The last update to this document was 5/1/2025.
BBIX Australia Pty Ltd ACN 669 382 950 (BBIXAU, we, us, our) and its related entities are committed to complying with applicable privacy laws in relation to the personal information that we collect in the course of running our business.
We handle personal information in the provision of telecommunications services and other services offered as part of its business in accordance with the provisions of this “Privacy Policy” document. This document explains how we collect and handle personal information, and your rights in relation to any of your personal information that we hold about you.
We may update this Privacy Policy from time to time. The latest version of this Privacy Policy can be found on our website (https://wasabi.net.au/privacy).
In this document:
We may collect personal information about you if you:
The types of personal information we collect may vary depending on the nature of our relationship with you and may include identity information and contact details (such as your name, address, email address, phone number, business card information, date of birth and proof of identity documents). If you are a customer or former customer, we may also collect and hold information including:
If you are a director of an organisation that is our customer and have agreed to act as guarantor, we may collect information about your assets and your other liabilities, to assess the credit risk position of that organisation. If we provide credit to you, we will be required to collect information about you by the Anti-Money Laundering and Counter-Terrorism Financing Act 2006.
If you are an individual contractor to us or apply for a role with us, we may also collect information relevant to your engagement with us including qualifications, length of engagement, resume, current and former employment details, pay rate and salary, bank details, feedback from supervisors, training records and logs of your usage of our equipment (e.g. phones, computers and vehicles).
If you access our Website, we may utilise cookies to collect additional information about your use of our Website, such as your internet protocol (IP) address, device information, browser information, and details on your usage. Please see section 8 of this Privacy Policy for further details.
If you call us via telephone, we may monitor and, in some cases record, such telephone conversations for staff training, quality assurance and record-keeping purposes.
We do not generally collect sensitive information in the ordinary course of our business. If you do provide sensitive information to us for any reason (for example, if you provide us with information about a health condition, injury or disability you have), you consent to us collecting that information and to us using and disclosing that information for the purpose for which you disclosed it to us and as permitted by the Privacy Act and other relevant laws.
In addition to the types of personal information identified above, we may collect personal information as otherwise permitted or required by law.
Where you do not wish to provide us with your personal information, we may not be able to provide you with requested goods or services and/or certain functionality of our websites.
We will collect and hold your personal information in a fair and lawful manner, and not in an intrusive way.
Some of the common ways in which we may receive personal information directly from you include:
Our systems also collect certain information about you automatically when you use our services or visit our websites (for example logs containing information about how you have used our services and websites).
Where it is reasonably practical to do so, we will collect your personal information directly from you. However, in certain cases, such as where we need to verify your identity, undertake customer due diligence, prevent or detect money laundering or terrorist financing and where we are required or authorised by law, we may collect personal information from publicly available sources and third parties, such as suppliers, recruitment agencies, your employers, credit reporting bodies, contractors, our clients, business partners, referees, government bodies (e.g. police checks, if required), academic and professional bodies (e.g. to validate details and currency of qualifications).
If we collect personal information about you from a third party we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.
As a general rule, we only process personal information for purposes that would be considered relevant and reasonable in the circumstances. The purposes for which we use and disclose your personal information will depend on the circumstances in which we collect it. Whenever practical we endeavour to inform you why we are collecting your personal information, how we intend to use that information and to whom we intend to disclose it at the time we collect your personal information. We may use or disclose your personal information:
If you are a customer, we mainly collect, hold, use and disclose your personal information for the purpose of providing telecommunication services and other services , for advertising, promotion and marketing, for improvement of our services and research and development, for appropriate responses to inquiries, etc., and for prevention of and responses to illegal activities. These purposes are explained in further detail below.
Business card information exchanged with customers and business partners may be used for the purposes described in (1) through (7) above.
We may use personal information within the scope of the above purposes of use even after the termination of a contract with a customer regarding our business.
Depending on the nature of our relationship and interactions with you, some of the other purposes for which we may collect, hold, use and disclose your personal information may include:
We may disclose your personal information to third parties in connection with the purposes described in section 3 of this Privacy Policy. This may include disclosing your personal information to the following types of third parties:
We may also disclose your personal information in accordance with any consent you give or where disclosure is authorised, compelled or permitted by law.
