Privacy Policy

Last Updated: March, 2026

1. Introduction

Welcome to GCG Pty Ltd (ACN 114988751) (“we”, “us” and “our”). This Privacy Policy explains how and why we collect, use, hold, disclose, and protect your personal information.

By accessing or using our services, products or website you consent to the practices described in this Privacy Policy. Please read this policy carefully to understand our privacy practices.

2. What is personal information?

Personal information is any information or opinion about an identified individual or an individual who can be reasonably identified from the information or opinion. It may be true or not and may or may not be recorded in material form.

Sensitive information includes information about an individual’s race or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation or practices, union or professional association membership, criminal record, health information, and biometric data.

3. What personal information do we collect and hold?

We collect personal information from you and about you when you interact with our website, marketing campaigns, products, services and/or when you contact us (e.g. call us, send us an email, or interact with us via social media).

The personal information we collect may include, but is not limited to:

• Name and job title
• Contact information including email address
• Demographic information such as postcode, preferences and interests
• Date of birth
• Purchase history and payment details
• IP address, browser type, device information
• Preferences and interests inferred from your interactions
• Sensitive information such as government IDs, race/ethnicity, medical conditions and assessments
• Photos or videos, with your consent

4. Exposi SaaS Platform

GCG operates a software-as-a-service (SaaS) platform called Exposi, which is designed to support clients in managing occupational hygiene information across their operations. When you interact with Exposi (as directed by your employer or contractor), we may collect personal information including:

• Time spent on pages
• Information you provide when requesting a demonstration
• Usage data from your interaction with the platform
• Preferences and interests inferred from your activity
• Feedback or support requests submitted via the platform

5. How we collect personal information

We collect personal information in several ways:

• When you provide it directly (e.g. via phone, website, paper forms, face-to-face)
• When you engage with us on social media
• From third parties (e.g. referees, identity verification services, your employer, public databases like ASIC)
• From our own records of interactions with you
• Through our SaaS products like the Exposi platform when you or your employer requests a demonstration or interact with its features (such as Exposi’s worker import feature)

6. Cookies and similar technology

We may use cookies and similar technology on our website to enhance your user experience. Cookies are small text files that are stored on your device when you visit our website. You can control the use of cookies through your browser settings.

We may also collect information about how you access, use, and interact with our website. We also use a range of other tools such as Google Analytics, Google Ads, HubSpot CRM, LinkedIn and Facebook pixels to collect information about how you use, access and interact with website. This information may include:

• The location from which you have come to the site and the pages you have visited
• Technical data, which may include IP address, the types of devices you are using to access
• the website, device attributes, browser type, language, and operating system

7. Why do we collect and use your personal information

We collect, hold, and use your personal information so that we can:

• Provide and improve our products and/or services
• Manage our relationship with you
• Communicate with you, respond to your enquiries or complaints and provide customer support
• Comply with our legal obligations and resolve disputes
• Identify and tell you about other products or services that we think may be of interest to you
• Consider you for any current or future employment opportunities
• Schedule and deliver product demonstrations for our products like Exposi
• Send promotional and marketing material about GCG, Exposi and related services
• Improve the functionality and user experience of Exposi
• Provide technical support when using Exposi

8. Security of personal information

We take reasonable steps to protect your personal information from unauthorised access, interference, disclosure, or destruction. We use secure encryption and follow industry best practices to safeguard your personal information.

We store most information about you in computer systems and databases (including cloud service providers) operated by either us or our external service providers. Some information about you is recorded in paper files that we store securely.

We will also take reasonable steps to destroy or de-identify personal information once no longer required, unless we are legally required to retain it.

9. Who do we disclose your personal information to, and why?

We may disclose personal information to:

• External service providers (e.g. delivery partners, IT providers, marketing agencies, auditors, lawyers)
• Financial institutions processing payments
• Referees for job applicants
• Purchasers in case of business sale
• Legal authorities if required by law
• Your employer if they have engaged us to provide a product or service to them

10. Disclosure to overseas recipients

We may disclose your personal information to recipients outside of Australia who are in the following countries: Canada, USA

11. Direct marketing

We may use your personal information to contact you with information about our products and/or services, promotions and events that may be of interest to you. We may contact you by email, mail, social media, or telephone.

You can opt out at any time by contacting us or using the unsubscribe facility.

12. Access to and correction of your personal information

You may request access to or correction of personal information that we hold about you by contacting us directly.

There is no charge for requesting access, but we may require you to meet reasonable costs in providing access (e.g. photocopying).

We will respond in a reasonable time and take steps to ensure your personal information remains accurate and up-to-date.

13. Complaints

If you have a complaint about the way in which we have handled any privacy issue, including your request for access or correction, please contact us on:

Privacy Officer
Address: 7/34 Navigator Place, Hendra Qld 4011
Phone: 0459 884 929
Email: privacy@gcg.net.au

If you remain unsatisfied, you may make a complaint to the Office of the Australian Information Commissioner (OAIC) at http://www.oaic.gov.au or call 1300 363 992.

14. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with the effective date.

15. Amendment table

Section | Amendment‍

V1

‍