Legal

The types of personal information we collect depend on our relationship and interactions with you.

Personal information we may collect includes:

• your name and contact details, such as your email address, telephone number and postal address
• your employer, organisation, position and professional details
• information contained in communications and correspondence with us
• information about your relationship or dealings with Fuller, our clients or other business contacts
• information you provide when attending or registering for an event, subscribing to communications, completing a form or making an enquiry
• marketing and communication preferences
• photographs, video or audio recordings where relevant to our work or events
• information about your interactions with our websites and digital services, including device, browser and website usage information
• recruitment information, such as employment history, qualifications, applications, CVs and referee information
• information relating to our employees and contractors that is reasonably necessary to manage our working relationship
• other information reasonably necessary for our business or the services we provide.

We may also receive or have access to personal information collected by our clients in the course of providing services to them.

Some types of personal information are considered sensitive information under the Privacy Act. This can include information about a person's health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record or membership of certain organisations.
We do not generally seek to collect sensitive information unless it is reasonably necessary for our functions or activities or our work for a client.
Where required by law, we will obtain consent before collecting sensitive information.

Where reasonable and practicable, we collect personal information directly from you.

We may collect information when you:

• communicate or meet with us
• contact us by telephone, email, through our website or through another communication channel
• become a client, supplier, contractor or other business contact
• subscribe to our communications
• register for or attend an event
• interact with us through social media
• apply for employment or contract work with Fuller
• participate in research, campaigns, competitions, promotions or other activities we manage
• otherwise provide information to us.

We may also collect personal information from third parties, including:

• our clients and their employees, customers or other contacts
• your employer or organisation
• recruitment agencies and referees
• service providers and business partners
• publicly available sources, including websites and professional or social media platforms
• other persons or organisations where you have authorised the disclosure or where collection is permitted by law.

We may collect, hold, use and disclose personal information to:

• provide services to our clients
• communicate with clients, prospective clients, suppliers and other contacts
• plan, develop and deliver brand, marketing, communication, creative and digital services
• manage campaigns, research, events, promotions and other client activities
• understand and improve our services
• respond to enquiries and requests
• manage our business relationships and professional network
• provide information about Fuller, our services, industry developments and business opportunities
• send marketing communications and invitations
• recruit and manage employees and contractors
• administer our business, including finance, insurance, legal and compliance activities
• protect the security of our systems, people and information
• comply with our contractual and legal obligations
• otherwise carry on our business.

We may also use or disclose personal information for another purpose where you have consented tothat purpose or where permitted or required by law.

As a communication and creative services provider, Fuller may handle personal information on behalf ofour clients.

For example, our work may involve access to information contained in client websites, databases, customer relationship management systems, mailing lists, digital platforms, campaigns, surveys, research, competitions, events or other client systems.

Where Fuller handles personal information on behalf of a client, we take reasonable steps to handle that information consistently with our contractual obligations, applicable privacy laws and the client's lawful instructions.

In some circumstances, the relevant client's privacy policy will explain how that client collects and uses personal information.

When you visit a Fuller website or interact with our digital services, we or our service providers may automatically collect information about your visit.

This may include your IP address, browser and device information, pages visited, the date and time of your visit, referring websites and information about how you interact with our website.

We may use cookies and similar technologies to operate and secure our websites, understand how they are used, improve user experience, measure the effectiveness of our communications and support ourmarketing activities.

You can generally control cookies through your browser settings. Disabling some cookies may affect the functionality of a website.

We may use personal information to communicate with clients, prospective clients and other business contacts about Fuller services, events, news and other information we believe may be relevant.

Where required, our electronic marketing communications will provide a way for you to unsubscribe or opt out of receiving future marketing communications.

You can also ask us at any time not to use your personal information for direct marketing purposes bycontacting us using the details below.

We will respect your request in accordance with applicable law.

Depending on the circumstances, we may disclose personal information to:

• our clients and people involved in delivering services for those clients
• our employees and contractors
• professional advisers, including lawyers, accountants, auditors, insurers and consultants
• technology, cloud, hosting, communications and data storage providers
• website, analytics, marketing, research and digital service providers
• recruitment, payroll and human resources service providers
• suppliers and other service providers who assist us in operating our business
• credit reporting or debt collection providers where appropriate
• government agencies, regulators, courts or other parties where required or authorised by law
• other persons or organisations where you have authorised us to disclose your information.

We take reasonable steps to ensure that third parties who handle personal information on our behalf appropriately protect that information.

Fuller primarily uses Google Workspace and other technology services to operate our business. Our server backup infrastructure is located in Australia.

Some technology and cloud service providers operate infrastructure or provide services in multiple countries. The fact that information may be stored, routed or processed using infrastructure located outside Australia does not necessarily mean that personal information has been disclosed to an overseas recipient for the purposes of the Privacy Act.

Where our use of a technology provider or another arrangement involves the disclosure of personal information to an overseas recipient, we take reasonable steps to comply with the cross-border disclosure requirements of the Privacy Act.

Fuller uses artificial intelligence, automation and other digital technologies to assist with aspects of our creative work, communications and business operations.

We do not ordinarily provide personal information or sensitive information to artificial intelligence services.

We take reasonable steps to ensure that our use of artificial intelligence and other technologies is consistent with applicable privacy laws, our contractual obligations to clients and appropriate information security practices.

Fuller takes reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

The measures we use may include:

• access controls and authentication
• secure technology platforms and systems
• appropriate information security processes
• limiting access to information to people who require it for their work
• staff awareness and training
• appropriate contractual and security requirements for service providers
• procedures for responding to security incidents and data breaches.

No method of storing or transmitting information is completely secure. We regularly consider our information security practices and seek to manage risks appropriate to the information we hold.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, to provide our services, meet our contractual obligations and comply with legal, accounting and other business requirements.

When personal information is no longer required and we are not required by law to retain it, we take reasonable steps to securely destroy or de-identify it.

Fuller maintains procedures for responding to suspected or actual data breaches involving personal information.

If we become aware of a data breach, we will assess and respond to the incident in accordance with applicable law.

Where a breach is an eligible data breach under the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner as required by thePrivacy Act.

Where practicable, you may choose not to identify yourself or may use a pseudonym when dealing with us.

There will be circumstances where this is not practicable, including where we need to know your identity to provide services, respond to a request, meet contractual requirements or comply with the law.

If you choose not to provide information we reasonably require, we may not be able to provide a service or otherwise assist you.

We take reasonable steps to ensure that the personal information we collect and hold is accurate, up to date, complete and relevant for the purposes for which it is used.

If you believe personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you can ask us to correct it.

We will deal with correction requests in accordance with the Privacy Act.

You may request access to personal information Fuller holds about you.

We may ask you to verify your identity and provide sufficient information to allow us to locate the information you are requesting.

In some circumstances, the Privacy Act permits us to refuse access. If we refuse a request, we will provide an explanation where required by law.

We may charge a reasonable fee for providing access where permitted, but we will not charge you simply for making an access request.

If you have a concern or complaint about how Fuller has handled your personal information, please contact us using the details below.

We will consider your complaint and aim to respond within a reasonable period.

If you are not satisfied with our response, you may be entitled to make a complaint to the Office of theAustralian Information Commissioner (OAIC).

Information about making a privacy complaint is available at www.oaic.gov.au.

We may update this Privacy Policy from time to time to reflect changes to our business, technology, practices or legal obligations.

The current version will be published on our website and will state the date it was last updated.