Privacy Policy & Data Protection

1 Statutory & Legislative Framework

Aurelius Security Services ("Aurelius", "we", "us", or "our") operates in strict compliance with the Commonwealth Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), the Security and Related Activities (Control) Act 1996 (WA), and the Surveillance Devices Act 1998 (WA).

This Privacy Policy articulates our transparent practices concerning the collection, storage, handling, transmission, and disposal of personal information and operational security records collected during our physical security guarding, mobile patrol, asset protection, and digital monitoring operations across Western Australia.

2 Categories of Information We Collect

The scope of personal and operational information we collect depends directly on the nature of your interaction with Aurelius. We collect information through our website, digital consultation portals, on-site entry gatehouses, and patrol deployment apps:

• Client & Procurement Representatives: Full name, professional title, corporate email address, corporate phone numbers, site addresses, building management contact data, and invoicing information.
• Facility Visitors & Contractors: Visitor names, contractor credentials, vehicle registration numbers, sign-in/sign-out timestamps, and photo identification (where mandated by client site-specific Post Orders).
• Job Applicants & Security Personnel: Résumé records, WA Security Officer Licence numbers, National Police Clearances, First Aid / RSA credentials, right-to-work verifications, and verified reference histories.
• Digital Site Enquiries: IP addresses, browser types, session analytics, and inquiry message content submitted via our encrypted contact forms.

3 Operational Telemetry, Body-Worn Cameras & CCTV

To ensure unmatched operational transparency, client accountability, and officer safety, Aurelius utilizes specialized operational telemetry tools during field deployments:

• GPS Patrol Timestamps & Route Telemetry: Mobile patrol vehicles and handheld officer devices log GPS checkpoints and timestamps to verify scheduled rounds and rapid alarm responses.
• Digital Incident Reports: Shift summaries, hazard identifications, maintenance reports, photographic logs of secure perimeters, and incident records.
• CCTV & Body-Worn Video (BWV): Where deployed pursuant to client contracts and in compliance with the Surveillance Devices Act 1998 (WA), video and audio recordings may be captured for incident documentation, dispute resolution, and evidential preservation.

4 Purpose of Data Collection & Processing

Aurelius collects and utilizes personal data solely for legitimate commercial, operational, and regulatory purposes, including:

• Executing contractual obligations for static guarding, mobile patrols, crowd control, and asset protection.
• Delivering authenticated real-time incident reports and patrol audit logs to facility managers and building owners.
• Maintaining site security, access control registries, and preventing unauthorized entry, theft, and vandalism.
• Conducting tailored Threat & Vulnerability Assessments and delivering bespoke security proposals.
• Fulfilling statutory obligations under Western Australian security licensing regulations and workplace safety standards.

5 Disclosure & Law Enforcement Cooperation

We treat all client facilities, site maps, vulnerability data, and personnel information as strictly confidential. We disclose information only under specific, controlled scenarios:

• Nominated Client Contacts: Authorized facility managers, property directors, and corporate risk officers receiving shift and incident logs.
• Emergency Services & Law Enforcement: WA Police Force, emergency medical teams, and Department of Fire and Emergency Services (DFES) during critical incidents, investigations, or pursuant to lawful warrants.
• Regulatory Bodies: WA Police Licensing Services for compliance audits and officer credential verification.
• Professional Advisors: Insurers and legal counsel under strict non-disclosure obligations.

6 Storage, Encryption & Cyber Security

Aurelius implements rigorous organizational and technological safeguards to defend personal and operational data against unauthorized access, loss, misuse, or alteration:

• Australian Data Sovereignty: All digital databases and incident logs are hosted on ISO 27001 certified cloud infrastructure located physically within Australia.
• End-to-End Encryption: Sensitive transmissions, client portals, and mobile communications utilize TLS 1.3 encryption and AES-256 encrypted storage.
• Role-Based Access Control: Only authorized operational leadership and designated supervisors hold credentialed access to client security documentation.

7 Data Retention & Secure Disposal

Personal and operational information is retained only for the duration necessary to satisfy contractual, operational, and statutory legal requirements.

Routine CCTV footage is maintained on rolling overwrite cycles (typically 30 days unless flagged for incident preservation). Incident reports and gatehouse logs are archived in accordance with insurance and statutory limitation periods, after which they are permanently expunged via secure digital shredding.

8 Your Rights & Access Requests

Under the Australian Privacy Principles, individuals possess statutory rights to request access to the personal information held about them by Aurelius, and to request corrections if information is inaccurate, outdated, or incomplete.

To protect client and officer safety, access requests to operational security logs or footage from third-party premises must be verified with the relevant property controller and authenticated before release.

9 Privacy Officer Contact & Dispute Resolution

For inquiries, feedback, data access requests, or complaints regarding our handling of personal information, please direct your communication to our designated Privacy & Compliance Officer: