Endeavour Group

Policy provides comprehensive scope statement, specific contact details for Privacy Officer, clear section navigation, and accessible website location. Strong introductory section with compliance commitment and business description demonstrates good transparency practices.

Comprehensive list of specific collection and use purposes with clear examples for each category. Includes marketing opt-out mechanisms and secondary use disclosure, though consent requirements for new purposes could be more explicit.

Policy includes named Privacy Officer with complete contact details and website accessibility commitment, but update frequency is vague ('from time to time') without specific review schedules or change notification processes.

Detailed enumeration of personal information types collected with specific examples, multiple collection methods disclosed including automated tracking, and clear legal basis statements. Good coverage of sensitive information handling and optional identification disclosure.

Policy identifies categories of third parties and includes contractual obligations requiring compliance with Australian privacy laws. However, lacks specific named recipients and could provide more detailed purposes for each category of sharing.

Generic security commitments mentioning physical and electronic measures but lacking specific technical details like encryption standards or certifications. Third-party security requirements are mentioned but without detailed safeguards.

General disclosure of overseas transfers with contractual safeguards requiring compliance with Australian privacy laws, but lacks specific country destinations or adequacy mechanisms for enhanced protection.

Strong coverage of access and correction rights with specific contact methods, clear 30-day response timeframes, and detailed complaint handling process including OAIC escalation. Identity verification and fee structure are transparently disclosed.

Limited disclosure of automated processing for personalisation, marketing, and analytics purposes, but lacks transparency about decision logic, AI/ML use, or specific opt-out rights for automated decisions.

No relevant claims found in policy.

No specific findings.