HammerTech Global Privacy Policy

HammerTech Global Privacy Policy

Dated 1 May 2026

1. Introduction 

The HammerTech Group, comprised of Hammer Technologies Pty Ltd, Hammer Technologies USA LLC, HT Software Canada Inc., HammerTech Software UK Ltd and their affiliates (we, our, us and HammerTech), respects your privacy and is committed to protecting your personal data.

This Privacy Policy applies to HammerTech's processing of personal data in the various jurisdictions in which HammerTech operates, including the United Kingdom (UK), European Economic Area (EEA), Australia, New Zealand, Canada, and the United States of America. For clarity, if you reside in the European Economic Area (an EEA Resident) then the EU General Data Protection Regulation (EU GDPR) applies, and if you reside in the UK, then the UK General Data Protection Regulation (UK GDPR) applies (and, together, the GDPR).

The following terms are used in this Privacy Policy:

• HammerTech Cloud Service means, collectively, the HammerTech online construction, health, safety, environment and quality software application suite (and any optional modules) as further described on the HammerTech Website;

• HammerTech Services means the HammerTech Cloud Service, configuration service (if any), pre-configuration service (if any), consulting services (if any) and any other related services provided by us from time to time, including when you contact us, purchase (or enquire about) our services, or sign up to our newsletters, or otherwise use our products and services;

• HammerTech Website means our website, www.hammertech.com, and any other websites which may be operated by us from time to time, including websites used to deliver the HammerTech Cloud Service; and

• personal data refers to information about an identified or identifiable individual and from which that individual can be identified.

In providing the majority of our services to you, including the HammerTech Cloud Service, HammerTech acts a data processor for the purpose of the GDPR. This means that we process your data in accordance with instructions from another party (such as your employer), to the extent necessary to provide our services, and otherwise to comply with our obligations under applicable data protection law.

Please read this Privacy Policy carefully (together with any other privacy policies or notices we may provide on specific occasions) so that you are fully aware of how and why we are using your personal data. This Privacy Policy supplements other notices and policies and does not override them.

In particular, our privacy practices may vary among the countries in which we operate, to reflect local practices and legal requirements. Therefore, specific privacy notices may apply to some of our products and services. Please visit the consult the website or other information provided by us in respect of a specific product or service to learn more about our privacy and information practices in relation to that product or service.

If you do not agree with this Privacy Policy, you should not to use the HammerTech Services or otherwise share your personal data with us.

2. Important Information 

Purpose of this Privacy Policy

This Privacy Policy provides information about how we collect, process, use, disclose and store your personal data when you use the HammerTech Services or otherwise interact with HammerTech, including when you:

• register to use and create an account for the use of the HammerTech Cloud Service;

• visit the HammerTech Website; and

• use or access services provided to us, by us, or to you by our third-party service providers and other third-party companies, agents or contractors.

Use by minors

None of the HammerTech Services are intended for minors under 18 years of age. No one under age 13 years of age may provide any information on or through the HammerTech Cloud Service, in obtaining the HammerTech Services, or otherwise interacting with HammerTech. We do not knowingly collect personal data from children under 13 years of age. If you are under 13 years of age, do not use or provide any information on or through any of the HammerTech Services, use any of the interactive or public comment features of the HammerTech Services or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name, username you may use or any pictures of you. If we learn we have collected or received personal data from a child under 13 years of age without verification of parental consent, we will delete that information. If you believe that we might have any information from or about a child under 13 years of age, please contact us at legal@hammertech.com.

What happens if you do not provide us your personal data?

Where we need to collect personal data by law, or under the terms of a contract we have with you, your employer, or other third-party companies or contractors, and you fail to provide that personal data when requested, we may not be able to perform the contract we have, or are trying to enter into, with you, your employer, or other third-party companies or contractors (for example, to provide our HammerTech Services). In this case, we may have to cancel a HammerTech Service you have with us, but we will notify you in writing if this is the case at the time.

If you contact us to obtain further information from us, we may not be able to provide that information to you if you do not provide us with your personal data.

Third-party links

The HammerTech Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or their collection or processing of your personal data. When you leave our HammerTech Website, we encourage you to read the privacy policy of every website you visit.

