Privacy Notice for XCMG Australia

About this Privacy Policy

XCMG Mining Equipment Australia Pty Ltd (ACN 629 278 646) (“XCMG”, “We”, “us” and “our”) is bound by the Privacy Act 1988 (Cth) (Privacy Act), which includes the Australian Privacy Principles (APPs).

This policy explains the personal information we collect, how and why we collect, use, hold and disclose personal information and your privacy rights.

Scope of this Privacy Policy

This policy applies to our collection and processing of ‘personal information’ which is defined in the Privacy Act as information or an opinion about an identified individual, or an individual who is reasonably identifiable.

This includes ‘sensitive information’, which is a subset of personal information. Sensitive information is information or an opinion about your racial or ethnic origin, political opinions, philosophical or religious beliefs and affiliations, trade union membership or associations, sexual orientation, criminal record, your health or genetic information, and biometric information.

Anonymity and pseudonymity

Where it is lawful and practicable to do so, you can choose not to identify yourself when interacting with us or to use a pseudonym. However, in most situations, we will need to identify you.

What personal information do we collect?

We only collect personal information that is reasonably necessary for our business operations, to deliver our products and services, to comply with our legal obligations and to protect our interests.

The types of personal information we collect depends on who you are and the purpose for which you engage with us. We collect and hold personal information about our customers, prospective customers, individuals who operate our service vehicles, employees, job applicants, contractors, representatives from third-party organisations we deal with in conducting our business activities and our website visitors.

The information we collect about you may include:

your contact details (such as your name, email address, phone number, and address, your emergency contact details if required and your XCMG account details if applicable);
data relating to your use of our service vehicles equipped with GPS and a telematics system to provide real-time location data, and to enable us to monitor and manage vehicle performance.
information to support a finance application such as driver’s license and machine operating license, information about individuals who are directors, shareholders, beneficial owners and guarantors of an applicant including banking, credit information, financial information, tax clearance certifications, employment details and identify verification information such as photos of you;
personal preferences on how you use our website at ‘www.xcmg.net.au’ and for receiving direct marketing from us; and
any other information you share with us, including records of our communications, your enquiries, requests and complaints.

For employees and job candidates, the information we collect from or about you during the recruitment and onboarding process may include your:

employment history and qualifications;
academic records;
references;
personal alternative contact details;
superannuation fund;
residency status and working rights;
criminal history records; and
any other information you provide us during the recruitment process.

For contractors, and representatives from third parties we deal with, the information we collect includes your professional contact details and records of our communications.

How do we collect your personal information?

We collect your personal information directly from you whenever you interact with us, including:

from emails, telephone calls, faxes or post you send us;
information you submit on our website or through social media platforms;
when you operate our service vehicle equipped with GPS and telematics system;
when we provide you with goods or services’
information you share in support of your application;
information you share to complete our warranty registration process; and
candidate interviews for a roles with XCMG.

Sometimes we collect your personal information indirectly, from third party or publicly available sources, but only if we have consent or it is reasonably expected and necessary. For example, we may collect personal information from:

our related entities within the XCMG Global group;
our dealer network;
an agent or other third party who has authority to act on your behalf;
referees provided by you in support of an application for a XCMG position (either as an employee or as a contractor);
third parties such as marketing companies or other contractors (including service providers, credit reporting bodies and vendors who provide identity verification services);
academic and training organisations where required to verify your educational or qualification status;
cookies and analytic tools (see below for more detail); and
other publicly available sources (such as from social media and industry association websites).

Why do we collect and process your personal information?

