LEGAL

Privacy Policy

Last updated: March 2026

1. Overview

CITO Logistics collects and administers a range of business and personal information for the purposes of transporting freight for customers, the employment of staff, regulatory compliance, and safety and security. CITO is committed to protecting the privacy of personal information it collects, holds and administers.

CITO is bound by the Privacy Act 1988 (Cth) as well as other Commonwealth and State laws which impose specific obligations when it comes to handling information. We have adopted the Australian Privacy Principles contained in the Privacy Act as minimum standards in relation to handling personal information.

We also comply with the Spam Act 2003 (Cth) in relation to electronic marketing.

In broad terms this means that we:

  1. publish our Privacy Policy in full on our website;
  2. collect only information which we require for our primary function;
  3. obtain consent to collect personal information;
  4. ensure that when collecting personal information, the person is informed as to our contact details, the fact that they can access their information, why we collect the information, whether any relevant law requires the collection, who we may give the information to, and the consequences should all or some of the information not be provided;
  5. use and disclose personal information only for our primary functions or a directly related purpose;
  6. must not use personal information for a secondary purpose, unless consent is obtained;
  7. store business and personal information securely, protecting it from unauthorised access; and
  8. provide a person with access to their own information, and the right to seek its correction.

2. About This Privacy Policy

We respect your personal information and your right to privacy. Protecting your privacy when handling your personal information is very important to us and is fundamental to the way we serve you. This Privacy Policy describes the information that may be collected by CITO Logistics, the choices you can make about your personal information and how we protect your personal information.

This Privacy Policy is published on our website in order to meet our obligation under Australian Privacy Principle 1.3 which requires us to set out our policies on the management of personal information in a clearly expressed document which is available to anyone who asks for it.

Your request for information or a quote, your use of our products or services, or your use of this website constitutes an acknowledgement that you have been made aware of our privacy policies.

This policy does not create or confer upon any individual any rights or impose upon CITO Logistics any obligations outside of, or in addition to, those imposed by the Privacy Act 1988 (Cth), the Spam Act 2003 (Cth), or related legislation. Should there be any inconsistency between this statement and the Act, this statement shall be interpreted to give effect to, and comply with, the legislation.

3. What Is Personal Information

"Personal information" means information we hold about you from which your identity is either clear or can be reasonably determined. When you give us your personal information, it imposes a serious responsibility on us. Protecting your privacy when handling your personal information is very important to us and is fundamental to the way we serve you.

4. Collection Covered by This Policy

This Privacy Policy applies to situations in which CITO Logistics collects your personal information, including but not limited to collection via websites operated by or on behalf of CITO Logistics.

This website may contain links to non-CITO Logistics websites. We are not responsible for the privacy policies of those other websites. We recommend you review the privacy policies of each site you visit.

5. Collection of Personal Information and How We May Use It

Generally, we will collect personal information directly from you, and only to the extent necessary to provide a CITO Logistics product or service or to carry out our internal administrative operations. In some circumstances a third party may provide your personal information (name and contact details only) to us, and only to the extent necessary, in order for us to provide a product or service.

We may collect personal information when:

  1. you request information from us by any form;
  2. you request a quote, or you are referenced by a third party in a quote;
  3. you seek a credit account, or you are referenced by a third party in a credit account application;
  4. you seek to use our services or products, or you are referenced by a third party seeking to use our services or products;
  5. you fill in an application form or you are referenced by a third party in an application form;
  6. you deal with us over the telephone or you have contact with us in person;
  7. you email us or fax us; or
  8. you ask us to contact you after visiting our website.

We will collect personal information from you by lawful and fair means and not in an unreasonably intrusive way. We will use your personal information only for the particular purpose that you provided it, or for a directly related purpose. We may otherwise use your personal information where that other use is required or permitted by law, or with your express or implied consent.

6. Uses and Sharing

We will only collect personal information that is necessary to provide the product or service or to carry out internal administrative functions. We collect different personal information depending on the product or service requested. Some examples include:

Consigning or receiving freight — When you or a third party ship or receive freight with us we will capture the name and contact details for the consignment along with shipping activities (for tracking purposes), the quantity, weight and dimensions of the consignment, the biller's details, and details of the sending and receiving locations. This information allows us to route and charge for the consignment, provides contact details for us to seek further information or advise requirements, and allows us to respond to queries from both the sender and the receiver.

Quoting — When you or a third party seek a quote to ship or receive freight with us, we will capture contact details along with the quantity, weight and dimensions of the consignment, the biller's details, and details of the sending and receiving locations. This information allows us to route and quote the consignment and respond to queries.

Completing a job application — When you complete a job application with us, we will capture personal details including contact details, employment history, licence details, training and education qualifications, and medical history in order for us to assess your suitability for the position and to respond to the application. A job applicant may also provide your name, position and contact details in support of their application, which we will capture.