3. Personal data we collect about you and how we collect it 

The types of personal data we collect from you may include:

• Contact data, including:

  • postal address, email address, work and mobile telephone numbers;

  • emergency contact details for a third party, including name and phone number;

  • billing information, including the address for billing and billing contact information;

  • records and copies of your correspondence (including e-mail addresses) if you contact us; and

  • other information that you provide by registering, creating accounts or filling in forms or applications on or through the HammerTech Services, including information provided in connection with registering to access and use the HammerTech Cloud Service.

• Technical data, including:

  • your IP address, which is collected by automated technology when you setup an account with us;

  • username, email address, data submitted and other information which is collected by web logs and error logs; and

  • device, internet and mobile information, such as the hardware model, operating system version, unique device identifiers, browser type, language, wireless network, and mobile network information (including mobile phone number).

• Financial data, including bank account and payment card details (only if you purchase HammerTech Services).

• Transaction data, including details about payments to and from you and other details of products and services you have purchased from us, if any.

• Marketing and communications data, including your preferences in receiving marketing from us and our third parties and your communication preferences.

• Usage data, including:

  • usage details and information such as how you communicate with other users of the HammerTech Services, including the time, date, sender and your interactions with messages (such as when you open a message);

  • when you report a problem with the HammerTech Services;

  • details of tasks and other activities that you carry out through the HammerTech Services;

  • information that a customer uploads for use in configuring the HammerTech Cloud Service platform;

  • information that you provide when you contact our helpdesk;

  • geo-location information when you use the HammerTech Services;

  • information that is about you but individually does not identify you, such as the date and time of visit; and

  • other information about your access and use of the HammerTech Website, including through the use of Internet cookies, your communications with our HammerTech Website, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider. Please see Section 8 of this Privacy Policy for further information about our use of cookies and related technologies.

• Feedback and opinions, including when you voluntarily respond to questionnaires, surveys or market research.

In most cases, we will collect the above information directly from you via your interactions with us, such as when you purchase or use our HammerTech Services, including any HammerTech Cloud Service, through your use of our HammerTech Website, or when you call us or we call you. Please be aware that we may monitor, and in some cases, record such calls for staff training or quality assurance purposes, but we will always inform you of this prior to doing so. We may also collect this information from other sources, such as other individuals, corporations, contractors and sole traders that hold your information. Please note we take every reasonable step to limit the volume of your personal data that we process to what is reasonably necessary.

4. Other personal information that we hold and process 

In the course of providing HammerTech Services (and in particular the HammerTech Cloud Services), we will hold and process Worker Personal Data, as described below. We do not collect this personal data from you and, for the purpose of the GDPR, are not the data controller for this personal data.

Worker Personal Data includes 

• information stored within the HammerTech Cloud Services by which you may be personally identified, including personal data such as name, date of birth, photo, gender, title, work role, car registration number, insurance details, certificates of currency, permits to work, qualifications and other licenses (such as to operate machinery and perform construction services), preferences and opinions, information about your next of kin and any other personal data based on the fields or information configured by a customer;

• information relating to your work, such as car registration number, plant and equipment information, details of safety incidents and injuries, site diary information and demographic information such as postcode; and

• sensitive data, which includes health information (including medical checklists) and details of injuries of incident details, including related health and medical details. Please note sensitive data is afforded a higher level of protection in certain jurisdictions and will only be processed by us in accordance with applicable laws.

Please note Worker Personal Data stored within our HammerTech Cloud Service is provided with additional privacy protections and we treat it with the upmost security and respect as detailed in applicable sections in this Privacy Policy.

5. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• where we need to perform the contract that we are about to enter, or have entered, into with you, your employer, or other third-party companies or contractors;

• where it is necessary for our legitimate interests (or, those of a third party) and your interests and fundamental rights do not override those interests; and/or

• where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data, although we do rely on consent as obtained by you as required under applicable laws.

We have included a table below which describes the different ways in which we may use your personal data, and (for the purpose of the GDPR) which of the legal bases we rely on to do so. We have also, where appropriate, identified what our legitimate interests are.

Please note that we may process your personal data using more than one legal basis, depending on the specific purpose for which we are using your personal data. Please contact us if you would like additional details about the specific legal ground which we are relying on to process your personal data.

Purpose/Activity	Type of data	Lawful basis for processing, including basis of legitimate interest
To manage our relationship with you, your employer, or other third-party companies or contractors, which will include: (a) Notifying you about changes to our terms or this Privacy Policy (b) Asking you to leave a review or take a survey (c) Contacting you with regards to updates or informative communications related to our HammerTech Services (d) Attending to and managing your requests.	(a) Contact details (b) Marketing and communications	(a) Performance of a contract with you, your employer, or other third-party companies or contractors. (b) Necessary to comply with a legal obligation that we are subject to. (c) Necessary for our legitimate interests [1] (to keep our records updated and to study how customers use our HammerTech Services, particular in order to develop our HammerTech Services and grow our business).
To deliver relevant HammerTech Services and advertisements to you, your employer, or other third-party companies or contractors, to measure or understand the effectiveness of the advertising we serve to you and to make suggestions and recommendations to you about HammerTech Services that may be of interest to you.	(a) Contact details (b) Usage data (c) Marketing and communications (d) Technical data	(a) Performance of a contract with you, your employer, or other third-party companies or contractors. (b) Necessary for our legitimate interests (to deliver relevant HammerTech Services, to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy).
To maintain a history of any data access and modifications to the system, for security and auditing purpose.	(a) Contact details (b) Usage data (c) Transaction data	Necessary for our legitimate interests (to define types of customers for our products and services).
To speed up your searches and recognise you when you return to the HammerTech Website and HammerTech Cloud Service.	(a) Contact details (b) Usage data	Necessary for our legitimate interests (to study how customers use our HammerTech Services, particular in order to develop our HammerTech Services and grow our business).
For business development, market research and to administer and protect our business and the HammerTech Website which will include: (a) troubleshooting; (b) data analysis testing to improve our HammerTech Website, products/services, marketing, customer relationships and experiences; (c) system maintenance, support and reporting; (d) hosting of data; (e) improving the use of the software available on our HammerTech Website; and (f) marketing, including direct marketing (except worker personnel information), which we have explained further below this table.	(a) Contact details (b) Usage data (c) Marketing and communications (d) Technical data	(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise, to define types of customers for our products and services, to keep our HammerTech Website updated and relevant and to develop our business and to inform our marketing strategy). (b) Necessary to comply with a legal obligation.
To process and complete transactions, including registration for the use of the HammerTech Services and send you related information.	(a) Contact details (b) Transaction data	(a) Performance of a contract with you, your employer, or other third-party companies or contractors. (b) Necessary for our legitimate interests (to keep our records updated and to study how customers use our HammerTech Services, particular in order to develop our HammerTech Services and grow our business).
To register you, your employer, or other third-party companies or contractors as a new customer and deliver our HammerTech Services including enforcing our rights arising from any agreements entered into between you and us, dealing with payments, billing collection and invoice recovery.	(a) Contact details (b) Financial data (c) Transaction data	(a) Performance of a contract with you, your employer, or other third-party companies or contractors. (b) Necessary for our legitimate interests (to keep our records updated)
To verify your identity and identify authorized users of the HammerTech Services and the other HammerTech Services, including creating ID badges, to prevent fraud or other unauthorized or illegal activity.	(a) Contact details (b) Usage data	(a) Necessary for our legitimate interests (for running our business, network security and to prevent fraud and in the context of a business reorganisation or group restructuring exercise). (b) Necessary to comply with a legal obligation.

---

 

We only use Worker Data to the extent necessary to provide the HammerTech Services, and in accordance with instructions from the relevant data controller.

6. Statistical data

Some of the information that we collect automatically is statistical data and does not include personal data, but we may maintain it or associate it with personal data we hold. It helps us to improve the HammerTech Services, and to deliver a better and more personalized service. This includes enabling us to understand what features of the HammerTech Services our users utilize and how they use them, to create and establish industry benchmarks, estimate our usage size and better understand usage pattern and store information about your preferences, which collectively enable us to customize the HammerTech Services according to your individual interests, plan and prioritize new features, updates and enhancements.

 7. Marketing

We strive to provide you with choices regarding certain usages of personal data, particularly around marketing and advertising. We have established the following personal data control mechanisms:

Promotional offers from us

We may use your Contact, Technical and Usage Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

You may receive marketing communications from us in various circumstances, including where you have requested information from us, purchased goods or services from us, or otherwise provided us with your consent. Marketing information may be issued via email or SMS, or in the form of online advertisements.

Third-party marketing

We will get your express consent before we permit any third party to contact you for marketing purposes.

