Privacy Policy

Effective Date: 01/04/2026

Consignmate Pty Ltd ACN 638 468 096 (Consignmate, we, us, our) is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) (the Privacy Act) and the Australian Privacy Principles (APPs) contained in the Privacy Act.

This Privacy Policy explains how Consignmate collects, uses, discloses and manages Personal Information in connection with the Consignmate freight and transport management software platform and related services (the Services).

By using the Services or providing your Personal Information to us, you acknowledge that you have read and understood this Privacy Policy and that we may collect, use and disclose your Personal Information as set out below, and as permitted or required by law.

Collection of Personal Information

Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Information We Collect

Depending on your relationship with us (as a customer, user, driver, carrier, supplier, or other contact), we may collect the following categories of Personal Information:

  • Identification and contact details such as name, email address, phone number, business name, ABN, and postal address.
  • Account and authentication information such as username, password, and account preferences.
  • Employment and professional details such as job title, employer, driver licence details, and right-to-work documentation (where you are a driver or other service provider engaged through the Services).
  • Financial and payment information such as credit card details, bank account information, billing addresses, and tax file numbers or other tax identifiers (where required for payment or invoicing purposes).
  • Freight and transport operational data including consignment details, shipment information, customer lists, delivery addresses, manifest data, GPS location data, proof of delivery records, vehicle details, driver activity logs, fatigue management data, and other operational, configuration, usage, log or metadata associated with your use of the Services.
  • Sensitive Information such as health information (for example, where required for driver medical fitness or workplace health and safety purposes), or criminal history or background check data, only with your explicit consent where required and when directly relevant to transport operations or otherwise required or authorised by law.
  • Device and usage information such as IP address, browser type, operating system, device identifiers, pages viewed, time and date of access, and referring website or application.
  • Location data including real-time GPS tracking data from vehicles and mobile devices used to access the Services, as described further below.

How We Collect Information

Where it is reasonable and practicable, we collect Personal Information directly from you, including when:

  • You register for an account, subscribe to the Services, or sign up for a trial.
  • You or your Users access or use the Services through the Consignmate platform, website, mobile applications (including driver apps), or API integrations.
  • You communicate with our consultants or support staff in person, by phone, email, SMS, video conference, or through social media.
  • You provide your details to us as a customer contact, driver, carrier, supplier, contractor, or business contact.
  • You use or interact with our website, online forms, social media pages or other digital platforms we operate or use.
  • You participate in surveys, promotions, webinars, training sessions, or other marketing activities.

We may also collect Personal Information about you from third parties, including:

  • Your employer or principal (where you are a driver, carrier, contractor or other service provider accessing the Services through a customer account).
  • Customers and clients who use the Services and who provide information about drivers, carriers, consignees, consignors or other individuals involved in freight and transport operations.
  • Third-party systems and integration partners such as accounting software, telematics providers, GPS systems, EDI platforms, customs systems, carrier systems, logistics platforms, payment processors, label printing services, and other freight, transport or business systems that you connect to the Services.
  • Referees, former employers, and background screening providers (where you are a driver or service provider and background checks are conducted with your consent).
  • Publicly available sources such as professional directories, social media profiles (for example LinkedIn), and business registers.
  • Business partners, resellers, and referral partners who introduce you to our Services.

If we receive Personal Information about you from a third party and it is not information we already hold, we will take reasonable steps to notify you or otherwise ensure you are aware of the collection and the matters set out in this Privacy Policy, unless an exception applies under the Privacy Act.

