Interim policy. This interim policy takes effect on the date it is published on our website at https://lonewolfsecurity.com.au/privacy-policy/. It applies until we replace it with an updated version.
Last updated: 12 November 2026
At a glance
- We collect personal information to provide security services, employ and engage staff and contractors, and run our business. We aim to collect only what we need.
- We do not sell personal information.
- Our website uses Google Analytics. Where we advertise online, we may also use advertising tools from Google and Meta (Facebook and Instagram), such as tracking pixels, conversion tracking, remarketing and lead forms. Section 8A explains this and how to opt out.
- You can ask to see or correct your personal information, and you can complain. Contact details are in section 2.
- We may use cameras and, in limited cases, audio recording. We record audio only where we have told you or where the law allows.
- We use some AI assistant tools. People, not AI tools, make final decisions about individuals and approve anything sent outside our business.
- Some of our service providers may handle information outside Australia (section 9).
1. About this policy
Lone Wolf Security Pty Ltd ("LWS", "we", "us") provides security services, including security officers, crowd controllers and event security.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect and why, how we hold and protect it, who we share it with, how we use cookies, analytics and online advertising, and how you can ask to see or correct your information or make a complaint.
This is an interim policy. We are reviewing it and will publish an updated version on this page.
2. Who we are and how to contact us
| Entity | Lone Wolf Security Pty Ltd, ABN 68 603 638 428, Suite 1/7 Fletcher Street, Townsville QLD 4810 |
|---|---|
| Privacy contact | Privacy Officer (our General Manager) |
| ops@lonewolfsecurity.com.au (please put "Privacy" in the subject line) | |
| Phone | 0497 216 291 |
| Post | Privacy Officer, Lone Wolf Security Pty Ltd, Suite 1/7 Fletcher Street, Townsville QLD 4810 |
3. Whose personal information we hold
We hold personal information about:
- clients and their people, such as venue managers, property managers, event organisers and procurement contacts;
- prospective clients and people who enquire about our services, including through our website, social media and online ads;
- members of the public we deal with while providing security services, such as patrons, visitors, contractors, witnesses, and people we speak to, assist, refuse entry to or remove;
- job applicants and prospective security staff;
- our staff, including security officers, crowd controllers, supervisors, office staff and casual workers;
- contractors and subcontractors, including security firms, individuals engaged under an ABN, and their workers; and
- suppliers and website visitors.
Staff records. The Privacy Act exempts some records about current and former employees from some of its rules. That exemption does not cover job applicants, contractors, or tax file number information. We aim to handle staff information carefully and consistently with this policy.
4. The kinds of personal information we collect and hold
| Group | Examples |
|---|---|
| Staff, applicants and contractors | Name, contact details, date of birth and address; resume and work history; security licence details and licence status checks; first aid and other qualifications; right-to-work and identity evidence; emergency contacts; tax file number, superannuation and bank details for payroll; availability, rosters, timesheets and attendance; training records; references and screening results; uniform and equipment issue; photographs; records of conduct, performance and complaints; work health and safety records and incident reports. |
| Clients, prospective clients and suppliers | Names and business contact details of representatives; what you tell us about your enquiry or site; contract and quote records; correspondence; payment and invoice details; your marketing preferences. |
| Members of the public | Name and contact details if you give them; a description of you; what happened and what was said in an incident, removal, refusal of entry, first aid event or complaint; health details where relevant to an incident or first aid; CCTV images; body-worn video (BWV) images and, where described in section 8, audio; information from a venue's identity-scanning system where one is in use. |
| Calls, messages and meetings | Call logs and notes, voicemail, emails and messages you send us, including through social media; recordings of calls or meetings only where we tell you first (section 8). |
| Website, social media and online ads | Information you submit through our website forms or through lead forms in our ads; device and usage information such as IP address, browser and device type, approximate location, the pages you visit and how you got to our site; and information from cookies, pixels and similar technologies (section 8A). |
Sensitive information. Some of what we hold is "sensitive information" under the Privacy Act, which has stronger protection. It includes health information (for example injury details, first aid and fitness-for-work information) and criminal record information (for example security licence and screening checks). We collect sensitive information only with consent, or where the law allows or requires it (for example to deal with a serious threat, to establish or defend a legal claim, or where a law requires a record). We do not use sensitive information for advertising.
Government identifiers. We hold some government-issued identifiers, such as security licence numbers, driver licence numbers and tax file numbers, only where we need them for a lawful purpose. We do not use them as our own identifier for you. Tax file numbers are also protected by the tax file number rules.
