Effective 1 March 2025. Last reviewed 11 October 2026. This policy applies to the Sigma Completions website, the Sigma Completions platform and every service we provide.
Sigma Completions ("Sigma", "we", "us", "our") provides a completions, certification and handover platform to organisations delivering capital projects. We take the privacy of every individual whose information we handle seriously. This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you may access and correct it or make a complaint.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"). Where we provide services to clients in other jurisdictions, we also take reasonable steps to meet the privacy laws that apply there. By using our website or platform, or by otherwise providing personal information to us, you acknowledge that you have read and understood this policy.
We collect only the personal information reasonably necessary for one or more of our functions or activities. We collect it lawfully and fairly, and directly from the individual wherever it is reasonable and practicable to do so. We hold it securely, use it only for the purposes for which it was collected or for related purposes a reasonable person would expect, and we do not sell it to anyone.
The kinds of personal information we collect depend on how you interact with us:
We collect personal information when you complete a form on our website, email or telephone us, register your interest in working with us, are set up as an End User by a Client, sign in to or use the platform, or otherwise interact with us. Where a Client provides us with the personal information of its End Users, the Client is responsible for ensuring that it is entitled to do so and that those individuals are aware of this policy.
If you choose not to provide personal information we request, we may be unable to respond to your enquiry, provide you with access to the platform or provide our services to you or to the Client who nominated you.
We use personal information for the purposes for which it was collected and for related purposes that you would reasonably expect, including to:
Client Data is owned and controlled by the Client. In handling Client Data, including the personal information of End Users contained within it, we act on the instructions of the Client under our services agreement. The Client determines who is given access to a project, what records are kept, how long they are retained and whether they are exported or shared. Requests by End Users to access, correct or delete personal information held within Client Data should be made to the relevant Client in the first instance; we will assist the Client to respond.
Because the platform exists to provide a complete and permanent record of how a project was completed and handed over, project records, including the names of the individuals who created and signed them, form part of the audit trail and are retained for the period required by the Client and by law. The platform is designed so that these records cannot be altered or deleted other than through controlled processes.
We do not sell, rent or trade personal information. We may disclose personal information to:
The platform and Client Data are hosted on Microsoft Azure in Australia. Some of our service providers, including providers of email delivery, document processing and artificial-intelligence assistance, may process limited personal information in other countries, including the United States and the European Union, in order to deliver their services to us. Before disclosing personal information overseas we take reasonable steps to ensure that the recipient is bound by obligations that protect the information in a manner substantially similar to the APPs. By providing personal information to us, you consent to such disclosures on that basis.
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Our measures include encryption of data in transit, strong authentication for every account, role-based and project-based access controls, logical separation of each Client's project data, security monitoring, regular backups and restricted administrative access. No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security. You are responsible for keeping your sign-in details confidential and for notifying us promptly of any suspected unauthorised use of your account.
If we become aware of a data breach that is likely to result in serious harm to any individual, we will act in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner where required.
We send marketing communications only where you have consented or where we are otherwise permitted by law. Every marketing message includes a simple way to opt out, and you may opt out at any time by contacting us. We do not provide your personal information to third parties for their marketing purposes.
Our website and platform use cookies and similar technologies that are necessary to keep you signed in, remember your preferences and protect against misuse. We may use privacy-respecting analytics to understand how our website is used in aggregate. You may configure your browser to refuse cookies, but parts of the platform will not function without them.
Our website and platform are intended for use by professionals in the course of their work. We do not knowingly collect personal information from anyone under 18 years of age.
You may make a general enquiry without identifying yourself. However, because the platform exists to record who did what on a project, End Users cannot use the platform anonymously or under a pseudonym.
You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period, generally 30 days. We may need to verify your identity before acting on a request, and in limited circumstances permitted by law we may decline a request and will tell you why. Where the information forms part of a Client's audit trail, we may be unable to alter it and will instead note your request against the record.
We retain personal information for as long as it is needed for the purposes described in this policy, to meet our contractual obligations to Clients and to comply with law. Client Data, including the audit trail, is retained for the term of the Client's agreement and any further period agreed with the Client or required by law, after which it is returned to the Client or securely destroyed or de-identified. Enquiry and careers information is retained for a reasonable period and then securely destroyed.
Our website and platform may contain links to, or integrate with, websites and services operated by others. We are not responsible for the privacy practices or content of those websites and services, and this policy does not apply to them. We encourage you to read their privacy policies.
If you believe we have breached the APPs or mishandled your personal information, please contact our Privacy Officer using the details below. We will acknowledge your complaint promptly, investigate it and respond in writing, generally within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
We may update this policy from time to time to reflect changes in our practices, technology or the law. The current version will always be published on this page with its effective date. Your continued use of our website or platform after a change takes effect constitutes acceptance of the updated policy.
Privacy Officer, Sigma Completions
Email: privacy@sigmaccms.com.au
Web: sigmaccms.com.au
This policy is governed by the laws of Western Australia and the Commonwealth of Australia. It does not create any contractual or other legal rights in or on behalf of any person, and it does not limit any rights you have under applicable law. If any part of this policy is found to be invalid, the remainder continues in effect. Nothing in this policy limits the terms of any services agreement between us and a Client, which prevails to the extent of any inconsistency in relation to Client Data.
Photographs on this website are used under licence. Images of the Greenbushes and Sunrise Dam mines are by Calistemon via Wikimedia Commons (CC BY-SA 4.0). Other photographs are from Unsplash and Pixabay under their respective free licences.