Capability Resources recognises the importance of protecting personal information and is committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Policy explains how personal information is collected, held, used, disclosed and protected.
Collection and Use of personal Information
Capability Resources collects personal information, including sensitive information where permitted by law, for the purpose of conducting its business activities. Personal information may be collected through employment applications, worker onboarding, client and supplier engagements, website forms, email correspondence, telephone conversations, tender processes, compliance activities and other business interactions.
Capability Resources will take reasonable steps to notify individuals of the purpose of collection and other matters required by the Privacy Act 1988 (Cth) at or before the time personal information is collected, or as soon as practicable afterwards.
Where it is unreasonable or impracticable to collect personal information directly from an individual, Capability Resources may collect information from third parties and will take reasonable steps to notify the individual of the circumstances of collection.
Personal information will be collected by lawful and fair means and only where reasonably necessary for Capability Resources' business activities.
If Capability Resources receives unsolicited personal information that could not otherwise have been collected in accordance with the Australian Privacy Principles and the information is not contained in a Commonwealth record, the information will be destroyed or de-identified as soon as practicable where lawful and reasonable to do so.
Where an individual chooses not to provide requested personal information, Capability Resources will advise the individual of any consequences that may affect its ability to provide services, engage the individual, or otherwise conduct business activities.
Capability Resources will only use or disclose personal information for the primary purpose for which it was collected, for related purposes that an individual would reasonably expect, with consent, or where otherwise authorised or required by law.
Capability Resources will only adopt, use or disclose government related identifiers in accordance with the Privacy Act 1988 (Cth).
Where lawful and practicable, individuals may choose not to identify themselves or may use a pseudonym when dealing with Capability Resources. However, in many circumstances this will not be practical due to legal, contractual, safety, employment, compliance or operational requirements.
Capability Resources may collect certain information automatically through its website, including through the use of cookies and similar technologies. Information collected may include IP addresses, browser type, operating system, device identifiers, pages viewed, website usage patterns and other interaction data. This information is used to analyse website traffic, improve website functionality and enhance the user experience.
Types of Information Collected
The types of personal information we may collect include names, addresses, email addresses, telephone numbers, employment history, qualifications, licences, training records, emergency contact details, identification details, payment information, and website usage information.
Sensitive Information
Capability Resources will only collect sensitive information where it is reasonably necessary for our business activities and with your consent, unless collection is otherwise authorised or required by law.
Use and Disclosure
Personal information is used for recruitment, employment administration, contractor management, supplier management, client service delivery, project management, compliance obligations, quality management, communications and business operations. Information will only be disclosed for the purpose for which it was collected, related purposes reasonably expected by the individual, with consent, or where required by law.
Direct Marketing
Capability Resources may use personal information to provide information about its services, business activities or other communications where permitted by law. Individuals may opt out of receiving direct marketing communications at any time by contacting Capability Resources or using any unsubscribe facility provided.
Data Quality and Security
Capability Resources takes reasonable steps to ensure that the personal information it collects, uses, holds and discloses is accurate, complete and up to date.
Capability Resources is committed to protecting personal information from loss, misuse, interference, unauthorised access, modification or disclosure.
Personal information may be held in physical records and electronic systems, including Microsoft 365 services and other business applications used by Capability Resources. Security measures may include user authentication, role-based access controls, multi-factor authentication, encryption, system monitoring and backups to help protect personal information from unauthorised access, use, disclosure or loss.
Capability Resources will not adopt, use or disclose an individual's government-related identifier as its own identifier, except where permitted or required by law, or where necessary to verify an individual's identity for legitimate business purposes.
Personal information will be retained only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory and business requirements. When personal information is no longer required, it will be securely destroyed, deleted or de-identified in accordance with the Capability Resources Quality Records Procedure and applicable legal obligations.
Data Breach
Capability Resources will comply with its obligations under the Notifiable Data Breaches Scheme contained in the Privacy Act 1988 (Cth). Where Capability Resources becomes aware of an eligible data breach involving personal information, it will assess the incident and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where required by law.
Overseas Disclosure
Personal information may be stored, processed, or accessed in Australia and in other countries where our cloud service providers operate data centres or provide support services, including jurisdictions such as the United States and Singapore. Capability Resources will take reasonable steps to ensure that overseas recipients handle personal information in accordance with the Australian Privacy Principles (APPs) or are otherwise subject to comparable privacy obligations.
Cookies and Analytics
Capability Resources may use cookies, web beacons, analytics tools, and similar technologies to improve the performance, functionality, and user experience of this website. These technologies may collect information about how visitors access and use the website, including browser type, device information, pages visited, time spent on pages, and referring websites. This information is generally collected in an aggregated and de-identified form and is used to analyse website traffic, measure the effectiveness of website content, improve website functionality, and support business operations.
By continuing to use this website, you consent to the use of cookies and similar technologies as described in our Privacy Policy. You may manage or disable cookies through your browser settings; however, doing so may affect the functionality and performance of this website. For further information about how Capability Resources collects, uses, stores, and protects personal information, please refer to our Privacy Policy.
Access and Correction of Information
You have the right to request access to, and correction of, the personal information that Capability Resources holds about you in accordance with the Privacy Act 1988 (Cth). Requests for access or correction must be made in writing using the contact details provided in this Privacy Policy. Capability Resources will respond to requests within a reasonable timeframe and will not charge a fee for making a request.
In certain circumstances permitted by law, Capability Resources may refuse a request for access to or correction of personal information. Where a request is refused, Capability Resources will provide written reasons for the decision and information about any available complaint or review mechanisms.
Complaints
If you believe that Capability Resources has breached your privacy or has not complied with the Privacy Act 1988 (Cth) or the Australian Privacy Principles, you may make a complaint by contacting Capability Resources using the details provided in this Privacy Policy.
Capability Resources has a Complaints Procedure for handling privacy complaints. All complaints will be investigated and responded to within a reasonable timeframe.
If you are not satisfied with our response or the outcome of your complaint, you may refer the matter to the Office of the Australian Information Commissioner (OAIC) for further consideration.
Privacy Contact
If you require further information about privacy, confidentiality, access to your personal information, or wish to make a complaint, please contact Capability Resources using the contact details provided in the footer of this document.
Capability Resources will communicate this Privacy Policy to workers and other relevant persons through the induction process and will make it available on Capability Resources SharePoint and website.
Issued date: 27 July 2026