Purpose of Collection, Use, and Disclosure

We collect, hold, use, and disclose Personal Information for the following purposes:

  • Providing the Services: To enable you and your Users to access and use the Services, including job and consignment management, freight tracking, electronic proof of delivery, mobile driver applications, dispatch board functionality, transport billing and invoicing, customer and manifest reporting, and integration with Third-Party Systems.
  • Account management and support: To create, maintain and administer your account, process subscriptions, provide technical support, troubleshoot issues, and respond to your enquiries.
  • Payment processing: To process payments, manage billing, issue invoices and receipts, and administer fees and charges.
  • GPS tracking and operational services: To enable real-time GPS tracking of vehicles, drivers and consignments for delivery tracking, route optimization, and operational visibility purposes as part of the core Services functionality. Location data collected through the Services is linked to the relevant consignment, vehicle, and driver, and is used solely for freight and transport management purposes in connection with the Services.
  • Communication: To communicate with you about your account, the Services, updates, new features, technical notices, security alerts, and support matters.
  • Service improvement and product development: To monitor, analyse, test, and improve the Services, develop new features and functionality, and enhance user experience.
  • Analytics and reporting: To generate analytics, insights, benchmarking data, and aggregated or de-identified reports (which do not identify you or any individual) for internal business purposes and to improve the Services.
  • Safety, security and fraud prevention: To detect, prevent and respond to fraud, security incidents, abuse, misuse of the Services, and other harmful or illegal activity, and to protect the security, integrity and availability of the Services and our systems.
  • Legal and regulatory compliance: To comply with our legal and regulatory obligations, including under transport, logistics, workplace health and safety, taxation, record-keeping, Chain of Responsibility, and other applicable laws, and to respond to lawful requests from government authorities, regulators, or law enforcement.
  • Business operations and administration: To manage our internal operations, business development, quality assurance, auditing, risk management, compliance, and corporate governance.
  • Direct marketing and customer engagement: To contact you about products, services, updates, newsletters, webinars, events, promotions, or other information we believe may be of interest to you, where we have obtained your consent or are otherwise permitted to do so by law (see Direct Marketing section below).
  • Professional advisory services: To provide information to our legal, financial, insurance, and other professional advisers.

We may use your Personal Information for directly related secondary purposes where you would reasonably expect such use or disclosure, and in other circumstances permitted or required by law.

GPS Location Data and Tracking

The Services include functionality for real-time GPS tracking of vehicles, drivers, and consignments. When you or your drivers use GPS-enabled features of the Services (including mobile driver applications):

  • We collect and process real-time GPS location data from the relevant vehicle or mobile device.
  • Location data is linked to the consignment, vehicle, driver, and customer account.
  • This location data is used solely for freight and transport management purposes, including delivery tracking, route visibility, proof of delivery, customer notifications, and operational reporting.
  • We do not use location data for any purpose unrelated to the provision of the Services.

Consent for GPS Tracking

By using GPS-enabled features of the Services, you (and your drivers and other Users) consent to the collection, use, and disclosure of GPS location data as described in this Privacy Policy.

Where you are a customer or employer:

  • You are responsible for obtaining any necessary consents from your drivers, carriers, contractors, and other Users before they use GPS-enabled features of the Services.
  • You must ensure that your drivers and other Users are aware of and consent to GPS tracking in accordance with applicable workplace surveillance, privacy, and employment laws (including state and territory surveillance device legislation).
  • You should implement appropriate policies, notices, and consent mechanisms in accordance with applicable laws in your jurisdiction (such as the Surveillance Devices Act 1999 (Vic), Surveillance Devices Act 2007 (NSW), Surveillance Devices Act 2016 (SA), and equivalent legislation in other Australian jurisdictions).

Where you are a driver or other User of GPS-enabled features:

  • Your employer or principal is responsible for informing you of GPS tracking and obtaining your consent.
  • You acknowledge that your location may be tracked in real time while you are using the Services for work-related purposes.
  • If you have concerns about GPS tracking, please raise them with your employer or principal.

We do not use GPS location data to monitor individuals during personal time, private activities, or outside of work-related use of the Services. Customers and employers are responsible for ensuring that GPS tracking is limited to work-related purposes in accordance with applicable laws.

Disclosure to Third Parties

We may disclose your Personal Information to the following categories of recipients:

  • Other users of the Services: Where you are a driver, carrier, contractor, or other service provider, your Personal Information (such as name, contact details, and delivery activity) may be disclosed to customers and other Users who engage or interact with you through the Services.
  • Customers and employers: Where you are a driver or other User accessing the Services through a customer account, your Personal Information (including location data, activity logs, and operational data) may be disclosed to that customer or employer.
  • Service providers and subcontractors: We may disclose Personal Information to third-party service providers who assist us in providing the Services, including providers of cloud hosting and infrastructure, data storage, payment processing, fraud detection, identity verification, email and communication services, customer support tools, analytics and reporting, software development and testing, IT support, security services, and professional advisory services (legal, accounting, insurance). Where we engage third-party service providers, we take reasonable steps to ensure they are bound by confidentiality and privacy obligations consistent with this Privacy Policy and the APPs.
  • Third-Party Systems and integration partners: Where you connect Third-Party Systems to the Services (such as accounting software, telematics providers, GPS systems, EDI platforms, customs systems, carrier systems, logistics platforms, payment processors, and other freight or business systems), we may disclose Personal Information (including Customer Data) to those Third-Party Systems as reasonably required to enable the integration, interoperation, or data exchange you have authorised. You are responsible for reviewing and complying with the privacy policies and terms of use of any Third-Party Systems you connect to the Services.
  • Business partners, resellers, and referral partners: We may disclose limited contact and account information to our authorised business partners, resellers, and referral partners for business development, customer support, and relationship management purposes.
  • Purchasers and successors: We may disclose Personal Information to third parties in connection with a proposed or actual sale, merger, acquisition, reorganisation, or other transfer of all or substantially all of our business or assets, or in the event we discontinue our business or undergo insolvency or bankruptcy proceedings, provided that the third party agrees to handle your Personal Information in a manner consistent with this Privacy Policy.
  • Government agencies, regulators, and law enforcement: We may disclose Personal Information to government authorities, regulators, law enforcement agencies, courts, tribunals, or other public bodies where required or authorised by law, including to comply with legal process (such as subpoenas or court orders), to respond to lawful requests, to enforce our rights and agreements, to protect the safety of any person, to prevent or investigate suspected illegal activity, fraud, or security threats, or to otherwise comply with our legal and regulatory obligations.

We do not sell, rent, or trade your Personal Information to third parties for their own marketing purposes.

Overseas Disclosure

Some of our third-party service providers (including cloud hosting, infrastructure, payment processing, and IT support providers) may be located outside Australia or may store, process, or access Personal Information on servers located overseas.

The countries in which such overseas recipients may be located include, but are not limited to, the United States, the European Union, the United Kingdom, Singapore, and other jurisdictions where our service providers operate data centres or have operations.

Where we disclose your Personal Information to overseas recipients, we take reasonable steps to ensure that those recipients handle your Personal Information in a manner consistent with the APPs, including by:

  • Selecting service providers with strong data protection practices and certifications.
  • Entering into contractual arrangements that require overseas recipients to comply with privacy and security obligations equivalent to those under the Privacy Act.
  • Relying on other mechanisms permitted under the Privacy Act, such as your consent or applicable exceptions.

You acknowledge and consent to the disclosure of your Personal Information to overseas recipients as described in this Privacy Policy. If you do not consent to such overseas disclosure, you should not use the Services or provide us with your Personal Information.

Direct Marketing

We may use your Personal Information to contact you (by email, SMS, phone, or other means) about products, services, updates, newsletters, webinars, training, events, promotions, or other information we believe may be relevant to you, where:

  • You have provided consent (express or implied) to receive such communications; or
  • We are otherwise permitted to do so under applicable law (including the Spam Act 2003 (Cth) and the Privacy Act).

Opting Out

You may opt out of receiving direct marketing communications from us at any time by:

  • Using the unsubscribe link or opt-out mechanism included in our marketing emails or SMS messages.
  • Contacting us directly using the contact details at the end of this Privacy Policy.
  • Updating your communication preferences in your account settings (where available).

If you opt out of direct marketing, we may still contact you in relation to your account, subscriptions, transactions, support requests, or other non-marketing communications related to the Services or our relationship with you.

Security of Personal Information

We take reasonable steps to protect your Personal Information from misuse, interference, loss, unauthorised access, modification, or disclosure. Security measures we implement include:

  • Encryption of data in transit (using SSL/TLS protocols) and at rest where appropriate.
  • Access controls, authentication mechanisms, and role-based permissions to restrict access to Personal Information to authorised personnel and systems.
  • Use of reputable cloud hosting and infrastructure providers with strong security practices and certifications.
  • Regular security assessments, monitoring, and incident response procedures.
  • Confidentiality and security obligations imposed on our employees, contractors, and service providers.

You acknowledge that no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security of your Personal Information. You are responsible for maintaining the confidentiality and security of your account credentials (username and password) and for all activities that occur under your account.

If we become aware of a data breach that is likely to result in serious harm to you, we will comply with our obligations under the Privacy Act to notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

Data Retention and Deletion

We retain Personal Information for as long as reasonably necessary to provide the Services to you, to fulfill the purposes described in this Privacy Policy, and to comply with our legal and regulatory obligations (including record-keeping requirements under transport, taxation, workplace, and other applicable laws).

Retention periods vary depending on the type of information and the purposes for which it was collected. For example:

  • Account and subscription information is retained for the duration of your subscription and for a reasonable period thereafter for business, audit, and legal purposes.
  • Customer Data (including consignment, shipment, driver, vehicle, and GPS data) is retained for the duration of your subscription and for such additional period as may be required by law or as reasonably necessary for backup, disaster recovery, audit, or dispute resolution purposes. Following termination, we will delete or anonymise Customer Data within 90 days, except for Aggregated Data (as defined in our Terms of Service) or any data we are required to retain by law, or where you request an export of Customer Data.
  • Financial and tax records are retained for at least 7 years (or such longer period as required by taxation and financial record-keeping laws).
  • Sensitive Information is retained only for as long as necessary for the purpose for which it was collected or as required by law, and is deleted or de-identified when no longer needed.

When Personal Information is no longer required, we will take reasonable steps to destroy, delete, or de-identify it in accordance with our records management policies and applicable legislation, unless we are required or permitted to retain it by law.

You may request deletion of your Personal Information (subject to our legal and operational retention requirements) by contacting us using the details below. See the Access, Correction, and Complaints section for more information.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies on our website and in the Services to:

  • Remember your preferences and settings.
  • Authenticate your account and maintain your logged-in session.
  • Analyse usage patterns and improve the Services.
  • Provide analytics and performance monitoring.
  • Deliver relevant content and advertising (where applicable).

What Are Cookies?

A cookie is a small piece of data stored on your computer or mobile device by your web browser when you visit a website. Cookies help us recognise your browser, remember your preferences, and enhance your experience.

Types of Cookies We Use

  • Essential cookies: Required for the Services to function properly (for example, to maintain your login session and enable core functionality). These cookies do not collect Personal Information about you.
  • Performance and analytics cookies: Used to collect information about how you use the Services, such as pages visited, features used, and errors encountered, to help us improve the Services. We may use third-party analytics providers (such as Google Analytics) for this purpose.
  • Functional cookies: Used to remember your preferences and settings, such as language preferences, display settings, and customisation options.

 

Google Maps API

The Services use the Google Maps API to provide mapping, route planning, geocoding, and location-based functionality. Google Maps may collect information from you and your device in accordance with Google’s Privacy Policy. For more information, see https://policies.google.com/privacy.

Managing Cookies

Most web browsers allow you to control and manage cookies through your browser settings. You can configure your browser to:

  • Block all cookies.
  • Block third-party cookies only.
  • Notify you when a cookie is set.
  • Delete existing cookies.

Please note that if you block or delete cookies, certain features of the Services may not function properly, and you may need to re-enter your login credentials each time you visit.

Access, Correction, and Complaints

Access and Correction

You have the right to request access to, and correction of, the Personal Information we hold about you, subject to certain exceptions under the Privacy Act.

To request access to or correction of your Personal Information:

  • Contact us using the details at the end of this Privacy Policy.
  • Provide sufficient information to enable us to identify you and locate the relevant Personal Information.
  • We may require you to verify your identity before processing your request (for example, by providing proof of identity or answering security questions).

We will respond to your request within a reasonable timeframe (generally within 30 days) and in accordance with the Privacy Act. If we refuse your request (in whole or in part), we will provide you with written reasons for the refusal and information about how to make a complaint.

We may charge a reasonable fee to cover the administrative costs of providing access to your Personal Information, but we will not charge for making a request. We will notify you of any applicable fee before processing your request.

If you are an end user (for example, a driver or carrier) accessing the Services through a customer account, and you wish to update, access, or delete your Personal Information, you should first contact the customer or employer who controls your account. We may refer your request to that customer or employer.

 

Complaints

If you have a complaint about how we have collected, used, disclosed, or handled your Personal Information, or if you believe we have breached the Privacy Act or the APPs, please contact us in writing using the details below. Your complaint should include:

  • Your name and contact details.
  • Details of the complaint, including the conduct you are complaining about.
  • Any relevant supporting information or documentation.

We will investigate your complaint and respond within a reasonable timeframe (generally within 30 days). If we require additional information or more time to investigate, we will notify you.

If you are not satisfied with our response to your complaint, or if you would prefer to make a complaint directly to a regulator, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Website: www.oaic.gov.au

Privacy Policy Updates

We may amend this Privacy Policy from time to time to reflect changes in law, technology, our operations, business practices, or the Services. Any amendments will be effective from the date we publish the updated Privacy Policy on our website.

Where required by law, we will notify you of material changes to this Privacy Policy (for example, by email or by displaying a prominent notice on the Consignmate platform) and provide you with an opportunity to review the updated Privacy Policy before it takes effect.

The current version of this Privacy Policy will always be available on our website at [Insert URL]. We encourage you to review this Privacy Policy periodically.

Your continued use of the Services after we publish an updated Privacy Policy constitutes your acceptance of the updated Privacy Policy.

Children’s Privacy

The Services are not intended for use by children under the age of 18, and we do not knowingly collect Personal Information from children under 18. If you are under 18, you must not use the Services or provide any Personal Information to us.

If you are a parent or guardian and you become aware that your child has provided us with Personal Information without your consent, please contact us immediately using the details below. If we become aware that we have collected Personal Information from a child under 18 without verification of parental consent, we will take steps to delete that information from our systems as soon as reasonably practicable.

Third-Party Websites and Services

The Services may contain links to third-party websites, platforms, or services (including Third-Party Systems that integrate with the Services) that are not operated or controlled by Consignmate.

This Privacy Policy applies only to the Services. We are not responsible for the privacy practices, content, accuracy, or security of any third-party websites or services. When you click on a link to a third-party website or service, you leave the Services and your interactions with that third-party website or service are governed by its own privacy policy and terms of use.

We encourage you to review the privacy policies of any third-party websites or services you visit or use.

Contact Us

For all privacy enquiries, requests for access to or correction of your Personal Information, complaints, or questions about this Privacy Policy, please contact us:

Consignmate Pty Ltd
3/6-8 Grey Street
Traralgon VIC 3844
Australia

Email: hello@consignmate.com
Website: https://consignmate.com

We will respond to your enquiry or request as soon as reasonably practicable and in accordance with the Privacy Act.