Completing an account application — When you complete an account application form with us, we will be capturing name and contact details in order to assess and respond to the application. An account applicant may provide us your name, position and contact details in support of their application, which we will capture.

Generally, we will not use your personal information to market to you unless we have either your implied or express consent, but in situations where it is impractical to obtain your prior consent, we will ensure you have an ability to opt out of future such communications.

We do not share your personal information with other organisations or to overseas recipients unless you give us your express consent, or where sharing is otherwise required or permitted by law, or where this is necessary on a temporary basis to enable our contractors to perform specific functions. When we temporarily provide personal information to companies who perform services for us, such as specialist information technology companies, mail houses or other contractors, we require those companies to protect your personal information as diligently as we do.

7. Unsolicited Information

"Unsolicited" personal information is personal information about an individual that an organisation has unintentionally received. This is an uncommon occurrence for CITO Logistics, but when it does happen, we will protect your personal information with the same rigour as we treat personal information that we intended to collect. If we could not have collected this information through our normal processes, we will de-identify that information as soon as we can.

8. Your Rights and Choices

You may interact with us anonymously or by using a pseudonym (an alias) where this is lawful and practicable.

You have the right to request access to the personal information you provide, and to correct or update your personal information. This right is subject to certain exceptions allowed by law.

You may choose to not provide personal information when requested. If you choose not to provide your personal information when requested, we may not be able to deliver the product or service that you have requested. We will endeavour to make this as clear as possible for each service.

9. Direct Marketing and Your Privacy

From time to time we may use the personal information we collect from you to identify particular CITO Logistics products and services which we believe may be of interest to you. We may then contact you to let you know about these products and services. We will generally only do this with your consent and we will always give you a choice to opt out of receiving such information in future.

Direct mail — Where we use your personal information to send you marketing information via the post, we may do so with your implied consent or, if this is impracticable, we will ensure that you are provided with an opportunity to opt out. We will always ensure that our opt-out notices are clear, conspicuous and easy to take up.

Electronic marketing — Where we use your personal information to send you marketing information by email, SMS, MMS or other electronic means, we may do so with your express or implied consent. Consent may be implied from our existing business relationship or where you have directly or indirectly provided us with your electronic address. All of our electronic marketing activities will comply with the requirements of the Spam Act 2003 (Cth).

Every personalised marketing contact sent or made by CITO Logistics will include a means by which you may opt out of receiving further marketing information. You may instruct us at any time to remove any previous consent you provided to receive marketing communications from us.

10. Information Sharing

We have a strict duty to maintain the privacy of all personal information we hold about you. However, certain exceptions do apply. For example, where disclosure of your personal information is:

  1. Authorised or required by law — e.g. disclosure to various government departments and agencies such as the Australian Taxation Office, Centrelink, Child Support Agency, Police or disclosure to courts under subpoena;
  2. In the public interest — e.g. where a crime, fraud or misdemeanour is committed or suspected, and disclosure against the person's rights to confidentiality is justified; or
  3. With your consent — your consent may be implied or express and it may also be verbal or written.

11. Use of Third-Party Service Providers

When we temporarily provide personal information to companies who perform services for us, such as specialist information technology companies, mail houses or other contractors, we require those companies to protect your personal information as diligently as we do.

12. Updating Your Information

It is inevitable that some personal information which we hold will become out of date. We will take reasonable steps to ensure that the personal information which we hold remains accurate and, if you advise us of a change of details, we will amend our records accordingly.

13. Access to Your Personal Information

CITO Logistics will, upon your request, and subject to applicable privacy laws, provide you with access to your personal information that is held by us. However, we ask that you identify, as clearly as possible, the type/s of information requested.

We will deal with your request to provide access to your personal information in a reasonable time — usually within 30 days of receipt of your request. We will not charge you for lodging such a request, but we may recover from you our reasonable costs incurred in supplying you with access to this information.

Your right to access your personal information is not absolute. In certain circumstances, the law permits us to refuse your request, such as where:

  1. we reasonably believe that giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
  2. giving access would have an unreasonable impact on the privacy of other individuals;
  3. the request for access is frivolous or vexatious;
  4. the information relates to existing or anticipated legal proceedings between us and you, and would not be accessible by the process of discovery;
  5. giving access would reveal our intentions in relation to negotiations with you in such a way as to prejudice those negotiations;
  6. giving access would be unlawful;
  7. denying access is required or authorised by or under an Australian law or a court/tribunal order;
  8. we have reason to suspect that unlawful activity or serious misconduct relating to our functions or activities has been, is being or may be engaged in, and giving access would be likely to prejudice the taking of appropriate action;
  9. giving access would be likely to prejudice enforcement related activities conducted by, or on behalf of, an enforcement body; or
  10. giving access would reveal evaluative information generated in connection with a commercially sensitive decision-making process.