5. How we collect personal information
We collect personal information:
- directly from you, for example on forms, in emails, calls and messages, through our website, and when you speak to our staff on site;
- through online advertising platforms, for example when you submit a lead form in one of our ads on Facebook, Instagram or Google, the platform passes the details you submit to us (section 8A);
- from our clients and venues, for example incident information, banned-person information, site access lists and requests;
- from other sources for staff and applicants, such as referees, public licence registers, police or screening providers (with your consent where required), training providers and previous employers;
- from cameras and devices, including CCTV operated by us or by a venue or client, and BWV worn by our officers at some sites;
- through cookies, analytics and similar technologies on our website (section 8A); and
- through our systems, such as rostering, time-and-attendance, incident-reporting and phone systems.
We try to collect personal information from you directly. Where we collect it from someone else, we take reasonable steps to tell you.
Where it is lawful and practicable, you can deal with us anonymously or by pseudonym, for example when making a general enquiry. Often we cannot do our work, or meet our legal duties, without knowing who someone is (for example when engaging staff or recording an incident).
6. Why we collect, hold, use and disclose personal information
We use personal information to:
- provide security services to our clients and run our business;
- respond to enquiries and requests for quotes, including enquiries made through our ads;
- recruit, screen, check licences, onboard, roster, train, supervise, pay and manage staff and contractors;
- confirm that our officers hold the licences, first aid and other requirements the law and our clients require;
- record, manage and report incidents, injuries, removals and complaints, and keep the registers the law requires;
- protect the safety of our people, our clients' people and the public;
- prevent and investigate unlawful activity and respond to requests from police and regulators;
- meet our legal obligations (for example licensing, work health and safety, workers' compensation, tax, superannuation and record-keeping);
- establish, exercise or defend legal claims and make insurance claims;
- manage client contracts, invoicing and supplier relationships;
- understand how our website and ads are used, measure how well our ads work, and promote our services (sections 8A and 11);
- answer complaints; and
- improve our services and keep our systems secure.
We do not use or disclose your personal information for another purpose unless you consent, you would reasonably expect it and the purpose is related (directly related for sensitive information), or the law allows or requires it.
7. Who we disclose personal information to
We may disclose personal information to:
- clients, venues, property owners and head contractors, where we provide services at or for them, for example incident details, officer details, licence and training evidence, and CCTV or BWV footage of an incident;
- police and other law enforcement agencies, and government and regulatory bodies (for example licensing, liquor, workplace safety, workers' compensation, tax and workplace relations bodies), where the law requires or allows it or you consent;
- our insurers, brokers, lawyers, auditors and other advisers;
- service providers who help us run our business, such as rostering and workforce-management software, compliance and licence-checking software, incident-reporting software, payroll and accounting providers, cloud email and document storage, telephone providers, website hosting and form providers, IT support, training and screening providers, and AI assistant tools (section 10);
- analytics and advertising providers, such as Google and Meta, as described in section 8A;
- a person you authorise; and
- a buyer or financier in a business sale or financing, under confidentiality terms.
We do not sell personal information. We take reasonable steps to ensure that service providers who handle personal information for us use it only for our purposes.
8. Cameras, body-worn video, audio, call recording and identity scanning
CCTV. CCTV at a venue is usually operated by the venue or its licensee, who is responsible for it. Where we operate cameras for a client, we give notice of them as the law requires.
Body-worn video. Some of our officers wear body-worn cameras at some sites. Cameras are used for safety, evidence and complaint resolution. Where body-worn video is in use, we take reasonable steps to let people know, for example by signs or by our officers saying so. We keep routine footage that is not needed for an incident for a short period only, then delete it. Footage needed for an incident, claim, investigation or legal requirement is kept for as long as it is needed. Footage is shared only with the people and bodies listed in section 7 and only where we are entitled to share it.
Audio. The recording of private conversations is regulated by State and Territory law, and the rules differ between Queensland and New South Wales. We record audio only where we have told you or where the law allows. Body-worn cameras may pick up sound near the officer; where audio recording is switched on, we take reasonable steps to tell people, for example by signs or by our officers saying so.
Calls and meetings. We do not record a call or meeting unless we tell you at the start so that you can choose to continue or end it. If we use an AI note-taking tool in a meeting, we tell the people present first.
Identity scanning. At some Queensland venues, the venue's licence requires patrons' identity to be scanned. The venue (the licensee) is responsible for the scanner and the scan data. We do not keep copies of identity documents unless a law or a venue's licence requires it.
8A. Advertising, cookies and analytics
Cookies and similar technologies. Cookies are small files placed on your device when you visit a website. Pixels, tags and similar technologies are small pieces of code that let a website send information about your visit to another company. Our website, and the advertising tools we may use, rely on these technologies.
Website forms. Our website has contact forms. We use what you submit, together with technical details such as the time of submission and your IP address, to reply to your enquiry and to keep our website secure.
