Privacy Policy

1. Overview

Bella Isora Pty Ltd (ABN 62 130 405 588) trading as ITEquip Rental ("we", "us", "our") are committed to protecting your privacy. This Privacy Policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act.

By using our website at www.itequip.com.au, requesting a quote, entering into a rental agreement, or otherwise dealing with us, you consent to the collection, use and disclosure of your personal information as described in this policy.

This policy applies to personal information collected from individuals including customers, prospective customers, suppliers, contractors, and visitors to our website.

2. Information we collect

We collect personal information that is reasonably necessary for our business functions. The types of personal information we may collect include:

Identity and contact information

• Full name, job title, and company name
• Business and personal email addresses
• Phone numbers (mobile and landline)
• Business address and delivery addresses

Financial and credit information

• ABN and ACN
• Credit application details and credit history (with your consent)
• Bank account and direct debit details for billing purposes
• Directors' or guarantors' personal details where required for credit assessment

Transaction and account information

• Details of equipment rented, rental terms, and payment history
• Communications between you and ITEquip Rental
• Support and warranty requests

Website and technical information

• IP address and browser type
• Pages visited and time spent on our website
• Referring URLs and search terms
• Cookie identifiers (see Section 10)

We do not collect sensitive information (such as health information, racial or ethnic origin, or political opinions) unless required by law or with your explicit consent.

3. How we collect personal information

We collect personal information in a number of ways:

• Directly from you — when you complete a quote request form, contact us by phone or email, sign a rental agreement, or otherwise communicate with us
• From your employer or organisation — where your employer engages ITEquip Rental and provides your contact details as a nominated representative
• From credit reporting bodies — when we conduct a credit assessment, we may obtain a credit report about you from a credit reporting body such as Equifax or illion
• From publicly available sources — such as ASIC, the ABR, LinkedIn, or company websites
• Automatically via our website — through cookies, web beacons, and analytics tools (see Section 10)

Where it is lawful and practicable to do so, we will collect personal information directly from you rather than from a third party.

4. How we use your personal information

We use personal information for the primary purpose for which it was collected and for related secondary purposes that you would reasonably expect. This includes:

• Processing and responding to quote requests and enquiries
• Assessing creditworthiness and eligibility for rental agreements
• Establishing, managing, and administering rental and finance agreements
• Delivering, configuring, and retrieving equipment
• Processing payments and managing accounts
• Providing technical support and warranty services
• Communicating with you about your account, equipment, and contract terms
• Sending service updates, renewal reminders, and end-of-term notices
• Sending marketing communications (where you have consented — see Section 7)
• Improving our products, services, and website
• Complying with legal obligations and resolving disputes
• Detecting and preventing fraud or unauthorised use of our services

5. Disclosure to third parties

We may disclose your personal information to third parties in the following circumstances:

• Finance and credit providers — where a rental agreement involves third-party funding or a credit assessment
• Credit reporting bodies — such as Equifax or illion, for the purpose of credit assessment and reporting
• Delivery and logistics partners — to fulfil equipment delivery and retrieval services
• IT service providers — including cloud hosting, email, CRM, and accounting software providers who process data on our behalf
• Professional advisers — including lawyers, accountants, and insurers
• Government and regulatory bodies — where required by law, court order, or regulatory requirement
• Successors in business — in the event of a merger, acquisition, or sale of all or part of our business

We require all third parties to handle your personal information in accordance with the Australian Privacy Principles and, where applicable, to enter into appropriate data processing agreements.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

6. Overseas disclosure

Some of our third-party service providers may be located overseas, including in the United States and the European Union. These providers include cloud infrastructure, CRM, and analytics platforms. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle the information in a manner consistent with the Australian Privacy Principles.

By providing us with your personal information, you consent to the disclosure of that information to overseas recipients where necessary for the purposes described in this policy.

7. Direct marketing

We may use your contact information to send you information about our products, services, promotions, and industry news that we believe may be of interest to you. We will only do this where:

• You have expressly consented to receive marketing communications from us; or
• You are an existing customer and the communication relates to similar products or services, and you have not opted out

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at privacy@itequip.com.au. We will action all opt-out requests within 5 business days.

8. Security of your personal information

We take reasonable steps to protect the personal information we hold from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and role-based permissions for staff
• Regular security assessments of our systems and third-party providers
• Staff training on privacy and information security obligations
• Secure disposal of physical documents containing personal information
• DoD 5220.22-M certified data wiping of all returned rental equipment

If we become aware of a data breach that is likely to result in serious harm to individuals whose information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal information is no longer required, we will take reasonable steps to destroy or de-identify it.

9. Access and correction

You have the right to request access to the personal information we hold about you, and to request corrections if it is inaccurate, out of date, incomplete, or misleading.

To make an access or correction request, please contact our Privacy Officer in writing (see Section 13). We will respond within 30 days. In some circumstances we may charge a reasonable fee to cover the cost of providing access. If we are unable to provide access or make a correction, we will provide written reasons.

We may decline a request for access or correction in limited circumstances permitted by the Privacy Act, such as where providing access would pose a serious threat to health or safety, or where it would unreasonably impact the privacy of another individual.

10. Cookies and website analytics

Our website uses cookies — small text files stored on your device — to improve your browsing experience, remember your preferences, and analyse website traffic. We use the following types of cookies:

• Essential cookies — necessary for the website to function and cannot be disabled
• Analytics cookies — help us understand how visitors interact with our website (e.g. Google Analytics)
• Marketing cookies — used to deliver relevant advertisements and track campaign effectiveness

You can control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of some parts of our website. By continuing to use our website with cookies enabled, you consent to our use of cookies as described in this policy.

11. Complaints

If you believe we have breached the Australian Privacy Principles or your privacy rights in any other way, we encourage you to contact us first so we can attempt to resolve the matter (see Section 13). We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The current version of the policy will always be available on our website at www.itequip.com.au/privacy-policy.html. We encourage you to review this policy periodically. Where changes are material, we will notify existing customers by email.

13. Contact us

For all privacy-related enquiries, access requests, correction requests, or complaints, please contact our Privacy Officer: