Privacy Policy
SPC GLOBAL HOLDINGS LIMITED ACN 150 015 446
Last updated April 2026
1. INTRODUCTION
This Privacy Policy (Policy) sets out how SPC Global Holdings Ltd and each of its Related Bodies Corporate and subsidiaries (the Company) collect, use, disclose and hold your Personal Information; how you can access or correct your Personal Information that is held by us; how you can lodge a complaint and how we will deal with it. SPC Global Group or ‘we’ in this policy refers to each of the above businesses.
2.YOUR PERSONAL INFORMATION IS IMPORTANT
We are subject to the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs) (together, Privacy Laws) and the Spam Act 2003 (Cth), and all statutory amendments such as those introducing tiered penalties, a statutory tort for serious privacy invasions, and frameworks for children’s online privacy.
Privacy Laws regulate the collection and use of “Personal Information”, which includes information or an opinion which identifies you as an individual or from which you can be reasonably identified.
We comply with enhanced enforcement measures under the Privacy Act, including increased penalties for breaches and Office of Australian Information Commissioner’s (OAIC) expanded powers to investigate and share information with regulators.
3. COLLECTING PERSONAL INFORMATION
We only collect Personal Information where the information is reasonably necessary for one or more of our functions or activities. We collect Personal Information by various means, including, but not limited to: when you view our website or social media sites; fill in a form; send us an e-mail; enter a competition or speak to one of our representatives. This information may include (but is not limited to) your name, e-mail and mailing addresses, contact numbers, and date of birth. We may also collect information about how you interact with our websites and social sites to help us to develop and improve them.
We will only collect Personal Information about you from third parties when it is unreasonable or impracticable to collect it from you directly, or when you have given us permission to do so.
If you provide us with certain services, for example as a contractor or consultant, we may collect your Personal Information and, in some circumstances, sensitive information such as driving records or medical certificates.
If you provide Personal Information to us about someone else, you must ensure that you are entitled to disclose that information to us. For example, you should take reasonable steps to ensure that the individual concerned is aware of the various matters detailed in this Privacy Policy and has consented to the collection, use and disclosure of their Personal Information as described in this Privacy Policy.
We do not knowingly collect Personal Information from children under 18 without parental consent. If we become aware of such collection, we will take steps to delete it. We commit to complying with the upcoming Children’s Online Privacy Code, including age-appropriate practices and enhanced protections.
4. USING PERSONAL INFORMATION
We use your Personal Information for the purpose for which it has been provided, any other purpose you have consented to, and any other purpose permitted under the Privacy Laws. The primary purpose for which we collect, use and disclose Personal Information is to manage our operations and promote our business. This may include using your Personal Information for any of the following purposes:
- to provide you with information about our products, services and promotions (including direct marketing);
- to assess your application for employment, contracting or consulting services;
- to accept your application to participate in promotions or competitions run by us;
- so that you can provide us with services;
- for the handling of complaints and responding to feedback or concerns you have about our products or services;
- to review, develop and improve the products and services we offer, including conducting market research, data analytics and statistical analysis in relation to our business;
- to facilitate corporate transactions like mergers and acquisitions, such as to assess those transactions and manage the transition of the business;
- for interacting with regulators and relevant government entities;
- to ensure compliance with our legal and regulatory obligations; and,
- as otherwise required or permitted by law.
If you provided consent for us to send you marketing or promotional information and you no longer wish to receive such information, you can unsubscribe at any time. Instructions on how to unsubscribe are set out in all marketing communications that we send to you, or you can contact us through our Privacy Officer using the contact details below. Please allow a reasonable period of time for us to action any request to unsubscribe. There are, however, some service and transactional messages that we must be able to send you. These include, for example, messages relating to product recall notices. Such messages will not contain any marketing or promotional information.
We will not sell to any third party any Personal Information that you provide to us. We prohibit malicious disclosures or doxxing of Personal Information that could lead to harm.
5. ANONYMITY
You have the option to engage with us anonymously. However, without your Personal Information we may not be able to provide our products or services to you, or make some offers available to you.
If we do not collect the Personal Information listed above, it may also limit our ability to engage you as an employee, contractor or business partner.
6. DISCLOSURE OF INFORMATION
We may disclose your Personal Information to third parties for the purposes described above. This may include disclosing information to:
- our related entities;
- third party organisations such as our business partners, advertising partners, mailing and printing houses, IT providers, analytics providers, professional advisors and other service providers; and/or
- anyone who is considering acquiring an interest in our assets or businesses (or any part of them) as part of a due diligence or sale process.
We will only disclose your Personal Information for other purposes if you consent, if we are required or authorised by law to do so or where the disclosure is authorised under the Privacy Laws.
We do not generally disclose Personal Information to entities located overseas outside of our Company. In the unlikely event that we do need to disclose information to third parties overseas, we will take reasonable steps to ensure that the overseas recipient does not breach the Privacy Laws in its handling of your Personal Information.