Google Analytics. Our website uses Google Analytics and Google tag tools to understand how the site is used, for example which pages are visited, how visitors found the site, scrolling, clicks on outbound links, file downloads and form interactions. Google Analytics uses first-party cookies (such as cookies named "_ga") and collects device and usage information, including IP address. We use the reports to improve our website and to measure how our ads perform. We do not use Google Analytics to identify individual visitors. You can learn how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites.
Online advertising. We may advertise our services on Google (including Search and YouTube) and on Meta platforms (Facebook and Instagram). Where we use these advertising tools:
- Conversion tracking and pixels. We may place the Meta Pixel and Google advertising tags on our website. They tell Meta or Google when someone who saw or clicked one of our ads visits our site or sends us an enquiry, so we can measure whether our ads work. These tools may use cookies and may collect information such as your IP address, device and browser information, the pages you visit and the actions you take on our site.
- Remarketing and custom audiences. We may use this information to show our ads to people who have visited our website or interacted with our ads or social media pages, or to stop showing ads to people who have already contacted us.
- Customer lists. We may give Google or Meta the contact details (such as email address or phone number) of our clients or of people who have enquired with us, so the platform can match them to its users and show them our ads, show ads to people with similar characteristics, or exclude them from our ads. The details are hashed (converted into a coded form) before matching, and the platforms use them for matching on our behalf. You can ask us not to include your details (see "Your choices" below).
- Lead forms. Some of our ads may include a lead form that you fill in within Facebook, Instagram or Google without visiting our website. The platform collects the details you enter, and may pre-fill some details from your account with that platform, and then passes them to us. We use them to respond to your enquiry. The platform also handles that information under its own privacy policy. We send you marketing only as described in section 11.
- The platforms' own use. Google and Meta handle information collected through their tools under their own terms and privacy policies, and may combine it with other information they hold about you, for example if you are signed in to your Google, Facebook or Instagram account. See https://policies.google.com/privacy and https://www.facebook.com/privacy/policy/.
We do not use sensitive information (such as health or criminal record information) to target ads, and we take reasonable steps to set up these tools so that sensitive information is not sent to advertising platforms. We do not use information about job applicants or our staff to build advertising audiences. Our website and ads are not directed at children.
Your choices. You can:
- block or delete cookies using your browser settings (some parts of our website may not work as well if you do);
- opt out of Google Analytics by installing Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout;
- manage or turn off personalised ads from Google at https://myadcenter.google.com/;
- manage the ads you see on Facebook and Instagram, including ads based on activity on other websites, through your ad preferences at https://www.facebook.com/adpreferences;
- learn more about interest-based advertising, and opt out with participating companies, at https://optout.aboutads.info/ and https://www.youronlinechoices.com.au/; and
- ask us not to use your contact details for remarketing, customer lists or other direct marketing, by contacting us using the details in section 2.
Overseas. Google and Meta may handle information collected through these tools outside Australia, including in the United States (section 9).
This policy is available on our website at https://lonewolfsecurity.com.au/privacy-policy/.
9. Overseas disclosure
Some of our service providers may store or process personal information outside Australia. They include cloud email and document storage providers, software providers (for example rostering, compliance, incident-reporting and telephone systems), website, analytics and advertising providers such as Google and Meta, and AI assistant tool providers. Providers that operate globally may hold information in the United States and in other countries where they or their own service providers operate. Because many providers use data centres in several countries, it is not practicable for us to list every country.
If we disclose personal information to a recipient overseas, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to it, unless an exception under APP 8 applies.
10. Computer programs, automated decisions and artificial intelligence
Computer programs and automated decisions. We use software, including workforce-management, rostering and compliance-checking systems, to help us manage our staff and contractors. These systems use personal information such as name and contact details, security licence and licence-status details, first aid and other qualifications, right-to-work details, availability, and roster and attendance records. They may do things that are substantially and directly related to decisions about whether a person meets the licence and other requirements to work a particular shift or site, and about rostering. We are reviewing how each of our systems is used in decisions about people, and we will update this section as the Privacy Act requires.
Artificial intelligence (AI). We use AI assistant tools to help our staff with drafting, summarising, research, filing and scheduling. Some of these tools are connected to our business systems, such as email, calendars and document storage, and so may be able to access personal information held there, including some sensitive information. We:
- use AI tools under the direction of people at LWS;
- aim to limit what each tool can access to what it needs for its purpose;
- do not use AI tools to make final decisions about individuals. People make those decisions; and
- require a person to approve anything an AI tool sends outside our business, and any payment or legal decision.
AI tool providers may process information outside Australia (section 9).
11. Direct marketing
We may use the contact details of our clients, prospective clients and people who enquire with us (including through our website or a lead form in our ads) to tell them about our services. We may also use online advertising as described in section 8A.
- We send marketing emails and SMS only where we have your consent, or where the law allows us to infer it, for example from an existing business relationship.
- Our marketing emails and SMS identify Lone Wolf Security Pty Ltd and include a simple way to unsubscribe. We act on an unsubscribe request within 5 business days.
