Ampol

Comprehensive scope statement covering multiple stakeholder types, clear policy structure with two-part division, specific contact details for Privacy Compliance Officer, and multiple accessibility channels. Strong foundational transparency elements with good navigation aids.

Clear primary purposes stated for different data subjects, comprehensive marketing use disclosure with consent requirements, specific analytics and research purposes, and robust opt-out mechanisms with no disadvantage commitment.

Clear update triggers specified, multiple accessibility channels, specific Privacy Compliance Officer contact details with defined purposes, current version date provided, though review frequency and governance framework details are limited.

Detailed enumeration of specific data types collected across different contexts (customers, employees, contractors), clear collection methods both direct and third-party, explicit sensitive information handling with consent requirements, and specific automated collection disclosures.

Good mix of specific named entities (Meta, Google, Link Market Services) and detailed categories of third parties, clear purposes for sharing, overseas disclosure with specific countries listed, though contractual privacy obligations could be more explicit.

Good range of physical and technical security measures including access controls, encryption for high-risk transmissions, and data retention policies, but lacks specific certifications, audit practices, or breach notification commitments.

Specific countries and regions named for transfers, clear disclosure of intragroup and service provider transfers, overseas Ampol entities bound by privacy policy, though adequacy mechanisms and specific safeguards could be stronger.

Clear access and correction rights with specific processes, detailed complaint mechanism including OAIC escalation, marketing opt-out rights with multiple methods, though response timeframes are not specified for most processes.

No relevant claims found in policy.

No relevant claims found in policy.

No specific findings.