7. COOKIES
Cookies are small pieces of text stored by your web browser. Our websites and social sites use cookies to connect you and the information you have provided to deliver personalised content and a better experience when you return to the website or a social site. Most internet browsers automatically accept cookies, although you can choose to disable them (however, you may then lose some functionality). For further information about managing and disabling browser cookies, you should refer to your internet browser’s help section or user guide.
We may use cookies, pixels, or similar technologies for analytics and personalisation. You can manage preferences via browser settings or our consent tools.
8. SECURITY OF PERSONAL INFORMATION
We take reasonable steps to secure all Personal Information that we hold about you and to keep this information accurate and up-to-date. Personal Information is stored either electronically or in hard copy, and information security measures are in place to protect this information from misuse, interference and loss. We implement a range of measures, including people, process, and technology controls to protect the security of your Personal Information. Our security controls are continually reviewed in order to protect your Personal Information appropriately.
Our websites do not provide facilities for the secure transmission of information across the internet. Users should be aware that there are inherent risks in transmitting information across the internet.
We will take such steps that are reasonable in the circumstances (if any) to destroy or de-identify personal information when it is no longer required for the purpose(s) for which it was provided.
9. DATA BREACH NOTIFICATION
In the event of an eligible data breach (where unauthorised access, disclosure, or loss of your personal information is likely to result in serious harm), we will notify you, other affected individuals, and the OAIC as required under the Privacy Act. We maintain incident response plans to assess and respond to breaches promptly.
10. ACCESS TO OR CORRECTION OF PERSONAL INFORMATION
You may request access or changes to your Personal Information held by us. To do this, please contact us through our Privacy Officer using the contact details below.
We will respond to your requests for access or correction within a reasonable period of time after the request has been made. In general, we will allow you access to the Personal Information we hold about you, unless a specific exception applies, and we will take such steps as are reasonable to provide you with the information in the form you require. We may need to verify the accuracy of new information that you provide to us before making corrections to your personal information held by us.
There may be situations where we are not able to provide you with access to your Personal Information, such as where the request relates to an existing or anticipated legal proceeding. If we deny you access to any Personal Information following an access request or provide you with access not in the manner requested by you, we will give you written notice that will set out the reasons for the denial and the mechanisms available to you to complain about our refusal.
We will not charge any fee for the provision of this information, except when we are required to spend an unreasonable amount of time or effort to provide you with the information. If there is a charge, it will not be excessive and will not apply to the making of the request.
11. INTERNATIONAL COMPLIANCE
In some cases we collect Personal Information from our operations outside of Australia for the purposes of data processing and storage (including if applicable, to fulfil any orders you have placed with us). Depending on the location of the order, brand or office you engage with or register with, transfers of your Personal Information may be made to Australia, UK, Singapore, Hong Kong and other locations where we operate. We will take steps to ensure that your Personal Information is appropriately protected and is processed only in accordance with this Policy.
Relevant laws which govern the collection and use of your Personal Information in the areas in which we operate include:
- In Singapore, the Personal Data Protection Act;
- In Hong Kong, the Personal Data (Privacy) Ordinance; and
- In the UK and throughout Europe, the UK’s Data Protection Act and the General Data Protection Regulation (GDPR).
12. WHAT TO DO IF YOU HAVE A COMPLAINT OR A QUESTION
If you would like further information about how we manage your Personal Information, have any queries or feedback relating to this Policy, or wish to lodge a complaint, please contact our Privacy Officer by:
- calling 1800 805 168 (AU) or 0800 441 050 (NZ)
- sending an e-mail to privacy@spcglobalgroup.com; or
- writing to the following address: SPC Global, Attention: Privacy Officer, Level 6, 501 Swanston Street, Melbourne, Victoria 3000.
Our Privacy Officer is responsible for coordinating the investigation of any complaints and resolving privacy-related issues. The Privacy Officer will manage any complaints received in a timely manner and provide you with a response. If you are not satisfied with our response, you may take your complaint to the Office of the Australian Information Commissioner, contactable by telephone on 1300 363 992, via the OAIC website at www.oaic.gov.au, or by email at enquiries@oaic.gov.au.
In addition to OAIC complaints, you may pursue court remedies under the Privacy Act’s statutory tort for serious privacy invasions.
13. CHANGES TO THIS PRIVACY POLICY
From time to time, it may be necessary for us to review and revise this Policy. We reserve the right to amend this Policy at any time and to notify you by posting an updated version of the Policy on our websites.
14. DEFINITIONS
In this Policy these words or phrases have the following meaning:
GDPR means General Data Protection Regulation (UK).
OAIC means the Office of Australian Information Commissioner.
Personal Information means information or an opinion which identifies a person as an individual or from which a person can be reasonably identified.
Privacy Officer means the General Counsel & Company Secretary.