where temporary access is approved for support or development; using manual approval for restricted portal access; using access controls, email security, monitoring, backups, logging and secure configuration; reviewing the security and assurance information of our hosting and technology providers; and briefing and training personnel on privacy and information security. No website, email system or internet transmission is completely secure, so please take care when submitting information online and avoid including unnecessary sensitive information in free-text fields.

 

15.    How long we keep personal information

We keep personal information for as long as it is reasonably required for the purposes for which it was collected — including responding to enquiries, assessing applications, managing supply chain and portal access, meeting our legal, insurer, contractual and operational requirements, managing complaints and disputes, and maintaining records for audit and assurance. As noted above, website form submissions are automatically deleted from the website platform after a short period. Information held in RCC’s email systems and internal records is retained and managed in accordance with RCC’s records management and retention requirements, which may differ depending on the type of record and its legal or business context. When personal information is no longer required for any lawful purpose, we take reasonable steps to destroy, securely archive or de-identify it.

 

16.    Accessing and correcting your personal information

You may ask us for access to the personal information we hold about you, or ask us to correct information you believe is inaccurate, incomplete, out of date, irrelevant or misleading. Please send your request to info@rccnational.com.au. We may need to verify your identity before we respond. We will respond within a reasonable period and handle your request in accordance with the Privacy Act. There is no fee to make a request, although we may charge a reasonable administrative fee for giving access where permitted by law. If we refuse access or correction in a circumstance permitted by law, we will give you reasons where we are required to do so.

 

17.    Privacy complaints

If you have a concern or complaint about how we have handled your personal information, please contact us at info@rccnational.com.au and include enough information for us to understand and investigate your concern. We will aim to acknowledge your complaint promptly and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

 

18.    Data breaches

If we become aware of a data breach involving personal information, we will take reasonable steps to contain, assess, remediate and review the incident. Where we are required to notify affected individuals and the OAIC under the Notifiable Data Breaches scheme, we will do so in accordance with the Privacy Act.

 

19.    Automated decision-making

Portal access and Work With Us applications are assessed and approved manually by RCC. We do not use personal information collected through the website to make solely automated decisions that could reasonably be expected to significantly affect an individual’s rights or interests. If this changes, we will review and update this policy and our related privacy notices.

 

20.    Children and young people

The website is not directed to children. We do not intentionally collect personal information from children through the website, unless it is provided by a parent, guardian or authorised person, or is reasonably required in connection with a service, enquiry or legal obligation. If you believe a child has provided personal information to us through the website without appropriate authority, please contact us at info@rccnational.com.au.

​

21.    Links to other websites

The website may contain links to third-party websites, registers, platforms or services. We are not responsible for the privacy, security or content practices of third-party websites or services that we do not control. We encourage you to review the privacy policies and terms of any third-party website or service you access.

​

22.    Changes to this Privacy Policy

We may update this Website Privacy Policy from time to time to reflect changes in the law, technology, website functionality, our processes, our service providers, our cookie or analytics settings, our security practices or our business requirements. The updated version will be published on the website and will apply from the effective date stated in it. We encourage you to review this policy periodically.

​

23.    Contact us

For privacy enquiries, access or correction requests, complaints or questions about this policy, please contact:

Contact details
RCC National Pty Ltd
Address:  8/119–133 McEvoy Street, Alexandria NSW 2015
Phone:  1300 381 381
Email:  info@rccnational.com.au