Privacyverklaring

Last updated: 19-08-2026

SendNet, a trading name of SendNet Australia Pty Ltd ("SendNet", "we", "us" or "our"), attaches great importance to the protection of your personal data. In this privacy statement we explain transparently which personal data we collect, for what purpose, on what legal basis, how long we retain it, who we share it with and what rights you have. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter: "GDPR"), the Dutch GDPR Implementation Act and other applicable laws and regulations. We recommend reading this statement carefully.

1. Data controller

The controller within the meaning of the GDPR is:

• SendNet Australia Pty Ltd (trading as SendNet);
• 159 Studley Ct, DERRIMUT VIC 3026, Australia;
• ABN [TO BE COMPLETED];
• ACN [TO BE COMPLETED];
• E-mail: sales@send-net.com.

For any questions, requests or complaints about the processing of your personal data you can contact us using the details above.

2. Definities

In this privacy statement we use the definitions set out in Article 4 GDPR. In particular:

• Persoonsgegevens: any information relating to an identified or identifiable natural person;
• Processing: any operation relating to personal data, such as collecting, recording, organising, storing, consulting, using, disclosing, erasing or destroying;
• Betrokkene: the natural person to whom the personal data relates;
• Verwerker: a party that processes personal data on behalf of the controller;
• Data controller: the party that determines the purposes and means of the processing.

3. Whose data we process

We process personal data of the following categories of data subjects, among others:

• clients and their contact persons (business customers, online stores and trading businesses);
• recipients and senders of shipments;
• visitors to our website and users of our track & trace environment;
• people who contact us, for example by email or through a form;
• suppliers, partners and applicants.

4. Which personal data we process

Depending on the service and your relationship with us, we may process the following (categories of) personal data:

• Identification and contact details: name, company name, contact person, address, postal code, city, country, email address and phone number;
• Shipment and order data: tracking numbers, order references, delivery address, weight, dimensions, number of parcels, delivery type, signature and recipient name on delivery;
• Financial and administrative data: invoice details, ABNs, amounts, payment status and account credit;
• Technical data: IP address, browser type, device data and log files when using our website;
• Communicatiegegevens: the content of your correspondence with us.

In principle we do not process special categories of personal data (such as data on health, religion or political opinion) and ask you not to provide it to us, unless there is a legal obligation or necessity exists.

5. Purposes and legal bases of processing

We process your personal data only for specified, explicit and legitimate purposes. Each purpose has a legal basis under Article 6 GDPR:

Purpose	Legal basis (Art. 6 GDPR)
Performing the contract: processing, packing, shipping and delivering shipments and providing track & trace	Necessary for the performance of the contract (Art. 6(1)(b))
Preparing, sending and administering invoices	Legal obligation (Art. 6(1)(c)) and performance of contract (b)
Customer contact, support and handling of enquiries and complaints	Performance of contract (b) and legitimate interest (f)
Security, fraud prevention and improvement of our services and website	Legitimate interest (Art. 6(1)(f))
Meeting statutory retention and disclosure obligations	Legal obligation (Art. 6(1)(c))
Sending commercial communications (where applicable)	Consent (Art. 6(1)(a)) or legitimate interest (f)

Where we rely on a legitimate interest, we have balanced our interests against your rights and freedoms. You have the right to object to processing on this basis (see clause 11).

6. Disclosure to third parties and processors

We disclose your personal data to third parties only insofar as necessary for the performance of our services or to comply with a legal obligation. This may involve:

• carriers and delivery partners involved in delivering your shipment;
• IT and hosting providers that support our systems and website;
• administrative service providers, accountants and payment service providers;
• government authorities, regulators or other parties where we are legally required to do so.

With parties that process personal data on our instructions (processors) we conclude a data processing agreement setting out appropriate technical and organisational measures, confidentiality and security, in accordance with Article 28 GDPR. We never sell your personal data to third parties.

7. Transfers outside the European Economic Area (EEA)

We aim to process your personal data within the EEA. If personal data is nonetheless processed outside the EEA , we do so only where an adequate level of protection is guaranteed, for example on the basis of an adequacy decision by the European Commission or by concluding the Commission's Standard Contractual Clauses, supplemented by any necessary additional measures.

8. Retention periods

We do not retain your personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is legally required or permitted. As a guide we apply, among others:

• Invoices and administration: 5 years, under the record-keeping obligation in section 262A of the Income Tax Assessment Act 1936 (Cth) and section 70 of the Taxation Administration Act 1953 (Cth);
• Shipment and order data: for as long as necessary to perform and complete the assignment, and thereafter in anonymised or aggregated form where we retain it;
• Contact and correspondence data: for the duration of the relationship and a reasonable period thereafter;
• Technical log files: a limited period for security and analytics purposes.

Once the retention period has expired, personal data is deleted or anonymised.

9. Security of personal data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, unwanted disclosure and unauthorised alteration. This includes access controls, encryption where appropriate, logical separation of data, and limiting access to personal data to staff for whom it is necessary. In the unlikely event of a data breach, we act in accordance with our legal obligations, including notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals where the Notifiable Data Breaches scheme requires it.

10. Cookies and similar technologies

Our website may use cookies and similar technologies. Cookies are small text files that are placed on your device when you visit the website. We distinguish between:

• Functional and necessary cookies: necessary for the website and the track & trace environment to work properly; no consent is required for these;
• Analytics cookies: to measure and improve use of the website, configured in a privacy-friendly way where possible;
• Overige cookies: are placed only after your consent, where applicable.

You can set your browser to refuse or delete cookies. Disabling certain cookies may affect how the website works.

11. Your rights as a data subject

Under the GDPR you have the following rights in relation to your personal data:

• Right of access (Art. 15 GDPR): you can request which personal data we process about you;
• Right to rectification (Art. 16 GDPR): you can have inaccurate data corrected or completed;
• Right to erasure (Art. 17 GDPR): in certain cases you can request that your data be deleted (the "right to be forgotten");
• Right to restriction (Art. 18 GDPR): you can have the processing of your data restricted;
• Right to data portability (Art. 20 GDPR): you can receive your data in a structured, commonly used and machine-readable format, or have it transferred;
• Right to object (Art. 21 GDPR): you can object to processing based on a legitimate interest or to direct marketing;
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

You can submit a request to exercise your rights via sales@send-net.com. To verify your identity we may ask for additional information. In principle we respond within one month of your request; this period may be extended by two months for complex or numerous requests, in which case we will inform you.

12. Automated decision-making and profiling

We do not take decisions based solely on automated processing (including profiling) that that have legal effects for you or otherwise significantly affect you, without human intervention.

13. Minderjarigen

Our services and website are not directed at minors. We do not knowingly collect personal data from people under 16 without the consent of a parent or legal guardian. If you believe we have processed data without that consent, please contact us so we can delete it.

14. Right to complain

If you believe we are not handling your personal data carefully, we ask you to raise this with us first. You also have the right to lodge a complaint with the supervisory authority, the Office of the Australian Information Commissioner (www.oaic.gov.au).

15. Changes to this privacy statement

We may amend this privacy statement from time to time, for example in response to changes in laws and regulations or our services. The most current version is always available on this page. For significant changes, we will make reasonable efforts to inform you appropriately.

16. Contact

If you have questions or comments about this privacy statement or about how we handle personal data ? Please contact us at sales@send-net.com or by post: SendNet Australia Pty Ltd, 159 Studley Ct, DERRIMUT VIC 3026, Australia.