We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy was last updated on 26 August 2026.
Who this policy covers
This policy applies to Ducon Building Solutions Pty Ltd (ABN 79 150 941 174), formerly Ducon Maintenance Pty Ltd, including our Melbourne office, our South Australian operations and the project sites we operate. Where we work under a client's or head contractor's systems, that organisation's privacy obligations may also apply to information collected on its behalf.
What personal information we collect
We collect personal information that is reasonably necessary for our business activities. Depending on how you deal with us, this may include:
- Contact and business details: your name, organisation, role, email address, phone number and enquiry details.
- Project information: correspondence, meeting records, drawings, site instructions and other records created while quoting for or delivering work.
- Site and safety information: inductions, licences, competencies, attendance records and incident information required for safety, security or site access.
- Recruitment information: applications, résumés, employment history, qualifications and referee details when you apply for a role.
- Website and technical information: IP address, browser or device information, requested pages, dates and times recorded in standard hosting and security logs.
- Form information: details submitted through the HubSpot contact form or a gated capability-statement download form.
We collect sensitive information only where it is reasonably necessary for our functions and permitted by law, for example, health information needed to respond to a site incident or manage a fitness-for-work obligation.
How we collect personal information
We usually collect personal information directly from you through this website, by email or telephone, in meetings, through tender and project documentation, or while you are on a project site. We may also receive information from clients, head contractors, consultants, recruiters, referees, regulators or other parties involved in a project.
The Contact page and gated capability-statement downloads use HubSpot forms. Information submitted through those forms is sent to Ducon's customer relationship management system so we can respond, provide the requested document and keep a record of the interaction. You can contact us by email or telephone if you prefer not to use a website form.
Cookies, hosting logs and website measurement
Our hosting provider records standard technical logs to deliver, secure and troubleshoot the website. Pages that display a HubSpot form may also use cookies or similar identifiers supplied by HubSpot to operate the form, prevent misuse and recognise related submissions. We do not use the personal information collected through this website for third-party advertising or remarketing.
You can control cookies through your browser settings. Blocking cookies may affect how an embedded form works, but you can still contact us by email or telephone.
Why we collect, use and disclose it
- Enquiries and opportunities: to respond to enquiries, provide requested documents, prepare quotations and submit tenders.
- Project delivery: to plan, deliver, supervise, communicate about and account for construction, maintenance and minor works.
- Safety and compliance: to meet work health and safety, security, quality, environmental, accreditation, probity and reporting obligations.
- Business administration: to manage suppliers, subcontractors, insurance, audits, records, payments and professional advice.
- Recruitment: to assess applications and contact candidates and referees.
- Direct communications: to send updates or material you have requested, where permitted by law. You can opt out of marketing communications at any time.
We do not sell personal information or disclose it to another organisation for that organisation's own direct marketing.
Who we may share it with
We may disclose personal information where reasonably necessary for the purpose for which it was collected, where you would reasonably expect us to do so, with your consent, or where required or authorised by law. Recipients may include:
- Project parties: clients, head contractors, asset owners, subcontractors, consultants and suppliers who need the information to perform their role.
- Government and regulators: departments, agencies, emergency services, safety bodies and regulators where reporting or access rules require it.
- Professional advisers: insurers, auditors, lawyers, accountants and other advisers.
- Technology providers: service providers that host our website, forms, customer relationship management, communications, document storage and business systems, including Netlify and HubSpot.
Overseas disclosure
Some technology providers and their subcontractors may store or process personal information outside Australia. The countries may include the United States and other locations in which those providers or their subcontractors operate. Where Australian Privacy Principle 8 applies, we take reasonable steps before an overseas disclosure to require appropriate handling of the information.
How we protect and retain information
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These measures include access controls, limiting information to people who need it and secure disposal practices.
We keep personal information only for as long as it is needed for the purpose for which it was collected or to meet legal, contractual, insurance, safety and record-keeping obligations. When it is no longer required, we take reasonable steps to destroy or de-identify it.
Data breaches
We assess suspected data breaches promptly. Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
Automated decisions
Ducon does not currently use personal information collected through this website to make solely automated decisions that could significantly affect a person's rights or interests. If that changes, we will update this policy and explain how those decisions are made.
Accessing and correcting your information
You may ask for access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. We may need to verify your identity before responding. If an exception prevents us from providing access or making a correction, we will explain the reason where the law allows us to do so.
There is no charge to make a request. We may charge a reasonable cost for providing access where the law permits, and we will tell you beforehand.
Privacy complaints
If you believe we have mishandled your personal information, email the Privacy Officer at ducon@ducon.com.au or write to the address below. Please explain what happened and include any information that will help us investigate. We will acknowledge the complaint, investigate it and respond within a reasonable period.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Contact us
Ducon Building Solutions Pty Ltd
- ABN: 79 150 941 174
- Privacy Officer: ducon@ducon.com.au
- Phone: (03) 9558 8040
- Melbourne: 2/55 Whiteside Road, Clayton South VIC 3169
- Adelaide: Level 2 & 21, 25 Grenfell Street, Adelaide SA 5000
Changes to this policy
We may update this policy when our practices, systems or legal obligations change. The current version and its last-updated date will be published at this address.