Privacy Policy

1. Introduction

Veraspec Australia Pty Ltd (ACN 663 991 713) and its related entities (collectively “Veraspec”, “we”, “us”, or “our”) are committed to protecting your privacy and handling personal information in accordance with applicable privacy and data protection laws.

This privacy policy explains how we collect, use, disclose, store, and safeguard personal information via our website (https://veraspec.com) and our global operations, including Australia and the United Arab Emirates (“UAE”). It also explains how you can contact us and exercise your privacy rights.

By using our website or providing personal information to us, you agree to the terms of this privacy policy.

2. What information we collect

We may collect the following kinds of personal information:

Identification and contact information such as your name, email address, phone number, company, job title, and country or region, provided through contact forms, service requests, business enquiries, surveys, events, and correspondence.
Professional information such as your organisation, role, and areas of interest in our services.
Information collected automatically when you visit our website, including IP address, browser type, operating system, device identifiers, pages viewed, referring/exit pages, timestamps, and information gathered through cookies, pixels, tags, or analytics tools.
Any other information you choose to provide to us when you communicate with us or interact with our digital channels.

Where required by law, we will treat information that can reasonably identify you as “personal information” or “personal data”.

3. How we collect information

We collect personal information in the following ways:

Directly from you, when you fill in online forms, send us an email, call us, meet with us in person, apply for a job, or otherwise communicate with us.
Automatically through cookies and similar technologies when you use our website (see “Cookies and tracking technologies” below).
From third-party sources as permitted by law, for example business partners, publicly available sources, and professional networking platforms.

We collect personal information only when it is reasonably necessary for our functions and activities, or where required/authorised by law.

4. How we use your information

We may use your personal information for the following purposes:

To respond to your enquiries, provide information you request, and deliver our services.
To manage our business relationship with you or your organisation, including account management, proposals, contracts, and project delivery.
To send business updates, marketing communications, invitations to events, or newsletters, where permitted by law and with your consent where required. You may opt out of these communications at any time using the unsubscribe link or by contacting us.
To operate, maintain, secure, and improve our website, digital channels, and services, including analytics, testing, monitoring, and troubleshooting.
To comply with legal, regulatory, and risk management obligations, including responding to lawful requests from regulators or authorities.
Any other purpose that we disclose to you at the time of collection or that is otherwise authorised or required by law.

We will not use your personal information for purposes that are materially different, unrelated, or incompatible with these purposes without notifying you and, where required, obtaining your consent.

5. Legal bases (Australia and UAE)

In Australia, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

In the UAE, when we process personal data in connection with our Dubai operations or UAE residents, we rely on lawful bases under Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (“UAE PDPL”), such as consent, performance of a contract, compliance with legal obligations, and legitimate interests, where permitted.

Where we rely on consent, we will obtain it through a clear, affirmative action, and you may withdraw your consent at any time.

6. Disclosure of your information

We may share your personal information with:

Our subsidiaries, related bodies corporate, and affiliated entities, where necessary to support operations and deliver services.
Contractors, professional advisers, IT and cloud service providers, analytics providers, and other third-party vendors who assist us in operating our business and website, subject to appropriate confidentiality and data protection obligations.
Regulatory, government, law enforcement, or supervisory authorities where required by law, regulation, or court order, or where reasonably necessary to protect our rights, property, or safety or that of others.
Any other third party with your consent or at your direction.

We do not sell your personal information to third parties.

7. Overseas disclosure and cross‑border data transfers

Personal information may be processed and stored in countries where Veraspec operates or where our service providers are located, including Australia and the UAE.

Where we transfer personal information across borders (for example between Australia and the UAE), we will:

Take reasonable steps to ensure that the recipient will handle the information in a manner consistent with this privacy policy and applicable laws.
Implement appropriate contractual and technical safeguards, and, where required by the UAE PDPL, comply with cross-border transfer conditions or obtain approval from the competent authority.

If you have questions about international transfers, please contact us using the details below.

8. UAE PDPL – additional information for UAE residents and operations

Where the UAE PDPL applies, the following additional information is relevant:

8.1 Lawful basis for processing
We will only process personal data in the UAE where there is a lawful purpose under the PDPL, including consent, performance of a contract, legal obligations, or legitimate interests that do not conflict with the rights of data subjects.