If we disclose information to a third party who is handling it on our behalf, we generally require that the third party protect your information to the same extent that we do.
If you post information to certain public parts of our Website or to our social media pages, you acknowledge that such information may be available to be viewed by the public. You should use discretion in deciding what information you upload to such sites.
In some cases we may process personal information into data that does not identify individuals before using or providing it to third parties.
We will hold personal information as either secure physical records, electronically on our intranet system, in cloud storage, and in some cases, records on third party servers, which may be located overseas. We use a range of security measures to protect the personal information we hold, including by implementing IT security tools to protect our electronic databases.
We take reasonable steps to destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law. We may need to retain records containing personal information to comply with record keeping obligations, and for other legitimate business purposes (such as quality assurance).
We also take reasonable steps to ensure that we only handle information related to the confidentiality of communications, such as communication history, call history, and caller information, appropriately in accordance with the Telecommunications Act 1997 (Cth) and other relevant regulations and guidelines. Some of the measures that we implement to ensure the safe management of personal information are set out below.
We have implemented certain basic policies to ensure the proper handling of personal data.
Based on the basic policies, we implement internal regulations that clearly define the methods for handling and management of personal information, such as acquisition, use, processing, storage, provision, deletion, and correction.
We have clearly defined the person in charge of handling personal data and their roles, responsibilities, and authority. In addition, we continuously and systematically conduct reviews, management supervision, and audits of the handling status of personal information, as well as external audits.
We create learning materials on personal information protection and distribute them to all employees, and conduct training at least once a year for all employees who handle personal information. When concluding a business outsourcing contract, we thoroughly examine the suitability of the business outsourcing party and conclude a contract that includes appropriate privacy and data security commitments. Where possible, we endeavour to require business outsourcing parties to ensure a safety management system equivalent to that of our company. We also strive to provide appropriate supervision through monitoring of our subcontractors, review our subcontractors, and strengthen our contracts with them.
We take necessary and appropriate measures to safely manage personal information, such as working in secure areas, managing and restricting access to personal information, restricting the means of taking personal information out, and taking measures to prevent unauthorized access from outside.
When using, storing, or providing personal information in a foreign country, we take steps to understand the systems for protecting personal information in that foreign country and ensure that we only disclose or provide information in an appropriate manner.
Some of the third parties and our related entities to whom we disclose personal information may be located outside Australia. The countries in which such related entities and third party recipients are located depend on the circumstances. In the ordinary course of business we commonly disclose personal information to recipients located in Japan.
Such recipients provide billing, payment, IT and other administrative services (including customer support) to us (including offshore data hosting and processing, data analytics, help desk and data-entry).
From time to time we may also engage an overseas recipient to provide services to us, such as cloud-based storage solutions. Please note that the use of overseas service providers to store personal information will not always involve a disclosure of personal information to that overseas provider
Whenever we transfer your personal information outside of Australia, we will do so in accordance with the requirements of applicable privacy and data protection laws. We may disclose your personal information to overseas recipient without your consent where permitted by the Privacy Act (and, in such circumstances, we will comply with the applicable requirements of the Privacy Act in doing so).
Overview
Like most businesses, marketing and advertising is important to our continued success. We therefore like to stay in touch with customers and let them know about new offers and opportunities.
We may provide you with information and advertisements about products, services and promotions either from us, or from third parties which may be of interest to you, where:
Direct marketing
We may conduct direct marketing through various channels, including over the phone and by e-mail, SMS and post.
If you would like us to stop sending you direct marketing communications, you can request this by contacting our Privacy Officer (see contact details in section 12 of this Privacy Policy).
Please note that there are certain types of communications that you may not be able to opt-out from, such as communications that we are required or permitted by law to send you.
We may use cookies and other tracking technologies (such as tracking pixels and web beacons) on our websites to collect various information about how you interact with our websites.
A cookie is a small text file stored in your computer’s memory or on your hard disk for a pre-defined period of time. We use cookies to identify specific machines in order to collect aggregate information on how visitors are experiencing the Website. This information will help to better adapt the Website to suit personal requirements.