We collect and process personal information to operate our business activities, deliver our products and services, protect our interests and comply with our legal obligations, which includes to:

verify your identity, assess credit applications and complete the sales process, including relevant registration requirements;
provide our products and financial services, and manage our relationship with you (including servicing, collections, responding to queries and complaints and communicating with you);
real-time monitoring of our service vehicles using intelligent control systems and GPS to enable the collection of diagnostics, automatic load sensing, operational efficiency, and providing actionable insights to our customer’s operators and supervisors;
running events and to identify and tell you about other products or services that we think may be of interest to you;
gather and aggregate information for statistical, prudential, actuarial, reporting and research purposes;
assess and onboard prospective job candidates and contractors;
manage, train and develop our employees, contractors and representatives;
manage complaints and disputes, and report to and engage with dispute resolution bodies;
better understand you, your needs, your behaviours and how you interact with us, so we can engage in product and service research, development and business strategy, and tell you about other products or services that we think may interest you. This includes managing the delivery of our services and products thought the ways we communicate with you; and
comply with our legal obligations and assist government and law enforcement agencies or regulators where we are required authorised to do so.

If you do not provide us with your personal information, we may not be able to provide you with our products and financial services, communicate with you, respond to your enquiries or process your job or finance application.

Do we use your personal information for direct marketing?

We will use your personal information to identify products and services we believe may interest you, unless you tell us not to. We may, with your consent, use your personal information to contact you from time to time (whether by email or phone) to tell you about new products or services and special offers that we believe may be interest you. These products and services may be offered by us or our related companies.

You can withdraw your consent to receive direct marketing communications from us at any time by unsubscribing, by clicking on the opt-out link in the marketing communication you receive or letting us know when we call. We may also remove you from our marketing communications if you are inactive for more than 2 years. We will retain a record of your unsubscribe request to ensure we do not continue to market to you.

How we collect information through our website

The purpose of our website is to provide information, promotional content, and other relevant material regarding the products and services we offer. To enhance your experience, we may collect certain information about you when you visit our website to improve your experience and navigation and to understand your browsing activities.

We collect information such as browser type, IP address, operating system and the websites visited before you visit and interact with our website.

We also use cookies on our website. A cookie is a small text file that the website may place on your device to store information. The cookies we use includes functional and technical cookies such as:

persistent cookies (which remain on your computer even after you close your browser) to store information that may speed up your use of our website for any of your future visits to the website;
session cookies (which no longer remain or retain information after you end your browsing session) to help manage the display and presentation of information on the website.

You may stop the use of cookies that are not strictly necessary for the website to function properly by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of our website. For more information about the types of cookies we use on our website and their purposes, please read our cookies policy here: Cookie Policy (AU) | XCMG Australia

Some web browsers may provide a “do not track” setting, which sends a signal to websites you encounter while browsing. This “do not track” signal is different from disabling certain forms of tracking by declining cookies in your browser settings, as browsers with the “do not track” setting enabled may still accept cookies. Our website does not respond to web browser “do not track” signals at this time. If we do so in the future, we will describe how we do so in our policies.

Our website may include links to third-party services, allowing those companies to collect data when you visit this site. These third parties may utilise information that does not directly identify you(e.g. click stream data, browser type, timestamps, ad interactions) and may track your online behaviour across various sites to display advertisements for products or services that may be of interest to you. These third parties may also use the collected data to link devices used by the same user or to personalise advertising content based on previous interactions.

Examples of third parties include:

Google Ads: Google collects information, including personal information, for the purpose of delivering ads and retargeting services. To learn more about how Google handles your data and to manage preferences, visit their Privacy Policy.
Facebook: Collects user data from Facebook, Instagram, and Messenger to provide targeted ads. For more details on Facebook’s data handling and user control, see their Data Policy.
Google Analytics: We use Google Analytics to analyse user behaviour on this site. This includes data on which pages are visited and how users navigate through the site. Google anonymizes IP addresses, and we use this information to enhance the user experience. To opt-out of Google Analytics, please install their Opt-Out Browser Add-on.

As you navigate through our website, you may come across links to other websites. Please note that these third-party sites may have different privacy practices, and we encourage you to review their privacy notices as well.

Who do we disclose your personal information to and why?

We may transfer or disclose your personal information to our related companies, partners, dealers, and other business collaborators who may use the information for the purposes described above.

