Privacy Policy

Privacy Policy

Canberra Metro is committed to protecting the privacy of your personal information in accordance with the Information Privacy Act 2014.

Last updated: 19 May 2026
Version: 1.0

This Privacy Policy explains how Canberra Metro collects, uses, stores and discloses personal information through the Canberra Metro website at canberra-metro.com.au. This policy is intended to support compliance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles and the Notifiable Data Breaches scheme.

1. Who we are

Canberra Metro provides information and services through its website. This Privacy Policy applies to personal information collected through:

  • canberra-metro.com.au
  • contact and enquiry forms on the website
  • website analytics and monitoring technologies

2. What information we collect

The types of personal information we may collect include:

  • name
  • email address
  • phone number
  • enquiry or message content submitted through website forms
  • information you provide when contacting us
  • technical and usage information relating to your use of the website

Technical and usage information may include:

  • IP address
  • browser type and device information
  • operating system
  • pages viewed
  • session duration
  • referring website information
  • approximate location data derived from IP address
  • clicks, scrolls and interaction behaviour on the website

We do not intentionally collect sensitive information through the website unless it is voluntarily provided by you.

3. How we collect personal information

We collect personal information in several ways, including when you:

  • submit a contact or enquiry form
  • communicate with us by email or through the website
  • browse or interact with the website
  • accept cookies through your browser or cookie settings

Some information is collected automatically through cookies, analytics services and website monitoring tools.

4. Why we collect and use information

We collect and use personal information for purposes including:

  • responding to enquiries and feedback
  • communicating with members of the public and stakeholders
  • managing and improving website performance
  • monitoring website usage and visitor behaviour
  • maintaining website security and functionality
  • analysing trends and improving user experience
  • complying with legal and regulatory obligations
  • investigating and responding to incidents or complaints

We only use personal information for purposes that are reasonably necessary for our operations or otherwise permitted by law.

5. Cookies, analytics and tracking technologies

Our website uses cookies and similar technologies to improve website functionality, analyse traffic and better understand how visitors use the website.

Google Analytics 4 (GA4)

We use Google Analytics 4 to collect website usage statistics and insights. GA4 may collect information such as:

  • pages visited
  • time spent on pages
  • interactions with website content
  • device and browser information
  • approximate geographic location
  • traffic source information

Google may process this information in accordance with its own privacy policies. You can learn more about how Google handles data here: policies.google.com/privacy. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout

Microsoft Clarity

We use Microsoft Clarity to better understand how users interact with our website. Microsoft Clarity may collect information relating to:

  • mouse movements
  • scrolling behaviour
  • clicks and interactions
  • session replay information
  • device and browser information

This information helps us improve website usability and performance. Microsoft may process information in accordance with its own privacy policies: privacy.microsoft.com

Managing cookies

Most web browsers allow you to control cookies through browser settings. You can:

  • block or restrict cookies
  • delete existing cookies
  • configure browser notifications for cookies

Disabling cookies may affect some website functionality.

6. Disclosure of personal information

We may disclose personal information to:

  • service providers that support website hosting, analytics and IT systems
  • technology providers, including Google and Microsoft
  • contractors, consultants and professional advisers
  • government agencies, regulators or law enforcement where required or authorised by law
  • other parties to whom you have consented to the disclosure

We take reasonable steps to ensure third-party service providers handle personal information appropriately.

7. Overseas disclosure

Some third-party technology providers and cloud services may store or process personal information outside Australia. This may include providers located in countries such as the United States or other jurisdictions where Google and Microsoft operate infrastructure and support services. Where personal information is disclosed overseas, we take reasonable steps to ensure information is handled in a manner consistent with Australian privacy obligations.

8. Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

Security measures may include:

  • secure hosting environments
  • access controls and authentication measures
  • restricted staff and contractor access
  • monitoring and security management processes
  • secure communication technologies where appropriate

While we take reasonable steps to protect information, no method of electronic transmission or storage is completely secure.

9. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, or as required by law. When personal information is no longer required, we take reasonable steps to securely destroy, de-identify or delete it.

10. Access and correction

You may request access to personal information we hold about you and request corrections if the information is inaccurate, incomplete or out of date. Requests can be made using the contact details below. We may need to verify your identity before responding to a request. In some circumstances, we may refuse access where permitted by law. If this occurs, we will provide reasons where required.

11. Direct marketing

We do not generally use website enquiry information for direct marketing purposes unless you have requested information or otherwise consented. Where marketing communications are sent, you may opt out at any time using the unsubscribe instructions provided or by contacting us.

12. Data breaches

If we become aware of a data breach involving personal information, we will assess the incident and take appropriate action. Where required under applicable law, we may notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

13. Third-party websites

Our website may contain links to third-party websites, including government agencies, recruitment providers and external service providers. We are not responsible for the privacy practices or content of third-party websites. We encourage users to review the privacy policies of external websites before providing personal information.

14. Complaints and privacy concerns

If you have a complaint or concern about how your personal information has been handled, please contact us using the details below. We will review your complaint and respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

Further information is available at: oaic.gov.au

15. Changes to this policy

We may update this Privacy Policy from time to time. Any updated version will be published on this website with a revised “Last updated” date.

16. Contact us

For privacy enquiries, access or correction requests, or complaints, please contact us at canberra-metro.com.au/contact-us.