Privacy Policy

Grid Rig Pty Ltd ABN: 89 692 589 521

Last Updated: March 2026

1. Introduction

Welcome to Grid Rig. This Privacy Policy explains how Grid Rig Pty Ltd, trading as Grid Rig ("Grid Rig", "we", "us", or "our") collects, uses, discloses, stores, and protects your personal information when you:

• Visit or interact with our website at grid-rig.com.au

• Submit an enquiry, quote request, or contact form

• Interact with our advertisements on LinkedIn, Meta, or other platforms

• Engage with us via email, phone, LinkedIn messaging, or other channels

• Use any of our related services (collectively, the "Services")

We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy should be read together with any applicable Terms and Conditions published on our website.

By using our Services, you acknowledge and agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

2. About Us

Grid Rig Pty Ltd is an Australian company that supplies mobile battery energy storage systems (BESS) and electric vehicle (EV) charging solutions for mining, construction, logistics, ports, airports, and other heavy industrial applications.

Grid Rig operates as a sister company to Vantage West Electrical Services & Technologies (EC 10475), a licensed Western Australian electrical contractor that provides installation, commissioning, compliance, and maintenance services for Grid Rig products.

Our principal place of business is in Western Australia. Our contact details for privacy-related enquiries are set out in Section 15 of this Privacy Policy.

3. Information We Collect

We collect several categories of personal information depending on how you interact with us:

3.1 Information You Provide Directly

When you submit an enquiry, request a quote, complete a contact form, or otherwise communicate with us, you may provide:

• Your name (first and last)

• Email address

• Phone number

• Company or organisation name

• Job title or role

• Industry sector

• Details of your enquiry, project requirements, or site conditions

• Any other information you choose to include in correspondence with us

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device and Browser Information: IP address, browser type and version, operating system, device type, and screen resolution

• Usage Information: Pages visited, time spent on pages, click patterns, navigation paths, and referring URLs

• Location Information: Approximate geographic location based on your IP address (country, state, or region)

• Cookies and Similar Technologies: We use cookies, pixels, web beacons, and similar tracking technologies to collect information about your use of our website. See Section 10 for more detail

3.3 Information from Advertising Platforms

When you interact with our advertisements on LinkedIn, Meta (Facebook/Instagram), or other platforms, we may receive:

• Your name, email address, phone number, company name, and job title (if you submit a Lead Generation Form)

• Aggregated and anonymised data about ad impressions, clicks, and conversions

• Information about your LinkedIn profile (such as industry, job function, and seniority) where you have consented to share this through the platform

Important: When you submit information through a LinkedIn Lead Gen Form or similar advertising feature, your data is collected subject to both LinkedIn's (or the relevant platform's) privacy policy and this Privacy Policy. We encourage you to review the privacy policy of the platform through which you engage with our advertising.

3.4 Information from Third Parties

We may receive personal information about you from:

• Publicly available sources, such as LinkedIn profiles, company websites, and business directories

• CRM and analytics platforms that help us manage customer relationships

• Referral sources or business partners who introduce us to potential clients

• Event organisers where you have attended an industry event or trade show

3.5 Information You Are Not Required to Provide

You are not required to provide us with personal information. However, if you choose not to provide certain information, we may be unable to respond to your enquiry, provide you with a quote, or deliver our Services to you.

Where practicable, you may interact with us anonymously or using a pseudonym, in accordance with Australian Privacy Principle 2.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 To Provide Our Services

• Respond to your enquiries and requests for information

• Prepare and deliver quotes and proposals

• Manage customer and prospective customer relationships

• Coordinate site assessments, installations, and project delivery

• Provide after-sales support, maintenance, and warranty services

4.2 To Communicate With You

• Send you information about our products and services that may be relevant to your business

• Provide updates about Grid Rig, including new product releases, case studies, and industry news

• Respond to your correspondence and support requests

• Send administrative notices, such as changes to our terms or policies

4.3 For Marketing and Advertising

• Deliver targeted advertisements on LinkedIn, Meta, and other platforms

• Measure the effectiveness of our advertising campaigns

• Build and manage retargeting audiences based on website visits and ad interactions

• Send direct marketing communications, where we have your consent or where otherwise permitted by law

You can opt out of direct marketing communications at any time by clicking "unsubscribe" in any marketing email, or by contacting us using the details in Section 15. We will action your request promptly.