Opting out

You can ask us or third parties to stop sending you marketing messages at any time by contacting us at any time using the contact details in section 16 below or by using the unsubscribe link if available on electronic communications.

Where you opt-out of receiving these marketing messages, this does not require us to delete any personal data we hold about you (although please see Section 14 of this Privacy Policy for more information on the rights which may be available to you under data protection laws).

Worker Personal Data

Worker Personal Data uploaded as part of an online registration or online induction to the HammerTech Cloud Service will not be used by us for marketing purposes.

8. Cookies

A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our HammerTech Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to the HammerTech Website.

Your web browser may offer you a "Do Not Track" option, which allows you to signal to operators of websites and web applications and services (including behavioural advertising services) that you do not wish such operators to track certain of your online activities over time and across different websites. Currently, we do not honour any web browser “Do Not Track” signals or other mechanisms that provide you with the ability to exercise choice regarding the collection of personally identifiable information about your online activities over time and across third-party websites or online services. At present, no universally accepted standards exist on how companies should respond to do-not-track signals. In the event a universally accepted standard is established, we will assess and provide an appropriate response to these signals.

9. Change of purpose

We will only use your personal data for the reasons we collected it unless, to the extent permitted under applicable data protection laws, we reasonably need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

10. Disclosures of your personal data

We may share your personal data with the following types of parties, for the purposes set out in the table in Section 5 above:

• Internal Third Parties. Other companies in the HammerTech Group, including those located overseas, acting as joint controllers or processors may provide our HammerTech Services to you and may also provide IT, system, financial and other administrative services.

• External Third Parties. We may use or partner with other third-party companies, agents or contractors for various purposes in connection with our business and operations (Service Providers), such as for example the providers of: 

  • software and database servers;

  • voice and SMS communications;

  • invoicing and payment processing; and

  • email and other technology and support service providers.

In the course of providing such services, these Service Providers may have access to your personal data. We may also share information, including your personal data, with these Services Providers in order to enable them to perform relevant services. These Services Providers may have adopted their own privacy policies, which are not subject to control by HammerTech. We do not list our current Service Providers because they change from time to time. If you would like the names of any of Service Providers, please email us at support@hammertechglobal.com.

• Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.

• Credit reporting agencies and courts, tribunals and regulatory authorities, where customers fail to pay for goods or services provided by us to them.

• Courts, tribunals, regulatory authorities and law enforcement officers as required by law, such as in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.

We take appropriate steps to ensure that such third parties to respect the security of your personal data and to treat it in accordance with the law.

We may also share information that is anonymised or in an aggregated form that does not directly identify an individual, and we may use and share any such information for any purpose permitted by applicable data protection laws. We may use, disclose or sell that anonymised or aggregated information (but not your personal data) without restriction, to the extent permitted by applicable data protection laws.

11. International transfers

We share your personal data within the HammerTech Group (including with entities located in UK, Australia, New Zealand, United States and Canada). Where we share some of your personal data with Service Providers, this may involve transferring your personal data outside of the jurisdiction in which you reside, including to jurisdictions that do not offer an equivalent level of data protection to your jurisdiction.

Whenever we transfer your personal data overseas, we will do so in accordance with the applicable data protection laws, which may include implementing the following safeguards:

• Transferring your personal data to countries that have been deemed to provide an adequate level of protection for personal data;

• In respect of a country that is not deemed to have an adequate level of protection, we (i) will use specific contracts approved for use the relevant country or in the UK and EEA (called Standard Contractual Terms and/or International Data Transfer Agreements) which give personal data the same protection it has in the UK and EEA, and undertake a data transfer risk assessment to ensure the protection of your data; or (ii) otherwise comply with applicable data protection laws; and

• Taking other reasonable steps to ensure that the overseas recipient does not breach the applicable data protection laws. 

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data overseas.

Notwithstanding the foregoing, for clients with data hosting locations in: 

• Australia, we will never store Worker Personal Data outside Australia;

• the United States of America, we will never store Worker Personal Data outside the United States of America; and

• Europe, we will never store Worker Personal Data outside Europe.

