Tully Sugar Limited (referred to in this document TSL, Tully Sugar, we, us or our) is committed to ensuring that personal information collected is dealt with in accordance with the Information Privacy Principles contained in the Information Privacy Act 2009 (Qld) and the Australian Privacy Principles contained in the Privacy Act 1988 (Cth). Tully Sugar also complies with the Spam Act 2003 (Cth) which imposes restrictions on sending emails and other types of commercial electronic messages.
Website privacy and security statement
Tully Sugar is committed to protecting the privacy of our website users. We understand and appreciate that visitors to, and users of, this website, are concerned about their privacy and the confidentiality and security of information they provide to us.
Use and disclosure of information
We use the information we collect for the purpose disclosed at the time of collection for external and internal usage. We will not use your personal information for any other purpose without first seeking your consent, unless authorized or required by law. Generally we will only use and disclose your personal information:
To establish and maintain your relationship as a customer of Tully Sugar Limited.
To provide the products and services you have requested from Tully Sugar Limited.
To administer and manage those products and services.
To answer your inquiry.
For Newsletters by email, updates.
Regulators and government authorities (such as the Department of Agriculture) in order to comply
with our legal and regulatory obligations
Carry out our business functions and activities including the marketing and exporting of sugar
Arranging payment for goods and services (for instance, deducting levies from payments and
arranging to pay certain third parties, including but not limited to the cane growers’ organisations)
Monitoring production estimates and farm activity
Analysing and monitoring our services, products and customer needs with a view to improving those
service and products
Our related entities to facilitate our and their internal business processes
Organisations including but not limited to Cane Growers organisations ( at a national and local level),
Sugar Research Australia and Tully Cane Productivity Services Board
Our related entities and other organisations with whom we have affiliations so that those
organisations may provide you with information about service and various promotions
We may also collect information about you from publicly available sources, or in some cases, from third parties, for example, Queensland Cane Growers Organisation Ltd, Australian Sugar Milling Council Pty Limited.
Cookies and web-tracking tools
You are able to set your browser to refuse or delete cookies. Please refer to your browser’s help information. We note that disabling cookies may limit some features of the Website.
CCTV cameras on Canerail Assets and at the Tully Sugar Site
Any personal information captured on closed circuit television may be used for security purposes and is handled in accordance with the Information Privacy Act. If required, circumstances under which recordings may be shown to a third party include:
unlawful acts (police)
occupational health and safety complaints (e.g. Workplace Health & Safety Officer and TSL’ Insurer)
when otherwise authorised or required by law (e.g. court order).
Global Positioning Systems – GPS Location
Tully Sugar monitors and records the location of 3rd Party Cane Harvesters, Mill Mud trucks and Tully Sugar rail machinery, mobile plant and fleet by way of Global positioning systems – (GPS location) tracking for the purposes of Workplace Health and Safety and day to day operations
We store your personal information in different ways, including in paper and in electronic form. The security of your personal information is important to use. We take reasonable measures to ensure that your personal information is stored safely to protect it from misuse, loss unauthorised access, interference, modification or disclosure, including electronic and physical security measures.
Notifiable Data Breach Scheme
The Notifiable Data Breach scheme was introduced in February 2018, which requires companies to notify any individuals whose personal information is involved in an ‘eligible data’ breach. An ‘eligible data breach’, which triggers notification obligations, is a data breach that is likely to result in serious harm to any of the individuals to whom the information relates.
In addition to the individual notification obligations, any eligible data breaches are also required to be reported to the Australian Information Commissioner.
This version of this Privacy Statement was approved in February 2022.