- You can ask us at any time to stop sending you direct marketing, or to stop using your details for remarketing or customer lists, by using the unsubscribe option or contacting us (section 2). This is free.
- You can also ask us where we got your personal information for direct marketing, and we will tell you unless it is impracticable or unreasonable to do so.
We do not sell personal information for marketing.
12. Keeping personal information secure, and how long we keep it
We hold personal information in electronic systems, many of them operated by service providers, and in some paper records. We take reasonable steps in the circumstances to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. We review our security arrangements and improve them over time.
We keep personal information for as long as we need it for the purposes in section 6 or as the law requires, then take reasonable steps to destroy or de-identify it. In general:
| Record | How long we generally keep it |
|---|---|
| Registers and records we must keep by law (for example security-provider registers, staff and payroll records) | At least as long as the law requires (often 7 years) |
| Incident reports and linked records | As long as needed for the incident, any claim or investigation, and legal requirements; longer where a minor is involved |
| Routine CCTV and body-worn video not needed for an incident | A short period, then deleted |
| Enquiries and leads that do not become clients | As long as reasonably needed to respond and follow up, or until you ask us to stop contacting you |
| Unsuccessful applicant information | A reasonable time after recruitment ends, then deleted |
Advertising and analytics providers keep information collected through their tools under their own retention settings and policies.
13. Data breaches
If personal information we hold is lost, or is accessed or disclosed without authority, we will act to contain it, assess it and, if it is likely to result in serious harm and we cannot prevent that harm, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.
14. Access and correction
You can ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.
- Contact the Privacy Officer using the details in section 2, in writing if possible.
- We may ask you to confirm your identity.
- We will respond within a reasonable period, normally within 30 days.
- We do not charge for making a request or for correcting information. We may charge a reasonable amount for giving access in some cases.
- We may refuse access in some circumstances, for example where it would unreasonably affect another person's privacy (such as video showing other people), would prejudice a legal or law-enforcement matter, or the law requires or authorises refusal. If we refuse, we will tell you why and how to complain.
Where the footage or record belongs to a venue or client, we may refer you to them. For information that Google or Meta hold about you, you can also contact them directly.
15. Complaints
If you think we have mishandled your personal information, please tell us first, in writing, using the contact details in section 2.
- We aim to acknowledge your complaint within 5 business days and to respond within 30 days.
- If you are not satisfied, or we do not respond within 30 days, you can complain to the Office of the Australian Information Commissioner. An OAIC complaint must be in writing. You can lodge it through the online form or by email or post, as set out at https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us. The OAIC's telephone line is for general enquiries only.
16. Changes to this policy
We may update this policy from time to time, including when we replace this interim version. The current version is on our website, with the date it was last updated, and is available free on request, including in other formats.
Version history
| Version | Date | Summary |
|---|---|---|
| Interim 1.0 | Last updated 12 November 2026; takes effect on the date it is published | First published interim version |
Appendix 1 — Short collection notices for forms and signs
A. Job applicant and onboarding notice. "Lone Wolf Security Pty Ltd collects your personal information, including identity, licence, qualification, contact, availability and referee details, to assess your application, check that you can lawfully work as a security officer, onboard and roster you, and pay you. We check your licence status on public registers and may obtain screening checks with your consent. We may disclose it to clients and venues where you work, regulators, insurers, and service providers who host our systems (some may handle information outside Australia). If you do not provide it we may not be able to engage you. Our Privacy Policy at https://lonewolfsecurity.com.au/privacy-policy/ explains how to access or correct your information and how to complain."
B. Body-worn video sign (video only). "Body-worn video is in use at this site for safety and evidence. Operated by Lone Wolf Security Pty Ltd. Privacy Policy: https://lonewolfsecurity.com.au/privacy-policy/."
B2. Body-worn video sign (only where audio is recorded). "Body-worn video AND AUDIO RECORDING is in use at this site for safety and evidence. Operated by Lone Wolf Security Pty Ltd. Privacy Policy: https://lonewolfsecurity.com.au/privacy-policy/." Our officers also say so when they start a recording where audio is on.
C. Phone recording script (used only if call recording is introduced). "This call may be recorded for training, safety and record-keeping. If you do not want it recorded, tell me now and we can continue without recording."
D. Website form note. "We use your details to reply to your enquiry. Our website uses cookies and analytics. See our Privacy Policy: https://lonewolfsecurity.com.au/privacy-policy/."
E. Ad lead form note (Facebook, Instagram or Google lead forms). "Lone Wolf Security Pty Ltd will use the details you submit to respond to your enquiry about our security services. The platform showing this form passes your details to us. We will only send you marketing emails or SMS if you agree, and you can unsubscribe at any time. Privacy Policy: https://lonewolfsecurity.com.au/privacy-policy/."