Last Updated: 04/08/2026

ConstructOne Pty Ltd (ABN 42 693 998 364) (the 'Company', ‘We’, ‘Us’, ‘Our’) understands that privacy and how we collect, use, store, process, disclose, and protect your information is important to you. We are committed to ensuring the privacy of your information and to complying with the Australian Privacy Principles (APPs), which are contained in the Privacy Act 1988 (Privacy Act).

This policy details how we will collect, use (including store and process), and disclose "personal identifiable information" or "personal information" or PII. Personal information is information or an opinion (whether true or not) about an identified, or reasonably identifiable, individual.

1) What Personal Information does the Company collect and hold?

The Company is an independent Australian business. The types of personal information that the Company collects will depend on the nature of your dealings with us. Please note that, while we seek to minimise the personal information we collect, if you do not provide us with the personal information we request, we may not be able to provide you with the services, information, or other assistance you seek.

We may collect personal identifiable information from you where:

• you, or the company that you work for, engage our services;

• you, as the client, purchase or subscribe to our client services offered on our website (www.rapidcomplyai.com) or mobile application or via any other legitimate digital means offered by us;

• you subscribe to or opt-in to receiving any Company newsletter or other form of Company updates;

• you subscribe to our website (or social media sites such as our LinkedIn company page) or to our mailing lists;

• you register for or attend a Company seminar, webinar, meeting, initial business consultation, or other hosted event or meeting (virtual or in person);

• you correspond with our employees;

• you have business dealings with us (whether as one of our suppliers, or as a regulator we deal with, or in the context of a business transaction, or as an inquiry as a potential client);

• you, or the company that you work for, is a counterparty, or provides services to a counterparty, of our client;

• you apply for, or register your interest in, employment or a work placement opportunity with the Company;

• you otherwise provide our personal information to us, such as where you supply your business card to us or verbally over the phone or via any other digital means, including email;

• you, or the company that you work for, links to our website; or

• it is required by law to do so.

For detailed information as to how we collect, use, and disclose the personal information of job applicants, please refer to section 9 of this policy below.

The personal information we will collect from you may include, but not limited to, your name, company name, title, address, e-mail address, relevant payment information (like credit card), and contact numbers (telephone, mobile). If necessary for the purposes of providing services to you, or for providing you with other information (such as email updates) sometimes we may collect other personal information from you, such as the Company’s specific products, services, or related expertise which you are interested in. However, we endeavour not to collect personal information that we do not need.

Generally, we endeavour to collect personal information directly from the individuals or businesses concerned. However, if this is not practicable, we may collect personal information about individuals or businesses from third parties, including from publicly available sources. If we do, we will take reasonable steps to ensure that the individuals or businesses concerned are made aware of the collection of their information.

If you are one of the Company’s 'business contacts' (i.e., a person or business working for one of our customers or suppliers, or in a government agency, or other company with which we deal when you correspond with one of our employees or a contact person in one of our suppliers, or in a government agency, or company with which we deal), we may collect basic business contact information from you (e.g. your name, title, and work contact details) by automatically using the details in your email signature.

The Company will not ask to collect sensitive information about you (such as details of your racial or ethnic origin, political affiliation, religious beliefs, sexual preferences, criminal convictions or health information) except where it is required by law, as part of our equal employment opportunities policy, for the purpose of assessing dietary requirements, or another legitimate reason for which we have your consent and collection is necessary for that purpose.

2) How does the Company use Personal Information?

The Company’s policy is only to use personal information collected from business contacts for the business purpose for which it was collected, or as otherwise provided for in this policy.

The Company uses your personal information:

• to provide you with our products and services;

• in connection with the fulfillment of a legal or regulatory obligation;

• to send business or other updates relevant to us or you and to market our products and services to you;

• in connection with your job application (see section 9 of this policy);

• where we have a legitimate interest that is not overridden by your rights under the law;

• for any reason that you (or your organisation) have provided consent;

• for the performance of a contract with you or your company;

• to respond to any enquiries or complaints; and

• to conduct our business.