We may use third party vendors to show our ads on sites on the Internet and serve these ads based on a user’s prior visits to our Website and other internet activity. We may also use analytics data supplied by these vendors to inform and optimise our ad campaigns based on your prior visits to our Website.
If you do not wish to receive cookies, you can set your web browser or mobile device so that your browser or device does not accept them.
Most web browsers have features that allow you to manage and control the use of cookies by the sites that you visit (including ours), and to see and delete cookies stored on your device and to block cookies from all or selected sites. For information on how to use these settings in some of the more common browsers, please use the links below:
You can also use your mobile device settings to control your mobile advertising identifiers, which are used to track your activity across different apps and show you personalised ads. Please refer to your mobile device's documentation for further information.
Some of the tracking technologies that we use may collect data about your use of our websites without using cookies. If you wish to opt-out of data collection by these other types of tracking technologies, you may be able to do so by installing and configuring appropriate ad-blockers or no-script plugins / extensions in your web browser.
We collect information in relation to employees as part of their job application and during the course of their employment, either from the employee directly or, in some cases, from third parties such as recruitment agencies, referees, government bodies (e.g. police checks, if required) and academic and professional bodies (e.g. to validate details and currency of qualifications).
The information we collect may include contact details, qualifications, resume, current and former employment details, pay rate and salary, bank details, feedback from supervisors and training records.
We may also collect details of disabilities, allergies and health issues that may impact the employee’s role, or which arise while on our premises or in the performance of the employee’s duties, so we can accommodate and otherwise assist the employee with any such health requirements or incidents.
Under the Privacy Act, personal information about a current or former employee may be held, used or disclosed in any way that is directly connected to the employment relationship. We handle employee information in accordance with legal requirements and our applicable policies in force from time to time.
You may contact our Privacy Officer (see section 12 below) to request access to the personal informationthat we hold about you and/or to make corrections to that information, at any time. On the rare occasions when we refuse access (which we will only do in accordance with applicable laws), we will provide you with a written notice stating our reasons for refusing access. We may seek to recover from you reasonable costs incurred for providing you with access to the personal information we hold about you.
We are not obliged to correct any of your personal information if we do not agree that it requires correction and may refuse to do so. If we refuse a correction request, we will provide you with a written notice stating our reasons for refusing.
We will respond to all requests for access to or correction of personal information within a reasonable time.
If you have any questions, concerns or complaints about this Privacy Policy or how we handle your personal information, including if you believe we have breached the APPs, please contact our Privacy Officer (see section 12 below).
When contacting us please provide as much detail as possible in relation to your question, concern or complaint.
We take all complaints seriously and will respond to your complaint in accordance with any applicable timeframes imposed by law and otherwise within a reasonable period. We request that you cooperate with us during this process and provide us with any relevant information that we may need. Our usual process is to appoint a designated staff member who will review your complaint, gather relevant facts and documents, discuss with relevant parties, and then decide what steps (if any) are appropriate for us to take in response to your complaint. Once we have completed our consideration and investigation, we will then contact you (usually by phone) to inform you of our decision.
If you are dissatisfied with the handling of your complaint, you may contact the Office of the Australian Information Commissioner:
Office of the Australian Information Commissioner
GPO Box 5288, Sydney NSW 2001
Telephone: 1300 363 992
Email: enquiries@oaic.gov.au
The contact details for our Privacy Officer are as follows:
Postal address: Level 2/696 Bourke St, Melbourne VIC 3000, Australia
Telephone: [0399700445]
Email: privacy@wasabi.net.au
Our Website may contain links to other websites operated by third parties. We make no representations or warranties in relation to privacy practices of any third party website and we are not responsible for the privacy policies or the content of any third party website. Third party websites are responsible for informing you about their own privacy practices and procedures.
We use social media platforms such as Facebook, Instagram and LinkedIn to communicate with the public about our services and businesses. We may collect the information that you choose to share with us through these platforms, including photos, videos and comments and posts.
These social media platforms have their own privacy policies, and may handle your information for their own purposes. You can access the privacy policies for [Facebook, Twitter and LinkedIn] on their websites.
If you choose to use these social media platforms to communicate with us, please be mindful that certain pages within these platforms may be publicly available. We encourage you to use the privacy settings available on each platform. If you would like to contact us directly, you can do so using the contact details in section 12 above.