Privacy Policy

1. About this policy

SustainTrue Pty Ltd (ABN 28 694 427 579) (“SustainTrue”, “we”, “us”, “our”) operates the SustainQ platform and the sustaintrue.com and sustainq.com.au websites. This Privacy Policy describes how we collect, hold, use, and disclose personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy should be read alongside our Disclaimer, which sets out the terms under which information on our website and platform is provided.

2. What personal information we collect

We may collect personal information that is reasonably necessary for our business functions and activities. This may include:

• Name, email address, phone number, and job title
• Organisation name and business details
• Information provided through contact forms, demo requests, or survey responses
• Technical information such as IP address, browser type, and usage data collected through cookies and similar technologies
• Information provided in the course of using the SustainQ platform, including sustainability-related data submitted by or on behalf of your organisation

We do not collect sensitive information (as defined under the Privacy Act) unless required for a specific purpose and with your consent.

3. How we collect personal information

We generally collect personal information directly from you when you:

• Request a demo, submit an enquiry, or subscribe to communications
• Create an account or use the SustainQ platform
• Interact with our website

We may also collect information from publicly available sources or from third parties where you have consented to such disclosure.

4. How we use personal information

We may use personal information for purposes including:

• Responding to enquiries and providing our services
• Administering and improving the SustainQ platform
• Communicating with you about our services, updates, and relevant regulatory developments
• Internal research, analytics, and service improvement
• Complying with legal obligations

We will not use your personal information for purposes other than those outlined in this policy without your consent, unless required or authorised by law.

5. Disclosure of personal information

We may disclose personal information to:

• Our service providers who assist in delivering our services (including hosting, analytics, and communication platforms)
• Professional advisers (legal, accounting, auditing)
• Regulatory authorities, where required by law

We do not sell personal information to third parties.

6. Cross-border disclosure

The SustainQ platform infrastructure may involve the storage or processing of data in jurisdictions outside Australia. Where personal information is transferred overseas, we take reasonable steps to ensure that overseas recipients handle personal information in accordance with the APPs.

The SustainQ platform is built on infrastructure that meets the requirements of the EU General Data Protection Regulation (GDPR) and the US California Consumer Privacy Act (CCPA), which impose standards that are generally more stringent than the Australian Privacy Act. This provides an additional layer of protection for your personal information.

7. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include access controls, encryption, and secure hosting environments. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Cookies and analytics

Our website may use cookies and similar technologies to improve user experience and collect usage data. You can manage cookie preferences through your browser settings.

9. Access and correction

You may request access to or correction of your personal information held by us. We will respond to requests within a reasonable timeframe and in accordance with the Privacy Act. We may refuse access or correction in circumstances permitted by law, and will provide reasons for any refusal.

10. Complaints

If you believe we have breached the APPs or handled your personal information inappropriately, you may lodge a complaint with us at the contact details below. We will acknowledge your complaint and investigate it within a reasonable timeframe. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will publish any updated version on our website. We encourage you to review this policy periodically.

12. Contact

For privacy-related enquiries or to exercise your rights under this policy, contact our Privacy Officer:

Email: contact@sustaintrue.com

SustainTrue Pty Ltd