Privacy Policy
Introduction
This privacy policy explains how Coffs Coast Drones (Project Z Pty Ltd) manages personal information collected through its website and online services. The company commits to protecting customer privacy and complying with Australian privacy laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs).
1. Scope and Application
The policy applies to personal information collected via the website, online forms, and digital services from customers, prospective customers, and website visitors. It complies with Commonwealth and NSW privacy legislation, including the Notifiable Data Breaches scheme and statutory privacy tort protections.
2. Key Definitions
- Personal Information: Information about an identified or reasonably identifiable individual.
- Sensitive Information: Data regarding racial/ethnic origin, political opinions, religious beliefs, sexual orientation, health, and biometric information.
- Eligible Data Breach: Unauthorized access likely causing serious harm to individuals.
3. Types of Personal Information Collected
The company collects:
- Contact details (name, address, email, phone)
- Account registration information
- Payment and transaction data
- Website usage analytics (IP address, browser type, cookies)
- Communications records
- Voluntarily provided information
Sensitive information is not intentionally collected unless legally required or explicitly consented to.
4. How We Collect Personal Information
Information is collected:
- Directly through forms, account registration, and inquiries
- Automatically via cookies, web beacons, and analytics
- From third-party service providers (payment processors, analytics platforms)
- From publicly available sources where lawful
5. Purposes for Collection and Use
Personal information is collected to:
- Provide and improve products and services
- Communicate regarding inquiries and orders
- Ensure website security and integrity
- Comply with legal obligations
- Manage business operations
- Conduct analytics and performance monitoring via third-party services (Google Analytics, Meta, Automattic, Elsner Technologies)
- Fulfill purposes disclosed at collection or as permitted by law
We do not sell your personal information to third parties.
6. Cookies and Tracking Technologies
The website uses cookies to enhance browsing experience and analyze traffic. Users may adjust browser settings to refuse cookies, though this may affect website functionality. Third-party service privacy policies govern their data use practices.
7. Third-Party Services and Overseas Disclosure
Service providers include Google Analytics, Meta, Automattic, and Elsner Technologies Pvt. Ltd. Data may be processed outside Australia. The company takes reasonable steps to ensure overseas recipients comply with Australian Privacy Principles through due diligence, contractual safeguards, and regular review.
8. Data Security and Protection Measures
Security measures include:
- Secure hosting with encrypted transmission (HTTPS/SSL)
- Access controls and authentication
- Regular security audits and penetration testing
- Current firewalls and anti-virus systems
- Secure physical and electronic record storage
- Staff privacy training
- Incident response and breach management plans
Third-party providers must implement comparable security measures.
9. Data Retention and Destruction
Personal information is retained only as long as necessary for collection purposes or as legally required. When no longer needed, information is securely destroyed or de-identified unless retention is required by law or for legitimate business purposes such as dispute resolution. Retention periods vary by information type (e.g., financial records may be retained up to seven years).
10. Access to and Correction of Personal Information
Individuals may request access to or correction of held personal information under APPs 12 and 13. Requests should be directed to the Privacy Officer. Access is generally free; complex requests may incur a reasonable administrative fee of $15 AUD. The company aims to respond within 30 calendar days and will provide written reasons if refusing requests.
11. Anonymity and Pseudonymity
Where lawful and practicable, individuals may interact anonymously or using a pseudonym, though some services may require real identity verification.
12. Children’s Privacy
The website is not specifically directed at children under 16. The company does not knowingly collect children’s personal information without appropriate consent and will comply with forthcoming Children’s Online Privacy Code requirements.
13. Automated Decision-Making
The company does not currently use fully automated decision-making affecting individual rights. Future implementations will include transparency requirements regarding personal information used, decision types, and rights to human review. Compliance with new transparency requirements begins December 2026.
14. Data Breaches and Notifiable Data Breach Scheme
A Data Breach Response Plan requires:
- Assessment within 30 days of discovering eligible breaches
- Remedial action to contain and mitigate harm
- Notification to affected individuals and the OAIC as soon as practicable
- Public communication if direct notification is impracticable
15. Disclosure of Personal Information
15.1 General Disclosures
We do not sell, rent, or trade your personal information. Disclosure occurs only to:
- Trusted service providers and partners
- Law enforcement, courts, or regulatory authorities as legally required
- Protect rights, property, or safety
- With explicit consent or as permitted by law
Third-party recipients must comply with privacy laws and implement appropriate security.
15.2 Overseas Disclosures
Service providers located in the United States, India, and other jurisdictions receive personal information. The company takes reasonable steps ensuring overseas recipients comply with APPs through due diligence, contractual arrangements, informed consent, and reliance on substantially similar privacy law exceptions. The company remains accountable for overseas recipients’ handling unless exceptions apply.
16. Legal Basis for Collection, Use, and Disclosure
Personal information is collected, used, and disclosed:
- With consent
- When necessary to perform contracts or provide services
- To comply with legal obligations
- To protect vital interests
- For legitimate business interests not overriding individual rights
No direct marketing occurs without consent or opt-out ability.
17. Contact Information
The Privacy Officer
Coffs Coast Drones, Project Z Pty Ltd
92–96 Industrial Drive
North Boambee Valley NSW 2450
Email: privacy@projectz.com.au
Response time typically 30 days.
18. Complaints and Dispute Resolution
Individuals may lodge written complaints with the Privacy Officer. If unsatisfied with responses, complaints may be submitted to the Office of the Australian Information Commissioner:
- Phone: 1300 363 992
- Email: enquiries@oaic.gov.au
19. Limitation of Liability and Protective Language
To the fullest extent permitted by law, Coffs Coast Drones and Project Z Pty Ltd exclude all liability for loss or damage from website use or personal information handling, except where liability cannot be excluded under consumer law. The company is not responsible for third-party website privacy practices and does not accept liability for unauthorized third-party access except where legally required.
20. Changes to This Privacy Policy
The policy may be updated to reflect practice, legal, or business changes. Updated versions appear on the website with effective dates. Material changes trigger email or website notice where practicable.
21. Additional Information and Resources
References provided to Office of the Australian Information Commissioner, Australian Privacy Principles Guidelines, Privacy Act 1988 (Cth), and NSW Privacy and Personal Information Protection Act 1998.
22. Acknowledgement of Third-Party Privacy Policies
Third-party services include Google Analytics, Meta, Automattic, and Elsner Technologies, each with independent privacy policies users are encouraged to review.
23. Effective Date
Effective 6 November 2025; supersedes all previous versions.
24. Additional Legal Notices
Governed by New South Wales and Commonwealth law with exclusive jurisdiction in NSW and Commonwealth courts.