8.2 Data subject rights (UAE)
If you are a UAE resident or interact with our UAE operations, you have rights under the PDPL, which may include:

Accessing your personal data and obtaining a copy.
Requesting correction or updating of inaccurate or incomplete information.
Requesting erasure of your personal data, subject to legal and contractual obligations.
Objecting to or requesting restriction of processing in certain circumstances, including automated decision-making or profiling.
Requesting data portability, where technically feasible.
Withdrawing consent at any time, without affecting the lawfulness of processing prior to withdrawal.

We will respond to PDPL rights requests within the timeframes required by law.

8.3 Data Protection Officer (DPO) – UAE
Veraspec has designated a Data Protection Officer (DPO) for UAE operations to oversee PDPL compliance, respond to privacy queries, liaise with UAE authorities, and handle data subject requests.

You can contact the DPO using the details in the “Contact us” section, stating “Attention: DPO” in your subject line.

8.4 Data breach notification (UAE)
If a personal data breach affecting UAE residents occurs that triggers notification obligations under the PDPL, we will notify the UAE Data Office and affected individuals in accordance with applicable legal requirements.

8.5 Children’s data (UAE)
Where we process personal data of children within the scope of the PDPL, we will obtain verified parental or guardian consent and apply additional safeguards as required by law.

9. Data security

We implement technical, administrative, and physical safeguards designed to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, and destruction.

Despite our efforts, no system can be guaranteed as completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately using the details below.

10. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal, regulatory, and reporting obligations, to resolve disputes, and to enforce our agreements.

When personal information is no longer required, we will take reasonable steps to de-identify or securely destroy it, in accordance with applicable laws and our internal policies.

11. Cookies and tracking technologies

We use cookies and similar tracking technologies to:

Operate and secure our website.
Remember your preferences and improve your user experience.
Analyse website traffic and usage patterns, including through third‑party analytics tools such as Google Analytics.

You can manage or disable cookies through your browser settings. If you choose to block certain cookies, some features of our website may not function properly.

Where cookies or similar technologies involve the processing of personal information, we will handle that information in accordance with this privacy policy and, where required by law (including under the UAE PDPL or other applicable regimes), obtain any necessary consents.

12. Third‑party websites

Our website may contain links to third‑party websites, applications, or services that are not controlled by Veraspec. We are not responsible for the privacy practices or content of those third parties.

We encourage you to review the privacy policies of any third‑party sites you visit.

13. Your rights (general)

Depending on your jurisdiction, you may have rights in relation to the personal information we hold about you. These can include rights to:

Request access to your personal information.
Request correction or updating of your personal information where it is inaccurate or incomplete.
Request deletion or de-identification of your personal information, subject to legal and contractual obligations.
Object to or request restriction of certain types of processing, including direct marketing.
Lodge a complaint with a supervisory authority (for example, the Office of the Australian Information Commissioner or the UAE Data Office) if you believe your privacy rights have been infringed.

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding to your request, and we will respond within the timeframes required by law.

14. Complaints

If you have concerns about how we have handled your personal information, please contact us first using the details below and provide full details of your concern.

We will investigate and respond to your complaint within a reasonable time. If you are not satisfied with our response, you may be entitled to lodge a complaint with the relevant privacy or data protection authority in your jurisdiction (for example, the Office of the Australian Information Commissioner or the UAE Data Office).

15. Contact us

For privacy enquiries or to exercise your data rights, please contact:

Veraspec Australia Pty Ltd
25 Burke Street, Woolloongabba QLD 4102, Australia
Email: marketing@veraspec.com
Phone: +61 (7) 3535 1262

For UAE Data Protection Officer queries, please use the contact details above and include “Attention: DPO” in the subject line.

16. Updates to this policy

We may update this privacy policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes, we will update the “Last Updated” date at the top of this policy and, where appropriate, provide additional notice (such as a banner on our website). Your continued use of our website after any changes take effect will constitute your acknowledgement of the revised policy.