Purpose
YES Group is committed to protecting the privacy of individuals and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Although we do not generally collect personal information from customers, we may collect and handle personal information from employees, subcontractors, suppliers, and other stakeholders in the course of our operations.
Scope
This policy outlines how we manage personal information, including:
- What personal information we collect (if any)
- How we use and disclose it
- How we protect it
- Your rights regarding your personal information.
What Personal Information We Collect
We typically do not collect personal information from customers. However, we may collect personal information from:
- Employees and job applicants (e.g. contact details, employment history, emergency
contacts)
- Subcontractors and suppliers (e.g. ABN, contact details, insurance and licensing information)
- Visitors to our sites and premises (e.g. CCTV footage for security purposes)
We do not collect sensitive information unless required by law or with consent.
How We Use Personal Information
We use personal information only for purposes directly related to our business operations, including:
- Employment and HR management
- Safety and compliance with workplace laws
- Managing supplier and subcontractor relationships
- Security and incident management
We do not use personal information for marketing purposes.
Disclosure of Personal Information
We may disclose personal information:
- To government agencies or regulators where required by law
- To service providers who assist us in our operations (e.g. payroll, IT support)
- Where consent has been provided
We do not sell or share personal information for unrelated third-party marketing.
Website Usage and Cookies
When you visit our website, certain data may be collected automatically through the use of cookies and similar tracking technologies. This includes:
- Usage Data: Information such as browser type, operating system, pages visited, time spent on site, and referring URLs.
- Cookies: Small data files stored on your device to enhance user experience, enable website
functionality, and support analytics.
Cookies may be set by us or by third-party services integrated into our website (e.g. analytics providers or social media platforms). These cookies help us understand how visitors interact with our website and improve its performance and usability.
You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.
We do not use cookies to collect sensitive personal information or for third-party marketing purposes.
We may also collect personal information directly from customers or website users when they submit forms, request quotes, sign up for services, or interact with our online tools. This may include names, email addresses, phone numbers, property addresses, and energy usage estimates.
This customer information is collected to allow us to respond to enquiries, provide quotes, deliver services, and support customer accounts.
Online Account and Portal Use
If you use our customer portals or monitoring dashboards, we may collect login credentials, usage analytics, and session information to help secure and improve these services.
We take steps to protect this data through secure authentication mechanisms and encryption
Metering Data
In the course of providing retail energy services, we may collect personally identifiable information (PII) such as names, contact details, National Meter Identifiers (NMIs), billing details, and property usage history. We may also collect and manage metering data from you. Metering data includes information about your electricity usage, which may be collected via smart meters or other metering devices.
Metering data is collected to:
- Accurately bill for electricity usage
- Monitor and manage energy supply
- Support network planning and reliability
- Comply with regulatory obligations
Depending on the type of meter installed, we may collect:
- Interval data (e.g. usage every 5 or 30 minutes)
- Accumulated usage data over billing periods
- Load profiles and time-of-day consumption patterns
We may disclose metering data:
- to the Australian Energy Market Operator (AEMO) and other authorised entities for market operations
- to your authorised representatives upon request
- to regulators or government agencies as required by law
Retail customers may request access to their metering data. We will respond within 10 business days, in accordance with NER Rule 7.14, and provide the data in both summary and detailed formats, including diagrammatic representations where applicable
Mobile Applications and Tracking
Where staff or contractors use mobile applications or field management systems, we may collect data such as location, qualifications, logged hours, and job activity records. This data helps us manage safety, compliance, and project delivery. We do not use this data for monitoring staff outside of work-related purposes.
Data Security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. This includes:
- Secure physical and electronic storage
- Restricted access to personal data
- Staff training on privacy obligations
Overseas Data Storage and Processing
Some personal information may be stored or processed using cloud-based systems hosted outside Australia. These may include CRM platforms, accounting software, or data backup providers.
We ensure that any overseas data handling complies with the Australian Privacy Principles and that reasonable steps are taken to protect your information.
Access and Correction
Individuals may request access to or correction of their personal information by contacting us at the details below. We will respond within a reasonable timeframe and in accordance with the Privacy Act.
Data Breaches
In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.
Contact Us
If you have any questions or concerns about this policy or how we handle personal information, please contact: legal@yesgroupsa.com.au
Updates to This Policy
We may update this policy from time to time to reflect changes in our practices or legal obligations.
The latest version will always be available on our website.
Board Approval Date: 13/08/2025