Privacy Policy

GreeneDesk Pty. Ltd. (ABN 13 958 181 688) ("GreeneDesk", "we", "us") is committed to protecting your personal information with the highest level of integrity. This Privacy Policy describes how we collect, use, store, and disclose personal information through our visual recognition product, SooperVision, its associated website (www.soopervision.com.au), mobile applications, and related services (collectively, "SooperVision Services").

This policy applies to all users ("Users") of SooperVision Services and to organisations that subscribe to use our services on behalf of their employees, contractors, students, or members (collectively, "Licensees"). Licensees may publish their own privacy notices; where a Licensee's privacy notice applies, it will supersede this policy in respect of that Licensee's processing activities.

When you interact with our Sites or Apps, we collect two categories of information: Personal Information you actively provide, and information automatically collected from your devices.

a) Personal Information you provide

Personal Information is any information that relates to an identified or identifiable individual. The CCTV supervision system detects people, counts and safety events without identifying individuals. If you choose to enrol in the separate Authorised Pickup module as a staff member or authorised adult, the service may process your face template and associated pickup information. This module is not connected to CCTV cameras, and children are never enrolled or identified.

Face templates used by the optional Authorised Pickup module are sensitive information under applicable privacy law. They are processed only for consenting, enrolled staff and authorised adults. Consent must be obtained before enrolment and may be withdrawn, subject to applicable law.

b) Information collected automatically

Our Sites use cookies and similar technologies to function effectively. These record information about your use of our Sites or Apps, including navigation patterns and session data. Our mobile applications may collect and process location information, including GPS and geolocation data, to provide certain features or improve app functionality.

We use Personal Information to facilitate the business relationships we have with our Licensees, to comply with our legal obligations under Australian and New Zealand law, and to pursue our legitimate business interests. We will not use Personal Information for any purpose incompatible with those stated at the time of collection.

3.1 Automatic Collection

We automatically collect certain device information ("Device Data"). For Android apps, this may include device make, model, OS version, and a non-persistent device UUID. Our applications may collect precise or approximate location data depending on the permissions you grant.

Our Sites also collect, via cookies and analytics tools:

• Browser and device data (IP address, device type, OS, browser type, screen resolution)
• Usage data (time spent on pages, pages visited, links clicked, language preferences)
• Analytics data via Google Analytics to understand usage patterns and diagnose technical issues

3.2 Data Residency and Storage

All data collected through SooperVision Services is stored on infrastructure hosted in Sydney, Australia (AWS Sydney). GreeneDesk does not store your data outside Australia except as described in Section 7 (International Transfers) and only where required safeguards are in place.

3.3 Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Following account deletion, revocation of consent, or a written deletion request, your personal data will be deleted within 30 days, except where retention is required by applicable law or legitimate legal proceedings.

3.4 Sharing with Third Parties

GreeneDesk does not sell or rent Personal Information to marketers or unaffiliated third parties. We share Personal Information only with:

• Service providers - website hosting, data analysis, IT infrastructure, customer service, email delivery, and auditing, each bound by confidentiality obligations
• Our Licensees - as necessary to maintain User accounts and provide SooperVision Services
• Corporate transactions - in the event of a reorganisation, merger, sale, or other business disposition, subject to the acquirer maintaining equivalent privacy protections
• Legal compliance - to comply with applicable Australian or New Zealand law, enforce contractual rights, or respond to valid legal requests from government or regulatory authorities

GreeneDesk may aggregate and de-identify Personal Information so that it no longer identifies any individual. By using the SooperVision Services, you agree that we may access, aggregate, and use de-identified data to understand usage patterns, provide trend reporting, and improve our services. This data will not identify you or any other individual.

You have rights in respect of the Personal Information we hold about you. These include the right to access, correct, and in certain circumstances request deletion of your Personal Information. To exercise any of these rights, please contact us as set out in Section 10.

5.1 Australia - Australian Privacy Principles

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the right to:

• Request access to the personal information we hold about you (APP 12)
• Request correction of personal information that is inaccurate, out-of-date, incomplete, or misleading (APP 13)
• Make a complaint to us, and if unresolved, to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au
• Withdraw consent to the collection or use of sensitive information (including an Authorised Pickup face template) at any time, subject to legal or contractual limitations

5.2 New Zealand - Privacy Act 2020

For users in New Zealand, under the Privacy Act 2020 (NZ) and the New Zealand Privacy Principles, you have the right to:

• Request access to personal information held about you (Privacy Principle 6)
• Request correction of personal information that is incorrect (Privacy Principle 7)
• Make a complaint to the Office of the Privacy Commissioner (OPC) at www.privacy.org.nz
• Be informed of the purposes for which your information is being collected (Privacy Principle 3)

We maintain organisational, technical, and administrative measures appropriate to the sensitivity of the data we process. These are designed to protect Personal Information against unauthorised access, destruction, loss, alteration, or misuse. Access to Personal Information is limited to personnel who require it to perform their duties, and all such personnel are subject to confidentiality obligations.

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the relevant regulator (OAIC in Australia; OPC in New Zealand) as required by the Notifiable Data Breaches scheme (Privacy Act 1988 (Cth), Part IIIC) and Part 6 of the Privacy Act 2020 (NZ).

All SooperVision data is primarily stored in Australia (AWS Sydney). Where it is necessary to transfer Personal Information to service providers or infrastructure in other countries, we will ensure such transfers comply with applicable law, including:

• For Australian users: the requirements of APP 8 (cross-border disclosure of personal information)
• For New Zealand users: the requirements of Privacy Principle 12 (disclosure of personal information outside New Zealand), ensuring the recipient country's laws provide comparable safeguards, or that contractual protections are in place

We will take reasonable steps to ensure that overseas recipients handle Personal Information in a manner consistent with the APPs and New Zealand Privacy Principles.

We use cookies and similar technologies on our Sites. You may configure your browser to refuse cookies or to alert you when cookies are being sent. However, some features of our Sites may not function correctly if cookies are disabled. We use Google Analytics to analyse usage and diagnose technical issues; you may opt out of Google Analytics data collection by using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

We may update this Privacy Policy from time to time to reflect new services, changes to our data handling practices, or changes in applicable law. Material changes will be communicated via a notice on www.soopervision.com.au prior to taking effect. Continued use of SooperVision Services after the effective date constitutes acceptance of the revised policy.

For any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or to make an access or correction request, please contact our Privacy Officer:

If you are not satisfied with our response to a complaint, you may escalate your concerns to:

• Australia: Office of the Australian Information Commissioner (OAIC) - www.oaic.gov.au
• New Zealand: Office of the Privacy Commissioner (OPC) - www.privacy.org.nz

© 2026 GreeneDesk Pty. Ltd. (ABN 13 958 181 688) · Victoria, Australia · soopervision.com.au