Privacy Policy

1. About this policy

Blue IoT Pty Ltd ("Blue IoT", "we", "us" or "our") respects your privacy. We handle personal information in accordance with applicable Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

This policy applies to personal information collected through this website, including information submitted through our contact and careers forms, and information you provide when you communicate with us about a website enquiry or job application. It does not replace any privacy terms or notices that apply to the Encompass Blue platform, a customer contract or our handling of employee records.

Last updated: 31 August 2026

2. The information we collect

Depending on how you interact with us, we may collect:

• Contact and business information, such as your name, work email address, country or region, organisation, role or department, and the contents of your enquiry.
• Recruitment information, such as your name, email address, phone number, the opportunity you are interested in, your message, CV or résumé, qualifications, employment history and any other information you choose to include in your application.
• Technical and security information, such as your IP address, request time, browser or device information, referring page and server logs generated when you visit the website or submit a form.
• Communication records, including emails, telephone calls and follow-up correspondence relating to your enquiry or application.

A CV or recruitment discussion may contain sensitive information, such as health information or information about racial or ethnic origin. Please do not provide sensitive information unless it is relevant and reasonably necessary for your application. Where required by law, we will collect sensitive information only with your consent or where another legal exception applies.

3. How we collect information

We usually collect personal information directly from you when you:

• submit a contact enquiry or employment application through this website;
• email, call or otherwise communicate with us;
• interact with us in relation to an enquiry, recruitment process or business relationship; or
• provide information through a recruiter, referee or other person with your consent or where otherwise permitted by law.

Our website and hosting or security providers may also automatically collect limited technical information needed to deliver, secure and troubleshoot the website. We use IP addresses submitted with our forms to apply short-term rate limits and reduce spam and abuse.

4. Why we use personal information

We may collect, hold and use personal information to:

• respond to enquiries, arrange demonstrations and provide information about our products or services;
• manage our business relationships and keep appropriate business records;
• assess candidates for current and future employment or internship opportunities;
• communicate with applicants and, with consent where required, verify qualifications, experience or references;
• operate, maintain, secure and improve the website, including preventing spam, malware, fraud and other misuse;
• comply with legal and regulatory obligations and respond to lawful requests; and
• establish, exercise or defend legal claims.

If you do not provide information marked as required, we may be unable to respond to your enquiry or consider your application.

5. When we disclose personal information

We may disclose personal information where reasonably necessary for the purposes described above to:

• authorised Blue IoT directors, employees and contractors;
• website hosting, cloud infrastructure, email delivery, cybersecurity, malware-scanning and IT support providers;
• recruiters, referees, background-checking providers and professional advisers involved in a recruitment process, with consent where required;
• auditors, insurers, lawyers and other professional advisers;
• government agencies, regulators, courts, tribunals or law-enforcement bodies where required or authorised by law; and
• a party involved in an actual or proposed sale, merger, restructuring or transfer of all or part of our business, subject to appropriate confidentiality protections.

Website form submissions are delivered to Blue IoT using Resend, an email delivery provider. CV files are also sent to our approved malware-scanning provider before they are delivered. We do not sell or rent personal information.

6. Overseas handling

Some of our technology providers and their subprocessors are located outside Australia or use infrastructure located overseas. As a result, personal information may be processed in countries including the United States and other countries in which those providers or their subprocessors operate.

Where Australian privacy law applies, we take reasonable steps appropriate to the circumstances to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles. You can contact us if you would like more information about the countries relevant to a particular service.

7. Cookies and website analytics

The current public website does not use third-party advertising cookies or third-party analytics tags. Our hosting and security infrastructure may still process technical information, such as IP addresses and request logs, to deliver the website, maintain reliability and protect it from misuse. If we introduce analytics, advertising cookies or similar tracking technologies, we will update this policy and provide any notice or choices required by law.

8. Direct marketing

We may use business contact details to follow up your enquiry and, where permitted by law, send information about Blue IoT products, services or events that may be relevant to you. You may opt out at any time by using the unsubscribe facility in a marketing message or contacting us. We do not use job application information for unrelated marketing.

9. Applicant information

We use application information to assess your suitability for current and future opportunities, communicate with you, verify your qualifications and experience, and, with your consent, contact referees. Authorised Blue IoT personnel and service providers supporting recruitment may access this information where reasonably necessary.

If your application is unsuccessful, we may retain your application for up to 12 months so we can consider you for other suitable opportunities, unless you ask us to delete it earlier or we are required to retain it by law. You may tell us at any time that you do not want to be considered for future opportunities.

10. Security and retention

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps include access controls, form validation, rate limiting, file type and size checks, and malware scanning of uploaded CVs. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

We retain personal information only for as long as reasonably needed for the purposes for which it was collected, to maintain appropriate business records, or to meet legal, accounting, insurance or dispute-resolution requirements. When information is no longer required, we take reasonable steps to destroy it or de-identify it. Service providers may retain limited backup, security or transaction records in accordance with their contractual and legal obligations.

11. Access, correction and deletion requests

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. You may also ask us to delete information. We will consider deletion requests subject to applicable legal and record-keeping obligations.

To make a request, contact our Privacy Officer using the details below. We may need to verify your identity before responding. If we refuse a request where the law permits us to do so, we will explain the reason and available complaint options.

12. Privacy complaints

If you have a privacy concern, contact our Privacy Officer and describe the issue. We will acknowledge your complaint, investigate it and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner through oaic.gov.au.

13. Third-party websites

This website contains links to third-party websites and social media services. Those services are responsible for their own privacy practices. We recommend reviewing their privacy policies before providing personal information to them.

14. Changes to this policy

We may update this policy when our practices, providers or legal obligations change. The latest version will be published on this page with an updated date. Material changes may also be communicated through the website or directly where appropriate.

15. Contact us

Privacy Officer
Blue IoT Pty Ltd
Level 1, 30–32 Compark Circuit
Mulgrave, VIC 3170, Australia

Email: info@blueiot.com.au
Phone: +61 3 9566 7288