We also collect personal information so that we can communicate new legal or firm developments, including advertising products or services (including events) that we offer, to our clients and to those people who have subscribed to our website, alert services, or mailing lists, or to those people who follow us on any social media platform.

If, at any time, you do not wish to receive these kinds of communications, please let us know using the contact details set out in section 10 below.

3) Will Your Personal Information be given to anyone else?

The Company does not sell, exchange, or trade personal information about you to or with third parties. Personal information may be disclosed to others by the Company in the circumstances described below:

a) Disclosures to external service providers

The Company may disclose personal information to external service providers who provide services to you or us, including those who help us operate our business. Examples of our external service providers include: third party data storage providers; IT and other software and systems providers; companies who provide photocopying and archiving services; advertising and marketing agencies who assist us with our campaigns and programs, and research organisations and consultants who conduct research on our behalf. If the Company engages external service providers, the Company takes steps to ensure that those external service providers: comply with the APPs when they handle personal information about you; and are authorised only to use personal information that we provide to them for the purposes specified in our agreement with them.

b) Client Records

The Company uses and maintains a customer records management system for certain information that we collect (which may contain personal information), including:

• contact details contained in the footer of clients' emails;

• details in online forums where clients can subscribe to the Company information and/or events;

• where clients opt into marketing communications;

• where clients sign up to events via the Company website;

• where clients attend a meeting or an event and provide their contact details at the meeting or event;

• where individuals access webinars (using their name and email address), including those who have been forwarded the webinar link from a third party; and

• where clients manually add or update their details and areas of interest themselves on the website.

c) Disclosures Overseas

Where the Company engages external information technology service providers, we ensure that wherever possible, our data is stored within Australia. If, however, any of our vendors do store data in overseas locations, such as the UK, New Zealand, or USA, then in the applicable situations, the Company takes reasonable steps to ensure that any overseas recipient does not breach the APPs in relation to that information. Such overseas disclosures are only made in connection with the primary purpose for which the personal information has been collected.

d) Disclosures Required or Permitted by Law

Other than in the situations described above, the Company will only disclose personal information if this is required or permitted by law including under the Australian Privacy Act. The Company is also bound by professional and ethical obligations of confidentiality, including in relation to personal information.

4) Security of Personal Information

The Company takes reasonable steps to ensure the security of your personal information. Our firm is largely paperless and hence all information is collected, used, and disclosed electronically. All electronic information communication is encrypted. All electronic information storage is encrypted. All employees have role-based access and secure multifactor authentication services in place. Our IT systems and services are all cloud-based with data centres within Australia. The third-party cloud service providers ensure security against external threats by various means, password protection, regular data integrity checks, anti-virus and anti-malware protection software, disaster recovery environments, and business continuity plan implementation. In addition, all the Company employees are required to treat all personal information held by the Company as sensitive and confidential.

5) Retention of Your Information

The Company is required by Australian law to retain copies of customer files, customer information for a period of not more than 7 years after the Company has obtained customer consent.

The Company shall retain such information for such period as is permitted under, and in accordance with, any and all applicable privacy laws of Australia and other relevant legislation, regulations, and regulatory guidance in force from time to time.

6) Your Rights

Under the Australian Privacy Act, you have the right to:

• seek access to your personal information handled by the Company;

• ask us to update or correct your personal information when it is inaccurate, incomplete, or out of date; and

• opt-out of receiving direct marketing communications from us.

If you wish to access the personal information that the Company holds about you, please set out your request in writing (via email), and forward this to our Privacy Officer, using the contact details set out at the end of this policy.

To provide you with access to your personal information held by us on our current records, the Company can provide you with a copy of the relevant personal information (ordinarily, an electronic print-out or a photocopy). The Company will not charge you for the cost of providing this type of access to these current records.

For legal and administrative reasons, the Company may also electronically archive non-current records containing personal information, such as back up data files, and offsite electronic storage. Please note that if we do provide access to old records, we may charge you for the cost of providing such access.

If you are of the view that personal information about you is inaccurate or out of date, or if you have any other queries about access and correction, please contact our Privacy Officer using the contact details set out in section 10 below.

