This Policy applies to all personal information collected by Building Forensics Australia in the course of providing services to clients, insurers, legal representatives, and other stakeholders. It describes:

• the types of information we collect
• how and why, it is collected
• how we use and disclose this information
• how information is stored and secured
• how you may access or correct your information
• how to make a privacy complaint

We collect personal information that is reasonably necessary for the performance of our functions and activities, including:

2.1 Personal Identification Information

• Name
• Residential or postal address
• Email address
• Telephone numbers
• Business or company details
• Job title or professional role

2.2 Project, Claim, or Dispute-Related Information

• Information relating to building reports, defects, insurance claims, or disputes
• Photographs, videos, plans, engineering documents, and related technical materials
• Statements, correspondence, and evidence provided for forensic or expert witness purposes

2.3 Sensitive Information (Limited Circumstances)

We generally do not collect sensitive information unless required for a specific legal matter or claim, and only with your consent or as permitted by law.

2.4 Financial & Transactional Information

• Billing details
• Payment information
• Records of fees, invoices, and transactions

2.5 Website and Digital Information

• IP address
• Browsing data
• Cookies and analytics information
  This data does not personally identify you unless voluntarily supplied.

We may collect information:

3.1 Directly from You

• When you submit an enquiry
• During inspections, consultations, or assessments
• Through email communications, phone calls, meetings, or online forms

3.2 From Third Parties

Where reasonably necessary for service delivery, we may receive information from:

• Insurers, assessors, loss adjusters
• Legal representatives and solicitors
• Engineers, builders, contractors, or other consultants
• Government agencies and regulatory bodies
• Publicly available sources (e.g., title searches, company registers)

3.3 Automatic Collection

Through website analytics and cookies consistent with standard internet practice.

We handle personal information for the following purposes:

4.1 Service Delivery

• Conducting building forensic investigations
• Preparing technical reports, expert witness statements, and court-ready documents
• Providing opinions for litigation, insurance claims, and dispute resolution
• Managing site inspections, communications, and project administration

4.2 Business Operations

• Billing and payment management
• Internal record-keeping and administrative support
• Quality assurance and staff training
• Improving our services and website

4.3 Legal and Regulatory Compliance

• Meeting obligations under law, court orders, or regulatory directions
• Responding to subpoenas, discovery processes, or lawful requests

We may disclose your information to:

• Insurers, loss adjusters, and authorised representatives involved in your matter
• Solicitors, barristers, or other legal practitioners
• Engineering specialists, technical consultants, or subcontractors
• Courts, tribunals, or dispute resolution bodies
• IT providers, data storage services, and administrative support services
• Government or regulatory authorities when required by law
• Where we believe it is necessary to protect our rights.

We do not sell, trade, or rent personal information.

We take reasonable steps to protect personal information from:

• Unauthorised access
• Loss or theft
• Misuse or interference
• Modification or disclosure

Security measures include:

• Secure electronic storage systems
• Access controls and authentication protocols
• Encrypted backups where applicable
• Confidentiality obligations for all employees and contractors

Where information is no longer required, we take reasonable steps to destroy or de-identify it unless otherwise required by law. We follow generally accepted industry standards to protect the information we collect. That said, no data security measures are 100% secure. Therefore, while we implement reasonable physical, technical, and administrative measures to protect the information we collect, we cannot guarantee its absolute security.

We generally do not disclose personal information to overseas recipients.
If overseas disclosure becomes necessary for service delivery (e.g., international legal parties or cloud service providers), we will ensure it is done in accordance with the APPs.

You have the right to request:

• Access to the personal information we hold about you
• Correction of information that is inaccurate, incomplete, or out of date

Requests can be made in writing to the contact details below. We may require identity verification before releasing information.

If you have any questions regarding this Privacy Statement, please contact us at info@buildingforensics.com.au