Surge Energy Privacy Policy
Effective Date 23 June 2024
At Surge Energy, we prioritise the privacy and security of your personal information. Our approach to handling personal data is rooted in transparency, accountability, and compliance with the highest standards, including the General Data Protection Regulation (GDPR). We are committed to safeguarding your privacy by implementing robust data protection practices and ensuring your information is collected, used, and disclosed responsibly. Whether interacting with our services online or offline, you can trust that Surge Energy will handle your personal data with the utmost care and respect, keeping your privacy at the forefront of our operations.
Introduction
Surge Energy (“we,” “us,” “our”) is committed to protecting and respecting your privacy. This Privacy Policy outlines our practices regarding collecting, using, disclosing, and retaining your personal information. This policy complies with the General Data Protection Regulation (GDPR).
Data Controller
Surge Energy is the data controller responsible for your personal data. For any questions or concerns about this policy or your data, please get in touch with us at Email: privacy@surgeenergy.com
Information We Collect
At Surge Energy, we collect and process personal information with utmost transparency. This is to exercise our powers and perform our functions under various laws, including the Australian Information Commissioner Act 2010, Privacy Act, Freedom of Information Act 1982, My Health Records Act 2012, Competition and Consumer Act 2010, and other relevant legislation.
We want you to feel informed and in control of your data.
How We Use Your Information
We use personal information to:
-
Handle privacy and freedom of information (FOI) complaints, FOI reviews, and Consumer Data Rights (CDR) complaints.
-
Take regulatory action under the Privacy Act, FOI Act, and CC Act.
-
Provide advice on privacy, FOI, CDR, and information policy issues.
-
Consult with stakeholders on privacy, FOI, or CDR guidance.
-
Maintain registers, such as organisations that have opted into Privacy Act coverage.
-
Respond to access to information requests.
-
Communicate with the public, stakeholders, and the media through websites and social media.
-
Share information with other entities or the public where lawful.
We also use personal information for business functions like assessing candidates for career opportunities within Surge Energy.
Collection of Your Personal Information
We aim to collect only the personal or sensitive information required to carry out our functions and duties.
Personal information is primarily collected directly from you, for example, when you:
-
Contact us for information.
-
Make a complaint or request an Information Commissioner review.
-
Make an information access request or data breach notification.
-
Respond to a survey or apply for a job vacancy.
We may also collect information indirectly from publicly available sources or third parties, such as your authorised representative, government agencies, or alternative complaint bodies. This is done to ensure the accuracy and completeness of the information we hold about you
Anonymity
You may interact with us anonymously or using a pseudonym where practicable. However, in most interactions, your name and contact information are necessary to handle your matter reasonably and efficiently.
Collecting Through the Website
Our website, www.surgeenergy.io, collects information through tools like Google Analytics, mailing lists, and event management systems. These tools collect data such as IP addresses, search terms, pages visited, and device information.
Use of Cookies
Cookies are used for record-keeping purposes and to improve user experience. They allow us to remember your preferences and settings, making your interactions with our website more efficient and personalised.
Most browsers allow you to reject cookies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Social Networking Services
We communicate with the public using social networking services like Twitter, Facebook, Instagram, YouTube, and LinkedIn. Personal information collected via these services is handled according to their privacy policies.
We may use these platforms to share updates, respond to queries, and engage with our audience. Please note that any information you share with us on these platforms may be visible to other users.
Primary Purpose Uses
We use personal information to:
• Exercise our powers or perform our functions and duties.
• Carry out analytics, business improvement, and reporting.
• Process job applications.
Secondary Purpose Uses
We may use your information for secondary purposes, such as internal and external reporting, provided it is de-identified. Sensitive information is only used with your consent, except in limited circumstances permitted by law.
Disclosure
We disclose personal information:
• With your consent for secondary purposes.
• When required or authorised by law.
• For enforcement-related activities.
• For external reporting, de-identified as necessary.
• In statutory information sharing with other regulatory bodies.
Quality and Security of Personal Information
We ensure that personal information is accurate, up-to-date, and secure through consistent record-keeping, third-party verification, and regular audits. Information is stored on secure servers in Australia, with appropriate access security and monitoring controls.
These controls include encryption, firewalls, and intrusion detection systems to prevent unauthorised access to your personal information.
Accessing and Correcting Your Personal Information
You have the right to access and correct your personal information. To request access or correction, contact us. We will verify your identity and respond within 30 days. If we refuse your request, we will provide reasons in writing.
How to Make a Complaint
If you have concerns about how we handle your personal information, contact us in writing. If you are dissatisfied with our response, you have the right to contact the Commonwealth Ombudsman.
Contact Us
For enquiries, complaints, or requests related to your personal information, contact the Privacy Officer at privacy@surgeenergy.io
Policy Updates
This privacy policy may be updated periodically. The latest version will be posted on our website, and material changes will be communicated through appropriate channels. We will also provide a summary of the changes made and the reasons for these changes.
Effective Date
This privacy policy is effective as of June 20, 2023.