7) Online Privacy Issues

Use of cookies

When you visit our website, a small data file called a "cookie" may be stored on your internet enabled device. We use cookies or similar digital markers to maintain user sessions and track the behaviour of website visitors. This enables us to keep our site relevant and useful. However, generally this information will not identify you. We do not link this information back to your identity or other information that you have provided to us.

We and our service providers also use cookies and other digital markers (e.g., Clear GIFs) to assist us with our online marketing services and advertise to our website visitors on other third-party websites or platforms (e.g. Google Ads Services or LinkedIn). Cookies placed on third party websites help us to monitor the efficacy of our business relationships with third parties, improve performance as well as personalise your experience when you visit our and our service providers’ websites. When you visit other websites or platforms, you may see an advertisement for the Company's products or services because you have previously visited our website. The Company may disclose the information collected via use of cookies on our websites to third parties for marketing purposes.

By using our website(s) and not opting out of cookies, you consent to our use of cookies in accordance with the terms of this Privacy Policy.

Most web browsers are set by default to accept cookies. However, if you do not wish to receive cookies you may set your browser to either prompt or refuse cookies (including the Company’s cookies). If you use your browser settings to block all cookies, you may not be able to access and/or use all or parts of our website.

Access to other websites

Sometimes our website contains links to other websites for your convenience and information. When you access a website other than the Company’s website:

• please understand that the Company is not responsible for the privacy practices of that other site(s);

• we suggest that you review the privacy policies of each site you visit; and

• under no circumstances will the Company pass any of your personal information to other websites or actors.

8) Making a complaint

If you wish to make a complaint about how the Company handles your personal information, please contact us setting out your complaint in writing, and forward it to our Privacy Officer, using the contact details in section 10 of this policy.

We will deal with all requests for access to personal information or complaints as quickly as possible and will endeavour to get back to you within a reasonable timeframe.

If you are not satisfied with our response to your complaint you can make a formal complaint to the Office of the Australian Information Commissioner through their website at https://www.oaic.gov.au/, by emailing enquiries@oaic.gov.au or by calling 1300 363 992.

9) Personal information of job applicants

The Company collects information about and from individuals who apply for employment with the Company including job placements and internships. The information we collect may include an individual’s personal information, and includes the applicant’s:

• contact details;

• gender;

• in some cases, racial background (see below);

• educational and employment history, and relevant qualifications;

• eligibility to work in Australia; and

• referees’ contact details.

In addition, the Company may collect any personal information that an individual chooses to disclose during the process of an application, which could include sensitive information.

We may collect this information directly from the job applicant in response to an advertised job listing, or from via emails sent to the Company seeking employment opportunities, or indirectly from a third party, including from a recruitment agency. If necessary, we will also collect information about applicants from referees and from other public sources, such as professional social networking sites like LinkedIn.

If the applicant proceeds to the interview stage, we will collect further information about the applicant’s participation in and performance during any interview.

The Company is committed to a policy of diversity and inclusion. For this reason, we also collect information as to whether a job applicant identifies as Aboriginal or Torres Strait Islander. We collect this information for the sole purpose of monitoring the implementation of our equal employment opportunities policy. The Company will not use this information for any other purpose.

If you do not provide with us the information we request, we may not be able to process or assess your job application.

The Company uses the personal information we collect about job applicants to assess their eligibility and suitability for employment with the firm. Generally, our assessment of applicants’ personal information will relate to a particular role. However, we may also retain and use applicants’ personal information to assess their suitability for other roles with the firm. We may disclose personal information to service providers that conduct background and eligibility checks on our behalf.

The Company stores all personal information relating to our job applicants in Australia and that information is not accessible to third parties located outside Australia.

10) Additional Privacy Information and How to Contact the Company

This Company Privacy Policy may change from time to time. The Company Privacy Policy will be made available to anyone who requests it, whether at our offices, by email, or by use of our website.

If you have any questions or comments about the Company Privacy Policy, please set out your request in writing, and forward this to our Privacy Officer, using the contact details below.

Email: Legal@RapidComplyAI.com

Audience: Privacy Officer

This Privacy Policy applies to the Company.