Should we refuse access to your personal information, we will provide you written notice setting out: (a) the reasons for the refusal except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so; (b) the mechanisms available to complain about the refusal; and (c) any other matter prescribed by the regulations.

14. Loss of Personal Information

Despite our every effort to protect your personal information, there remains the possibility that a breach of our security could occur. In the event of loss of personal information CITO Logistics will:

  1. seek to rapidly identify and secure the breach to prevent any further breaches;
  2. engage the appropriate authorities where criminal activity is suspected;
  3. assess the nature and severity of the breach including the type of personal information involved and the risk of harm to affected individuals;
  4. notify the affected individuals directly if appropriate and where possible;
  5. if appropriate, put a notice on our website advising our customers of the breach; and
  6. notify the Privacy Commissioner (at the OAIC) if the breach is significant.

15. Information Security

CITO Logistics is committed to keeping your trust by protecting and securing your personal information. We employ appropriate technical, administrative and physical procedures to protect personal information from unauthorised disclosure, loss, misuse or alteration.

We limit access to personal information to individuals with a business need consistent with the reason the information was provided. We keep personal information only for as long as it is required for business purposes or by the law.

16. Children's Privacy

We will use reasonable efforts to verify parental consent prior to the collection and use of personal information from children under 16. The method of verification may vary according to the information, product, service or event in which the child wishes to participate.

Consent may take a variety of forms including offline consent such as printing and submitting a permission form by mail, email or fax, or online consent such as by ticking an online check box that parental or guardian consent has been obtained.

CITO Logistics will allow parents or guardians to review any personal information collected from their children, subject to verifying the identity of the consenting parent/guardian. Parents/guardians may revoke their consent and delete information collected from their children at their discretion.

17. Information Collected on This Website

We may collect non-personal information from you such as browser type, operating system, and web pages visited to help us manage our website.

We use cookies and other internet technologies to manage our website and certain online products and services. We do not use these technologies to collect or store personal information unless you have opted in to such a feature.

Our internet server logs the following information which is provided by your browser for statistical purposes only:

  1. the type of browser and operating system you are using;
  2. your Internet Service Provider and top-level domain name (for example .com, .gov, .au, .uk etc);
  3. the address of any referring web site (for example the previous web site you visited); and
  4. your computer's IP (Internet Protocol) address.

All of this information is used for aggregated statistical analyses or systems administration purposes only. No attempt will be made to identify users or their browsing activities, except where required by or under law.

In addition, when you submit an enquiry or quote request through our website, we collect your IP address and browser user-agent string for security purposes, including protection against automated spam submissions and rate limiting of form submissions. IP addresses collected for rate-limiting purposes are stored temporarily and are not linked to your personal identity unless you also submit a form.

18. Google Analytics and Advertising

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies and similar technologies to help us analyse how visitors use our website. The information generated by these technologies about your use of our website is transmitted to and stored by Google on servers which may be located outside of Australia, including in the United States.

What Google Analytics collects: When you visit our website and have given consent, Google Analytics may collect information including your IP address (which is anonymised before storage), browser type and version, operating system, referring URL, pages visited on our website, time and duration of your visit, and your interactions with website features such as links, buttons and forms.

How we use Google Analytics: We use this information to understand how visitors interact with our website, to identify which pages and services are most popular, to improve our website content and user experience, and to measure the effectiveness of our online presence. Specifically, we track the following types of interactions:

  1. Page views — which pages you visit and how you navigate through our website;
  2. Service interest — which of our service categories (such as transport, warehousing, or supply chain management) you view or click on;
  3. Contact interactions — whether you click on a phone number link, email address link, or submit an enquiry or quote request form. We do not record the content of your phone calls or emails — only the fact that a click occurred;
  4. Client portal access — whether you click through to one of our client portal login pages; and
  5. Engagement signals — general measures of how you engage with the website, such as scroll depth and section views, to help us understand which content is most useful.

Google Ads conversion tracking: We also use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you arrive at our website via a Google advertisement and then take certain actions (such as submitting an enquiry form, clicking a phone number, or clicking an email link), this information is reported back to Google Ads so we can understand which advertisements are leading to genuine customer enquiries. Google Ads conversion tracking uses cookies that are set by Google when you click on an advertisement. These cookies typically expire after 30 days and do not contain personal information. The conversion data we receive from Google is aggregated and does not identify individual users.

Data processing by Google: Google may use the data collected to contextualise and personalise the ads of its own advertising network. Google's use of information collected through Google Analytics is governed by the Google Privacy Policy, available at policies.google.com/privacy. You can learn more about how Google uses data from partner sites at policies.google.com/technologies/partner-sites.

