Privacy Policy

How we collect, use, store and protect your personal information.

Last updated: 8 September 2026

Whitfield Excavations Pty Ltd (ABN 56 618 129 285), trading as Whitfield Excavations and including its divisions SPS Plumbing, Drill Direct and EnviroX Solutions (together, "Whitfield Excavations", "the Whitfield Group", "we", "us" or "our"), is committed to protecting your privacy. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Scope of this policy

This policy applies to personal information we collect through our website at whitfieldexcavations.com.au, by phone, email, post or in person, and in the course of quoting for, tendering for and delivering civil construction, plumbing, boring and locating, plant hire, waste management and related services. It also applies to information we hold about suppliers, subcontractors, job applicants and members of the public who interact with our work sites.

2. What personal information we collect

The kinds of personal information we may collect include:

  • Contact details: your name, company or organisation, position, phone number, email address, postal and site addresses.
  • Enquiry and project information: the details you provide when requesting a quote or sending an enquiry through our website contact form, including the service required, project location and your message.
  • Client and contract records: quotations, tenders, contracts, purchase orders, invoices, payment details (such as bank account details for invoicing and payment), correspondence and project documentation.
  • Supplier and subcontractor information: ABNs, insurance certificates of currency, licences, qualifications, inductions and compliance records required under our quality and safety systems.
  • Site and safety records: visitor and contractor induction registers, sign-in records, incident and near-miss reports, and photographs taken to document works. These may include personal information about people present on our sites.
  • Job applicant information: résumés, qualifications, licences, work history, referee details and any other information you provide when applying for work with us.
  • Website usage information: technical information collected automatically by our web server when you visit our website (see section 6).

We do not generally collect sensitive information (such as health information) unless it is reasonably necessary (for example, medical information relevant to a workplace incident or a job applicant's fitness for work) and you have consented or collection is otherwise permitted by law.

3. How we collect personal information

Where practicable we collect personal information directly from you, for example when you complete our website contact form, call or email our office, meet with our team, submit a tender or quotation response, sign in to one of our work sites or apply for a position. We may also collect information from:

  • your organisation, where you are a representative of a client, supplier or subcontractor;
  • publicly available sources such as the Australian Business Register, ASIC and professional licensing bodies;
  • referees you nominate as part of a job application; and
  • government agencies, water authorities, councils and utility operators in the course of delivering works.

You may deal with us anonymously or using a pseudonym where it is lawful and practicable to do so; however, we will generally need your contact details to respond to an enquiry or provide a quote.

4. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for the purposes of operating our business, including to:

  • respond to your enquiries and provide quotations, tenders and proposals;
  • plan, deliver, manage and invoice our services and administer contracts;
  • obtain permits, authorisations and approvals from councils, VicRoads and other authorities;
  • meet our obligations under our ISO 9001, ISO 14001 and ISO 45001 certified Integrated Management System, including inductions, training records, incident investigation and audits;
  • comply with occupational health and safety, environmental, taxation, corporate and other legal obligations;
  • manage our relationships with suppliers and subcontractors and verify their insurances, licences and compliance;
  • assess job applications and manage employment;
  • maintain the security of our people, sites, plant and equipment; and
  • improve our website and services.

We will only use or disclose your personal information for the purpose for which it was collected, a related purpose you would reasonably expect, or where you have consented or we are required or authorised by law.

5. Who we may disclose personal information to

We may disclose personal information to:

  • our employees and contractors who need the information to carry out their duties;
  • clients, principal contractors, project managers and consulting engineers for whom, or with whom, we are delivering works;
  • councils, VicRoads, water authorities, utility operators and other government or regulatory bodies where required for permits, approvals, compliance or reporting (including WorkSafe Victoria and the EPA where required by law);
  • our professional advisers, insurers, brokers and auditors (including our ISO certification body);
  • service providers who host our website and email, provide IT support or accounting software, or otherwise assist us to operate our business; and
  • any person or body to whom we are required or authorised by law to disclose information.

We do not sell, rent or trade personal information, and we do not disclose it to third parties for their own direct marketing purposes.

Overseas disclosure

Our website is hosted on servers located in Australia and our business records are held in Australia. Some software providers we use (for example email or cloud-based business systems) may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure the recipient handles personal information in a manner consistent with the Australian Privacy Principles.

6. Our website, cookies and analytics

Our website does not use advertising, marketing or cross-site tracking cookies, and we do not use third-party analytics services that profile individual visitors. When you visit our website, our web server automatically records standard technical information in its logs, such as your IP address, browser type, the pages you visit, the date and time of your visit and the referring website. This information is used for security, troubleshooting and aggregate statistics and is not used to identify you personally.

Our website uses a small amount of browser storage to remember that you have dismissed our cookie notice, and loads web fonts from Google Fonts. For full details, please see our Cookie Policy.

Our website may contain links to external websites (for example, Google Maps for directions). We are not responsible for the privacy practices or content of those websites.

7. Direct marketing

We may occasionally contact existing and prospective clients with information about our services, new equipment or capabilities where we reasonably believe it is of interest to you and you would reasonably expect it. You may opt out at any time by contacting us using the details below, and we will action your request promptly.

8. Storage and security of personal information

We hold personal information in electronic form on secured business systems and, where necessary, in hard copy at our office at 25 Saleyards Road, Swan Hill VIC 3585. We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure, including:

  • access controls and password protection for business systems and email;
  • HTTPS encryption of information submitted through our website;
  • secure storage of hard-copy records, including safety and induction registers; and
  • document and record control procedures under our Integrated Management System.

We retain personal information for as long as it is needed for the purposes described in this policy and to meet our legal, contractual, safety and record-keeping obligations (which for construction, safety and financial records may be several years). When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

9. Accessing and correcting your personal information

You may request access to the personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact our office using the details below. We will respond within a reasonable period and may need to verify your identity before releasing information. In limited circumstances permitted by law we may refuse access; if so, we will explain why in writing.

10. Making a privacy complaint

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us in writing using the details below. We take complaints seriously and will acknowledge your complaint, investigate it and respond to you within a reasonable time (generally within 30 days).

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version will always be published on this page with the date it was last updated.

12. Contact us

For any questions about this policy or the way we handle your personal information, please contact: