Policy Summary

Mammoth Projects Pty Ltd (Mammoth) respects your rights to privacy and is committed to protecting your personal information. Our Privacy Policy explains how we collect, store, use and share your personal information so that you can make an informed choice as a customer of Mammoth or user of the Mammoth website located at www.mammothprojects.com.au (Website). In dealing with your personal information, Mammoth complies with the Privacy Act 1988 (Cth) (the Privacy Act) and the Australia Privacy Principles contained therein and is an APP entity for the purposes of the Privacy Act.

This Privacy Policy will be reviewed and if necessary revised annually. We may need to update it over time and if we do, we will post the updated version on our Website.

If you are a customer of Mammoth, use any of our products or services, access our Website or interact with us, our Privacy Policy applies to you. By applying to use one of our products or services, using our Website or otherwise providing personal information to us, you accept and consent to the practices set out in our Privacy Policy, as updated from time to time.

What personal information do we collect and hold? 

To allow Mammoth to provide our products and services, it collects different kinds of personal information about you. The type of personal information we collect depends on which products or services you use, how you use them and our relationship with you. We will only collect personal information that is reasonably necessary for us to conduct and operate our business. By using our Website you agree to our collection and use of the information (including personal information) we obtain.

Below are the main types of personal information we collect:

Identity information

This is information we need to verify the identity of the persons or entities interacting with Mammoth and to allow us to provide services and communicate with you.

This information often includes your name, date of birth, contact details, proof of identity documents, education qualifications, employment history, ABN, tax file number or other information which personally identifies an individual as reasonably required by Mammoth. 

Financial information

We may collect your employment, financial and credit information for the purposes of providing you services or considering your application for services.

Sensitive personal information

The collection of sensitive personal information is restricted by provisions in the Privacy Act and therefore we will not collect any information in relation to your religious views, ethnicity, political opinion, criminal record, health or sexual preferences unless it is required for a purpose specially disclosed to you at the time of collection and you consent to our collection of that information.

Information to protect against fraud, crime or misconduct

This includes different kinds of information we collect to protect either you or a third party, such as the time and date of a transaction made with a bank, supplier or other trusted partner of Mammoth. We may need this information to protect against identity theft, unauthorised transaction, or other fraudulent activities.

On-site information

This is information we collect when you visit our premises or at an on-site location where Mammoth is providing its services. For example, through the use of CCTV. This sort of information helps us to protect our staff and customers, and is important for preventing fraud, crime and misconduct.

Other types of information we collect

We also may collect other information from you, which may or may not be personal information for the purposes of the Privacy Act. This information includes information that does not reveal your identity, such as browser and device information, server log file information, how you have used our Website (including when you accessed our Website, how you navigated through pages on the Website, when you visited, the amount of pages visited and the amount of time spent on the Website), demographic information, location information and aggregated information.

Where the information we have collected is not personal information, we may use and disclose that information for any purpose, except where we are required to do otherwise under applicable law. If non-personal information is mixed with personal information or can be used to build a profile of an individual (in a way which would be reasonably used to identify that individual) such information will be treated by us as personal information.

How do we collect your personal information?

 There are three main ways we collect your personal information:

You give it to us

This might happen during any interaction you have with Mammoth or one of our suppliers and includes information provided by anyone acting on your behalf. It covers a wide range of activities where you might give us information about yourself, for example when you set up an account, fill out a form on our Website, chat with us online or over the phone or email, use one of our services or contact us with a question or complaint.

You are not required to give us the information we request, however, if you do not give us the information we require or the information we obtain is incomplete or inaccurate, this may prevent or delay Mammoth from:

When providing personal information to us, you must not include any personal information about other people unless such people have expressly provided their consent for you to provide us with their personal information and for the purpose for which you have provided it. By providing us with personal information of other people you represent to us that you have the proper consent to provide that personal information.

We collect it ourselves

This is information we collect about you when you interact with us. We might do this when you visit our Website (including via cookies or other technologies) or use our services, including communication with us over the phone or email.

Use of cookies

Cookies are used to collect information about a computer or mobile device for system administration purposes such as IP address, operating system and browser type. Information collected through the use of cookies will be used to evaluate the effectiveness of the Website and to improve user experience. Cookies are not used to identify an individual or to send targeted advertising.

You have the option to accept or decline our use of cookies. If your web browser automatically accepts cookies, this can be modified in the settings function of your browser.

We get it from other sources

These may include our commercial partners who believe that we may be able to provide a service to you. Prior to providing your personal information to any third party, we recommend checking their privacy policy to understand how they deal with your personal information. We may also obtain personal information from our service providers, for example, identity and fraud checking services we use.

How do we use your personal information?

Any personal information we collect about you will only be used for the purposes we have collected it for or as allowed under applicable law, including the Privacy Act. The ways in which we use your personal information include:

To provide products and services to you

We may use your personal information to provide Mammoth’s products and services to you and conduct our business. This may include your contact details, credit card details and other transaction information so that Mammoth can provide services to you and keep proper records of those transactions.

Administration & communication

This includes use of your personal information for general administration functions, such as managing the products and/or services provided to you, dealing with your enquiries, account keeping purposes or to manage complaints.

For example, your personal information may be used to verify your billing details and ensuring that the records we keep on file are up to date.

We will also need to use your personal information to communicate with you by phone, email, SMS, chat functions of social media.


We may use your personal information to analyse user interactions on our Website and to improve its functionality and user experience.

Network and security monitoring

Mammoth undertakes a range of network and security monitoring activities. For example, we may use your telephone number or email address to conduct a two step verification of your identity before providing a service or sending sensitive communications or otherwise interacting with you.

Any email communication sent to Mammoth will be automatically scanned and the contents verified for security purposes, which may result in certain attachments or styles of message being automatically blocked. Our IT administrators may have access to your e-mails in order to authorise the content, however, they will not access the content of your e-mails once this process is complete.

Identifying fraud, crime and misconduct

We may use your personal information to identify and help prevent identity theft, unauthorised transactions or other fraudulent activities. These activities may happen either on or off our Website, for example fraudulent transactions with banks or other third parties.

To help prevent these risks, we have partnered with cyber protection software, such as EFTSure, who may hold and use your personal information to ensure that your online interactions with Mammoth are protected from risks of cybercrime, fraud and error.


We may use your personal information to comply with applicable Australian laws, including the Privacy Act, regulations, legal processes and to protect our rights and the rights of others.

Direct Marketing

We want to make sure you hear about our products, services or special offers from us (or one of our entities) that you might find useful or interesting. We may use the personal information we collect and hold about you to market and promote products, services and special offers directly to you.

You have the right to opt out of marketing communication from us.

If you do not want your personal information to be used for marketing, you can opt out. Below are the easiest ways to do it:

Keep in mind that when you opt out of marketing message, we will still send you important messages relating to your engagement of Mammoth, for example, administration or safety messages.

How do we hold your personal information?

Keeping your personal information safe is of vital importance to Mammoth and we take all reasonable steps to protect your personal information from misuse, interference or loss and from authorised access, modification or disclosure.

We use a combination of physical, electronic and procedural safeguards to protect your personal information held by Mammoth.

We store your personal information securely

We may store your personal information securely in hard copy or electronic format.

Where your personal information is stored in hard copy it is held at our secure office premises which require access codes, keys and security passes to access and have security cameras installed.

Where your personal information is stored on electronic databases, Mammoth ensures that those databases are password protected and are located at secure storage facilities. Access to online databases with personal information is only provided to staff whose role requires that they have access to the personal information.

Our Website has an electronic security system in place, including the use of firewalls and data encryption.

Further, Mammoth ensures only authorised users are granted access to Mammoth systems. Unauthorised access is considered a malicious or accidental security breach and is investigated according to prevent future re-occurrence.

Unfortunately, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us of the problem. Further if you do not feel comfortable transmitting your personal information via our Website or online, there are other ways in which you can provide that information to us. If you would like to speak with us about the ways in which you can provide personal information please contact us at: info@mammothprojects.com.au

We limit the amount of personal information we keep

Where personal information is no longer needed for the purpose for which it was collected or for legitimate business purposes or to meet legislative retention requirements, we take reasonable steps to destroy or de-identify the information.

The length of time we hold personal information is based on specific legislative requirements.

Staying privacy safe when online

It is important to note that our Website may contain links to the websites or social media platforms of third parties. These third parties do not need to comply with our Privacy Policy.

We recommend checking the privacy policies of the site or platform you’re dealing with to understand how they will handle your personal information as their privacy practices and policies may be very different to this policy and the privacy practices of Mammoth.

What happens if there is unauthorised access to or disclosure of your personal information?

A data breach occurs where there is an unauthorised access to or disclosure of personal information held by Mammoth, or personal information is lost in circumstances where unauthorised access or disclosure is likely.

If the data breach is likely to result in serious harm to any of the individuals to whom the information relates and Mammoth has been unable to prevent the likely risk of serious harm with remedial action, then Mammoth is required to notify you and the Office of the Australian Information Commissioner of the eligible data breach.

If this occurs, Mammoth will follow its data breach response plan to manage the data breach. Mammoth’s data breach response plan is available upon request to info@mammothprojects.com.au.

Who do we share your personal information with?

We work with a range of external suppliers, agents, partners and contractors who help us with our business process and/or providing you with products and services on our behalf.

We may share your personal information with these parties, who provide the following kind of services:

We may also use your personal information to protect the rights, property or safety of Mammoth, its customers or third parties, or where it is necessary to obtain third party services, if it is for one of the purposes expressly permitted under applicable data protection and privacy laws or you have provided consent.

When we share personal information, we do so as allowed for by the Privacy Act. Mammoth will only make disclosure to achieve the purpose for which the personal information was provided. Except where disclosure of personal information is consented to by you, permitted by the Privacy Act and/or required by law, Mammoth’s policy is not to disclose personal information to any third party.

Where the personal information relates to a government-related identifier, such as your licence number or tax file number, Mammoth will not use or disclose this information unless it is required or authorised to do so by law or if necessary to verify your identity.

How can you access or correct your personal information?

It’s important that your personal information is kept accurate, up-to-date and complete. If there is any change in your personal details, it is important that you contact us and let us know. You can do that by contacting us at: info@mammothprojects.com.au

If we do not agree with any of your requested changes to the personal information we hold about you, we will advise you of this in writing.

You have a right to request a copy of the personal information we hold about you. This right of access is subject to some exceptions at law, however, in circumstances where those exceptions apply and we are unable to provide you with the personal information we hold about you, we will inform you and explain the reasons why we cannot comply with your request for access.

How can you make a privacy complaint? 

If you have a complaint about how we have handled your personal information, or your believe there has been a breach by Mammoth of the Privacy Act, please contact Mammoth’s Operations Manager at: info@mammothprojects.com.au.

We will acknowledge your compliant in writing as soon as possible and will give you an estimated timeframe for when we will respond. Our aim is to resolve all complaints about privacy concerns as quickly as possible.

If you are unsatisfied with the outcome of your complaint, you may contact us further to advise of your concerns and, if we are unable to reach a satisfactory resolution, you may wish to take your complaint to the Office of the Australian Information Commissioner (OAIC). The OIAC can be contacted by phone: 1300 363 992. Website: oaic.gov.au 

How can you contact us?

If you have any questions about this Privacy Policy or the way we manage your personal information, or if you would like a copy of this Privacy Policy sent to you, please contact 02 8259 0100.