12. Data Security

We are committed to ensuring that the information you provide is secure. We store most information about you in computer systems and databases operated by us or our Service Providers. We have put in place suitable physical, electronic and managerial procedures to safeguard and secure personal data we hold, and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We seek to take appropriate steps to ensure that they will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We also maintain firewalls, anti-virus, network segmentation and other reasonable mechanisms to secure Worker Personal Data. Worker Personal Data is also isolated in the environment of the company to which it is supplied, and will not be combined, analysed or aggregated in conjunction with data supplied to other parties. We will not seek to aggregate or form profiles of workers across client environments.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

No information transmitted over the internet can be guaranteed to be secure. We cannot guarantee the security of any information that you transmit to us or receive from us. The transmission and exchange of information is carried out at your own risk. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal data we collect will always be disclosed in a manner that is consistent with this Privacy Policy.

The safety and security of your data also depends on you. Where you have chosen (or we have given you) a password for access to and use the HammerTech Cloud Service, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of any of the HammerTech Cloud Service. The information you share in public areas may be viewed by HammerTech and anyone anonymously, including people who are not users of the HammerTech Cloud Service.

13. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in certain circumstances, such as in the event of a complaint, or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.

To decide the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data (and whether we can achieve those purposes through other means), and the applicable legal, regulatory, tax, accounting or other requirements.

We may be required by various laws to keep some information about our customers (including Contact, Financial and Transaction Data) for longer periods, as determined under applicable laws. This retention period may vary depending on the jurisdiction in which you reside.

In some circumstances you can ask us to delete your personal data: see Section 14 below for further information.

In some circumstances we will anonymise and aggregate your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

In relation to Worker Personal Data, please note that we will maintain records of all access to Worker Personal Data for a period of at least 12 months.

14. Your rights and controlling your personal data

Subject to the data protection laws applicable to the jurisdiction in which you reside, under certain circumstances you may have rights in relation to your personal data. These may include the right to:

• request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data that we hold about you and to check that we are lawfully processing it;

• request correction of your personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us;

• under the GDPR or other applicable law:

  • request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local laws. Please note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request;

  • object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground, as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we process your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;

  • request restriction of processing your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (i) if you want us to establish the data's accuracy; (ii) where our use of the data is unlawful but you do not want us to erase it; (iii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; (iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it;

  • request transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you; and

• withdraw consent where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you are an EEA Resident in France, you also have the right to set guidelines for the retention and communication of your personal data after your death.

If you wish to exercise any of the rights set out above, please contact us using the contact details set out in Section 16 of this Privacy Policy.

Please note that we can refuse to comply with your request in certain circumstances, as determined by applicable laws.

No fee usually required

You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights which may be available to you). However, we may charge a reasonable fee where permitted to do so by law, such as if your request is clearly unfounded, repetitive or excessive.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of the other rights which may be available to you). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Our response to your request

We will consider all requests and provide our response within the time period required by applicable law. If you disagree with our response you have the right to lodge a complaint with the the relevant data protection authority, though we invite you to contact us first with any concern, as we would be happy to try to resolve it directly.

15. Amendments to this Privacy Policy

This Privacy Policy may be amended, including with changes, additions and deletions, from time to time in our sole discretion. You should check this Privacy Policy regularly, prior to providing personal data, to ensure you are aware of any changes.

16. Contact Details and Complaints

If you have any questions about this Privacy Policy, our privacy practices, or have a complaint about how we have handled any privacy issue, including your request to access your rights under the applicable data protection law, please contact us in the following way:

Email address: legal@hammertech.com

Postal address: 189 Flinders Lane, Level 5, Melbourne VIC 3000 Australia

We will consider your complaint and determine whether it requires further investigation. We will notify you of the outcome of this investigation and any subsequent internal investigation.

You may also approach an independent advisor or contact the relevant data protection authority in your jurisdiction for guidance on alternative courses of action which may be available. Please see details of data protection authorities that may be relevant to you (there may be others depending on your jurisdiction):

• Australia: The Office of the Australian Information Commissioner (www.oaic.gov.au).

• New Zealand: The Office of the New Zealand Privacy Commissioner (https://www.privacy.org.nz).

• UK: The UK regulator for data protection issues is the Information Commissioner's Office (ICO) (ico.org.uk).

• Europe: You can find your relevant European data protection authority (according to where you are based) through the European Data Protection Board or the European Data Protection Supervisor (https://edpb.europa.eu/about-edpb/about-edpb/members_en).

We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection authority, so we ask you to please contact us in the first instance.

17. Survival

This Privacy Policy remains in effect even if the terms and other agreements between us are terminated and you are no longer using the HammerTech Services.