Privacy Policy

HSG SA Pty Ltd | Effective 9 September 2026

This policy explains how HSG SA Pty Ltd collects, uses, stores and protects personal information when people visit our website, request a quote, engage our services, apply for work or otherwise deal with us.

1. About this policy

HSG SA Pty Ltd, trading as Hills Sustainable Gardens (HSG), respects your privacy and is committed to handling personal information responsibly. This policy applies to our website, enquiries, quoting and contracting processes, landscape construction and horticultural maintenance services, recruitment, marketing and other business activities.

We aim to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where they apply to us. We may also choose to follow the standards in this policy as good practice where a legal exemption applies.

2. What personal information we collect

The personal information we collect depends on how you interact with us and may include:

  • identity and contact details, including your name, address, email address and telephone number
  • property, site and project details, including access information, plans, photographs, measurements, service locations and information relevant to preparing or carrying out work
  • enquiry, quote, contract, invoice, payment and transaction information (we do not intentionally retain complete payment-card details where payment is processed by a third-party provider)
  • communications with us, including emails, telephone notes, messages, feedback and complaints
  • supplier, subcontractor and commercial contact details
  • job application and employment-related information, including resumes, qualifications, licences, work history, references and right-to-work information
  • website and device information, such as IP address, browser type, pages viewed, referring website, approximate location and cookie or analytics identifiers
  • photographs or video of projects, sites and completed work, which may incidentally include an identifiable person, vehicle, house number or other personal information
  • any other information you provide to us or authorise another person to provide.

We generally do not seek sensitive information unless it is reasonably necessary for a lawful business purpose, such as information relevant to workplace safety or an employment application, and we will seek consent where required.

3. How we collect personal information

We usually collect personal information directly from you when you:

  • submit a website form, email, call or message us
  • request or accept a quote, sign a contract or pay an invoice
  • meet us on site or engage us to perform services
  • subscribe to updates, interact with our social media or provide feedback
  • apply for a position or provide services as a supplier or subcontractor

We may also collect information from your authorised representative, builders, architects, designers, property managers, clients, referees, publicly available sources, social media platforms and service providers. Our website may automatically collect technical information through cookies and similar technologies.

If you provide us with another person’s personal information, please ensure you are authorised to do so and that the person understands how we may handle it.

4. Why we collect, use and disclose information

We may collect, hold, use and disclose personal information to:

  • respond to enquiries and prepare estimates, designs, proposals and quotes
  • plan, schedule, deliver and manage our services and projects
  • communicate with clients, residents, builders, consultants, suppliers and subcontractors
  • administer contracts, accounts, payments, warranties, records and insurance matters
  • manage safety, site access, incidents and legal or regulatory obligations
  • recruit and assess applicants and manage our workforce
  • improve our website, services, systems and customer experience
  • send news or marketing where permitted, with an option to unsubscribe
  • prevent fraud, protect our rights and resolve disputes or complaints
  • use project imagery for our portfolio, website or social media where we have permission or it is otherwise lawful and appropriate.

We may use or disclose information for another purpose where you consent, where you would reasonably expect it, or where permitted or required by law.

5. Website cookies and analytics

Our website may use cookies, pixels and analytics tools to operate the site, remember preferences, understand traffic and improve performance. These technologies may collect device and usage information. Some are provided by third parties and may link information with data those providers already hold.

You can usually block or delete cookies through your browser settings. Some website functions may not work properly if cookies are disabled. Where required, we will request consent for non-essential cookies. Please review any cookie notice shown on our website for the tools currently in use.

6. Direct marketing

We may send you information about HSG services where you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option in a message or contacting us. We will not charge you for opting out and will take action requests within a reasonable period.

7. Who we may disclose information to

We may disclose personal information to people and organisations involved in operating our business or delivering work, including:

  • employees, related businesses, subcontractors, suppliers and consultants
  • builders, designers, engineers, property managers, clients and site representatives where relevant to a project
  • information technology, website hosting, cloud storage, email, customer management, scheduling, accounting, payment, marketing and analytics providers
  • professional advisers, insurers, auditors, debt recovery providers and legal representatives
  • government agencies, regulators, emergency services, courts or law enforcement where required or authorised by law
  • a purchaser or adviser involved in a proposed sale, restructure or transfer of all or part of our business, subject to appropriate confidentiality arrangements.

We do not sell personal information.

8. Overseas disclosure and storage

Some technology and service providers we use may store, process or support information outside Australia, including in the United States and other countries in which those providers or their subcontractors operate. Provider locations can change over time. Where the APPs apply, we will take reasonable steps required by law before disclosing personal information to an overseas recipient.

9. Security and retention

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, passwords and multi-factor authentication, secure systems, staff practices, physical security and reputable service providers.

No internet transmission or storage system is completely secure. Please avoid sending unnecessary sensitive information through ordinary website forms or email.

We retain personal information only for as long as reasonably needed for our business and legal purposes, including taxation, employment, insurance, warranty, dispute and record-keeping requirements. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to legal obligations and practical backup cycles.

10. Data breaches

We will assess and respond to suspected data breaches. If the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm that cannot be prevented through remedial action, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

11. Access and correction

You may ask to access personal information we hold about you or request that inaccurate, out-of-date, incomplete, irrelevant or misleading information be corrected. Contact our Privacy Officer using the details below. We may need to verify your identity before responding.

We will respond within a reasonable period. In some circumstances the law allows us to refuse access or correction. If that happens, we will generally explain the reason and available complaint options. We may charge a reasonable cost for providing access, but not for making a request or correcting information.

12. Anonymity

Where practical and lawful, you may deal with us anonymously or using a pseudonym. However, we will usually need accurate identity, contact and site details to prepare a quote, enter a contract, attend a property or deliver services.

13. Links and third-party services

Our website may link to third-party websites, social media services or applications. Their privacy practices are governed by their own policies, and we are not responsible for their content or handling of personal information.

14. Complaints

If you have a privacy concern or complaint, please contact our Privacy Officer and provide enough detail for us to investigate. We will acknowledge and investigate the matter and aim to respond within 30 days, although complex matters may take longer. We will tell you if we need more time.

If you are not satisfied with our response and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner at [www.oaic.gov.au](http