We may disclose personal information to our external service providers or those of our parent company so that they can perform services for us or on our behalf, including to verify your identity, perform credit checks for commercial credit where required, onboarding and supplying our goods and services to you, call centres, mailing houses, researchers, collections agents, and data analysts.

We may also disclose your personal information to others outside our group of companies where:

we are required or authorised by applicable laws to do so;
you would reasonably expect us to disclose the information for the relevant purpose;
you have requested us to or expressly consented to the disclosure, or we may reasonably infer the consent from the circumstances; or
we are otherwise permitted to disclose the information under an exception in the applicable privacy and health records laws.

If the ownership or control of all or part of our business changes, we may transfer your personal information to the new owner.

Do we disclose personal information to overseas recipients?

We may disclose personal information to our overseas related entities in the XCMG group of companies, including our parent company located in China (Xuzhou XCMG International Investment and Development Co., Ltd.) and trusted service providers the company contracts with, who are located outside Australia. This includes Germany, Singapore and Hong Kong, for the following purposes:

for our service centre to provide support in monitoring our service vehicles with equipped intelligent control systems, including GPS, to analyse performance or service-related purposes;
to enable our credit committee to assess credit information as part of our credit assessment process in relation to finance applications;
to onboard customers in our global customer management system and supply our goods and services to you;
to manage inquiries, complaints, repair requests, quality check, and related feedback; and
in relation to employee information, for internal human resources management purposes.

When we disclose information overseas, we take reasonable steps to ensure that overseas recipients protect the information consistently with this Privacy Policy and our privacy law obligations including by entering into contracts with them.

How do we hold and store personal information?

We store most information we collect as digital records in cloud servers located in Australia. Vehicle location data will be transmitted and stored in our secure CRM system server deployed on Microsoft Azure cloud nodes in Singapore.

Some information about you is recorded in paper files that we store securely.

We take all reasonable and appropriate steps (including organisational and technological measures) to protect the personal information we hold from misuse, interference and loss, as well as unauthorised access, modification or disclosure. If you are concerned that any of your personal information may have been compromised, please let us know immediately. If we experience a data breach that needs to be notified, we will contact you.

We will retain your personal information for as long as it is needed for any of our business operations and to comply with our legal obligations. We will typically retain your information for a minimum of 7 years for legal and record-keeping purposes but may retain personal information for shorter periods depending on the nature of the information. We will take reasonable steps and use secure methods to destroy or de-identify personal information that is no longer required for any purpose for which the personal information may be used or disclosed in accordance with our internal disposal policies.

Your privacy rights

You may access or request correction of the personal information that we hold about you by contacting us. Our contact details are set out at the end of this policy and we will endeavour to respond to your request within 14 days.

There are some exceptions to providing access to some or all of the personal information you may request, such as if giving access would have an unreasonable impact on the privacy of other individuals.

We will work with you to provide access to your personal information in a mutually acceptable way. We do not charge for making an access requests, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).

If your request for access to, or correction of any of your personal information is refused, we will notify you in writing and explain why.

Complaints and Contact Details

If you wish to contact us with a privacy enquiry or concern or you wish to complain about the way we have processed your personal information, you can contact us using the following details:

Post: 31-33 Westpool Drive, Hallam VIC 3803
Email: admin@xcmg.net.au

We will consider any complaint you have and aim to resolve it and notify you of the outcome of our investigation and the steps we are taking to resolve it.

If you are not satisfied with the outcome, you can contact the Office of the Australian Information Commissioner (OAIC) (www.oaic.gov.au) and raise your complaint with them

What happens if this privacy notice changes?

We may need to update this privacy policy from time to time to reflect changes to the way we process personal information or to the types of personal information we collect and process or to meet our legal obligations. Any changes to our policy will be published on our website.

You may obtain a copy of our current policy from our website or by contacting us at the contact details above.

This privacy policy was last updated: December 2025