Opting out of Google Analytics: In addition to managing your preferences through our cookie consent banner (see section 20 below), you can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

19. Cookies

A "cookie" is a packet of information that allows our server to identify and interact more effectively with your computer. When you access our website, we send you a temporary or "session cookie" that gives you a unique identification number. A different identification number is sent each time you use our website. Cookies do not identify individual users, although they do identify a user's internet browser type and your Internet Service Provider.

Shortly after you end your interaction with our website, the session cookie expires. This means it no longer exists on your computer and therefore cannot be used for further identification or access to your computer.

Without cookies certain personalised services cannot be provided to users of our website, accordingly you may not be able to take full advantage of all of our website features if cookies have been disabled.

We use session cookies in the following manner:

  1. Log-on and log-off administration — If you decide to register with our site, session cookies help with the log-on and log-off process. The cookies enable us to recognise your log-on ID when you log on so that we do not establish a duplicate registration record for you.
  2. Transactions and site usability — We use session cookies to improve how you navigate through our website and conduct transactions. As examples, session cookies are used to maintain your online session as you browse over several pages, to store and prepopulate information so that you do not have to re-enter the same information twice, and to collect referral statistics when you click on a link or ad banner.

CITO Logistics may also use "persistent cookies". A persistent cookie is a small piece of text stored on your computer's hard drive for a defined period of time, after which the cookie is erased. We will not collect or link to personal information through persistent cookies without your express consent.

We use persistent cookies as follows:

  1. Site usage measurement — Our site measurement tool uses a persistent cookie to assist us in measuring how and when our website and its various components are used. The cookie will expire 30 days after your last visit.
  2. Log-off safety function — We use a persistent cookie to automatically log you off of certain sites if there has been no activity for 15 minutes. The cookie is permanently removed when you log off, or within 15 minutes of your last activity if you close the browser without logging off.
  3. Opt-in cookies — Persistent cookies allow us, at your request, to recognise you when you return to our website or to remember certain information that you have provided. These features and cookies are strictly at your request and for your convenience. The cookies will expire one year from your last visit.

In addition to the cookies described above, third-party cookies may be set by Google Analytics and Google Ads when you have given your consent (see section 18 above and section 20 below). These cookies are used to distinguish unique users, track sessions, measure advertising conversions, and throttle request rates. Google Analytics cookies typically include _ga (which expires after 2 years) and _ga_[ID] (which expires after 2 years), while Google Ads cookies are used to attribute conversions and typically expire after 30 days.

20. Cookie Consent and Your Choices

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline analytics and advertising cookies. Your choice is stored in your browser's local storage so that your preference is remembered on future visits.

If you accept cookies: Google Analytics and Google Ads tracking will be activated, and the data described in section 18 above will be collected during your visit. Your consent covers analytics storage, ad storage, ad user data, and ad personalisation as defined by Google's consent framework. Your consent preference will be saved so that you are not asked again on subsequent visits.

If you decline cookies: Google Analytics and Google Ads tracking will not be activated and no analytics or advertising data will be collected or sent to Google. Essential cookies required for basic website functionality (such as form security and session management) will still operate as these are necessary for the website to function correctly and do not require consent.

Changing your preference: You can change your cookie preference at any time by clicking the "Cookie Settings" link in the footer of our website — this will re-open the consent banner so you can make a new choice. You can also configure your internet browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Please refer to your internet browser's instructions or help screens to learn more about these functions.

Local storage: In addition to cookies, our website uses your browser's local storage to save your cookie consent preference. Local storage is similar to a cookie but is not transmitted to our server with each page request. The only item we store in local storage is your analytics consent choice ("granted" or "denied"). You can clear this data at any time through your browser's settings or by using the Cookie Settings link in our footer.

21. Searches

Search terms that you enter when using our search engine are collected but are not associated with any other information that we collect. We use these search terms for the purpose of aggregated statistical analyses so we can ascertain what people are looking for on our website, and to improve the services that we provide.

From time to time, we may use external companies to provide us with detailed aggregate statistical analyses of our website traffic. At no time is any personal information made available to these companies, nor is the aggregate information ever merged with personal information such as your name, address, email address or other information you would consider sensitive or would compromise your privacy.

22. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

23. Contact and Complaints

CITO Logistics is committed to working with individuals to obtain a fair resolution of any complaint or concern about privacy. To contact us with a compliment, complaint or a privacy question, you can:

CITO Logistics Pty Ltd
Attention: Privacy Contact Officer
22 Sara Grove, Tottenham VIC 3012
Phone: (03) 9314 0928
Email: quotes@citotransport.com.au

24. Further Information on Privacy

You can obtain further general information about your privacy rights and privacy law from the Office of the Australian Information Commissioner (OAIC) by:

  1. calling their Privacy Hotline on 1300 363 992;
  2. visiting their website at www.oaic.gov.au; or
  3. writing to: The Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001.