4.4 To Improve Our Services and Website

• Analyse website traffic, usage patterns, and user behaviour

• Monitor and improve the performance and user experience of our website

• Conduct internal research and development

• Test new features and functionality

4.5 For Legal and Compliance Purposes

• Comply with applicable laws, regulations, and industry standards

• Respond to lawful requests from government authorities or courts

• Protect our legal rights, property, and safety, or that of our users or the public

• Enforce our Terms and Conditions

• Detect and prevent fraud or other unlawful activity

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 With Service Providers

We engage trusted third-party service providers to assist us in operating our business, including:

• Website Hosting and Analytics: Providers such as Framer (website hosting), Google Analytics, and similar services that help us understand website usage

• Customer Relationship Management (CRM): Platforms we use to manage customer interactions and sales pipelines

• Advertising Platforms: LinkedIn, Meta, and other platforms used to deliver and measure our advertising

• Email and Communications: Email service providers for transactional and marketing communications

• Payment Processing: Payment processors for handling invoices and transactions

All service providers are contractually required to handle your information securely, use it only for the purpose for which it was shared, and comply with applicable privacy laws.

5.2 With Related Entities

We may share your information with Vantage West Electrical Services & Technologies (EC 10475), our sister company, for the purposes of coordinating installation, commissioning, maintenance, and compliance services related to Grid Rig products.

5.3 For Legal Reasons

We may disclose your information where we reasonably believe it is necessary to:

• Comply with applicable laws, regulations, or legal processes

• Respond to lawful requests from government authorities or courts

• Enforce our Terms and Conditions

• Protect the rights, property, or safety of Grid Rig, our customers, or the public

5.4 Business Transfers

If Grid Rig is involved in a merger, acquisition, sale of assets, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you of any such change by updating this Privacy Policy or by direct communication where practicable.

5.5 Aggregated and De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you, for purposes such as industry research, analytics, and marketing.

6. International Data Transfers

Grid Rig is based in Australia. However, some of our service providers (such as website hosting, analytics, and advertising platforms) may process your personal information in countries outside Australia, including the United States and other jurisdictions.

Where we transfer your personal information overseas, we take reasonable steps to ensure that the overseas recipient handles your information in accordance with the Australian Privacy Principles, or that the recipient is subject to a law or binding scheme that provides substantially similar protections.

By using our Services, you acknowledge that your personal information may be transferred to and processed in countries outside Australia, which may have different data protection laws.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. These measures include:

• Encryption of data in transit using SSL/TLS

• Access controls and authentication for internal systems

• Regular review of our data collection, storage, and processing practices

• Limiting access to personal information to employees and contractors who need it to perform their duties

Important: While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information.

7.1 Notifiable Data Breaches

In the event of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). This includes notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention practices are as follows:

• Enquiry and Contact Information: Retained for the duration of our business relationship and for a reasonable period thereafter (typically up to 3 years) to allow for follow-up or re-engagement

• Lead Gen Form Data: Retained in accordance with platform-specific requirements (e.g., LinkedIn retains Lead Gen Form data for one year) and our internal CRM policies

• Transaction and Invoice Records: Retained for 7 years in accordance with Australian tax and accounting obligations

• Website Usage and Analytics Data: Typically retained for 12 to 24 months, and may be retained in aggregated or de-identified form for longer periods

• Marketing Communications Preferences: Retained until you unsubscribe or request deletion

After the applicable retention period, your information is securely deleted or de-identified.

9. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights:

9.1 Access

You may request access to the personal information we hold about you. We will respond to your request within 30 days and provide you with access to your information, subject to any exceptions permitted by law.

9.2 Correction

If you believe that personal information we hold about you is inaccurate, incomplete, out of date, irrelevant, or misleading, you may request that we correct it. We will take reasonable steps to correct the information.

9.3 Opting Out of Marketing

You may opt out of receiving direct marketing communications from us at any time by:

• Clicking "unsubscribe" in any marketing email

• Contacting us using the details in Section 15

We will process your opt-out request promptly. Please note that even if you opt out of marketing, we may still send you service-related communications (such as confirmations, invoices, or important notices about our products).

9.4 Anonymity and Pseudonymity

Where practicable, you have the option to interact with us without identifying yourself, or by using a pseudonym. However, in many cases we will need your identity and contact details to respond to your enquiry or provide our Services.

9.5 Deletion

You may request that we delete your personal information. We will comply with your request unless we are required or permitted to retain the information under applicable law (for example, for tax, accounting, or legal compliance purposes).

9.6 Complaint

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us. We will investigate your complaint and respond within 30 days. Our complaint process is set out in Section 14.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience, analyse website traffic, and support our advertising activities.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the basic functionality of our website, such as security and session management. These cannot be disabled

• Analytics Cookies: Help us understand how visitors use our website, including which pages are visited most frequently and how users navigate the site. We use tools such as Google Analytics for this purpose

• Advertising and Retargeting Cookies: Used to deliver relevant advertisements to you on platforms such as LinkedIn and Meta, and to measure the effectiveness of our advertising campaigns. These may include the LinkedIn Insight Tag, Meta Pixel, and similar tracking technologies

10.2 Third-Party Cookies

We use third-party services that may set their own cookies on your device, including:

• Google Analytics (website analytics)

• LinkedIn Insight Tag (advertising measurement and retargeting)

• Meta Pixel (advertising measurement and retargeting)

These third parties collect information in accordance with their own privacy policies. We encourage you to review their policies.

10.3 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View and delete existing cookies

• Block all cookies or third-party cookies

• Set preferences for specific websites

For more information about managing cookies, visit your browser's help documentation or www.allaboutcookies.org.

11. LinkedIn Lead Generation Forms

We use LinkedIn Lead Gen Forms as part of our advertising campaigns on LinkedIn. When you submit a Lead Gen Form, LinkedIn provides us with the information you have consented to share, which may include your name, email address, phone number, company name, job title, and other professional details.

We use this information to:

• Respond to your expression of interest in Grid Rig products or services

• Add you to our CRM for sales follow-up

• Send you relevant information about our products and services, where you have consented or where otherwise permitted by law

Your submission of a LinkedIn Lead Gen Form is governed by both LinkedIn's Privacy Policy and this Privacy Policy. You may exercise your rights under this Privacy Policy in relation to any information we receive through Lead Gen Forms by contacting us using the details in Section 15.

12. Third-Party Links and Services

Our website and communications may contain links to third-party websites, platforms, or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party services.

We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information.

13. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us using the details in Section 15, and we will take steps to delete that information.

14. Complaints

If you believe that we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us by contacting our Privacy Officer using the details in Section 15.

We will:

• Acknowledge receipt of your complaint within 5 business days

• Investigate your complaint and respond within 30 days

• Work with you in good faith to resolve the issue

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au

• Phone: 1300 363 992

• Email: enquiries@oaic.gov.au

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal information, please contact us:

Privacy Officer Grid Rig Pty Ltd Email: henry@vantagewest.com.au Phone: 1300 482 682 Website: grid-rig.com.au

We will endeavour to respond to all enquiries within 30 days.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make material changes to this Privacy Policy:

• We will update the "Last Updated" date at the top of this policy

• Where practicable, we will notify you via email or a notice on our website

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

17. Australian Privacy Act Compliance

17.1 Australian Privacy Principles

Grid Rig complies with the 13 Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth), as amended. These principles govern how we collect, use, disclose, store, and manage personal information.

17.2 Notifiable Data Breaches Scheme

We comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the OAIC as required by law.

17.3 Statutory Tort for Serious Invasions of Privacy

We are aware of the statutory tort for serious invasions of privacy that took effect in June 2025 under the Privacy and Other Legislation Amendment Act 2024. We take our obligations under this provision seriously and maintain appropriate safeguards to protect against serious invasions of privacy.

18. Glossary

APPs: The Australian Privacy Principles contained in Schedule 1 of the Privacy Act 1988 (Cth).

BESS: Battery Energy Storage System.

Lead Gen Form: A lead generation form provided through an advertising platform (such as LinkedIn) that collects your contact and professional information.

OAIC: The Office of the Australian Information Commissioner, the independent regulator responsible for privacy and freedom of information in Australia.

Personal Information: Information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether recorded in a material form or not, as defined in the Privacy Act 1988 (Cth).

Privacy Act: The Privacy Act 1988 (Cth).

Services: Our website, products, advertising, communications, and any related services provided by Grid Rig Pty Ltd.

-- End of Privacy Policy --

Last Updated: March 2026 | Version 1.0