Privacy Policy

Last updated: 9 October 2026

1. About this Privacy Policy

East Coast Structural Engineering Consultant Pty Ltd, trading as ECSEC | East Coast Structural Engineering, ABN 40 702 108 307 (“ECSEC”, “we”, “us” or “our”), respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how ECSEC collects, holds, uses, discloses, protects and manages personal information obtained through:

  • the ECSEC website;

  • structural-engineering consultancy services;

  • project enquiries and quotations;

  • professional and business communications;

  • purchases and downloads of digital engineering products;

  • subscription and marketing communications; and

  • interactions with clients, prospective clients, consultants, contractors, suppliers and other parties.

Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to ECSEC, we will manage personal information in accordance with those requirements. ECSEC also seeks to apply appropriate privacy practices more generally.

2. Meaning of personal information

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Depending on how you interact with ECSEC, the personal information we collect may include:

  • your name;

  • your business or employer’s name;

  • your position or professional title;

  • your postal or business address;

  • your email address;

  • your telephone number;

  • your professional qualifications or registration details;

  • billing, transaction and purchase information;

  • project addresses and property information;

  • drawings, reports, specifications and project documents;

  • information included in project enquiries or requests for quotations;

  • correspondence and records of communications;

  • account, purchase, download and licence information;

  • marketing and communication preferences;

  • information provided through website forms;

  • technical information associated with your use of the website; and

  • other information you voluntarily provide to ECSEC.

ECSEC will endeavour to collect only the information reasonably necessary for its business activities and functions.

3. Information about other people

Project documents or communications provided to ECSEC may contain personal information about property owners, tenants, consultants, contractors, employees or other individuals.

If you provide ECSEC with personal information about another person, you should ensure that:

  • you are authorised to provide the information;

  • the information is relevant to the project or service;

  • the person is appropriately informed of the disclosure where required; and

  • the disclosure complies with applicable privacy and confidentiality obligations.

4. How we collect personal information

ECSEC may collect personal information directly from you when you:

  • visit or use our website;

  • submit an enquiry or contact form;

  • request a quotation or proposal;

  • engage ECSEC to provide professional services;

  • purchase or download a digital engineering product;

  • register for an account or mailing list;

  • communicate with us by telephone, email, website form or social media;

  • provide drawings, reports or other project documentation;

  • request technical or customer support;

  • submit a complaint, refund request or access request; or

  • otherwise interact with ECSEC.

We may also collect information from:

  • architects;

  • builders and contractors;

  • property developers;

  • project managers;

  • engineers and other consultants;

  • property owners and clients;

  • government authorities and public registers;

  • payment and e-commerce service providers;

  • website, analytics and technology providers;

  • professional advisers; and

  • other parties involved in a project or transaction.

Where lawful and practical, you may interact with ECSEC anonymously or by using a pseudonym. However, ECSEC may need accurate identifying and contact information before providing quotations, professional engineering services, digital-product licences, transaction support or project deliverables.

5. Information collected through the website

When you use the ECSEC website, certain technical information may be collected automatically by ECSEC or its website and technology providers.

This information may include:

  • your Internet Protocol address;

  • browser type and version;

  • device type and operating system;

  • referring website or search engine;

  • pages viewed;

  • time and date of access;

  • general geographic location derived from technical data;

  • website interactions;

  • download activity; and

  • technical error and performance information.

ECSEC may use this information to operate, secure, maintain and improve the website, understand website usage and identify technical or security issues.

6. Cookies and similar technologies

The ECSEC website may use cookies and similar technologies.

Cookies are small data files placed on a device when a website is accessed. Cookies may be used to:

  • enable essential website functions;

  • operate the shopping cart and checkout;

  • remember user preferences;

  • maintain website security;

  • prevent fraud or misuse;

  • analyse website traffic and performance;

  • understand interactions with pages and digital products; and

  • improve website content and user experience.

You may be able to control or disable cookies through your browser settings. Disabling cookies may prevent some parts of the website, shopping cart or checkout from operating correctly.

Where legally required, ECSEC will seek appropriate consent before using non-essential cookies or similar tracking technologies.

7. Why we collect and use personal information

ECSEC may collect, hold and use personal information to:

  • respond to enquiries;

  • assess potential projects;

  • prepare quotations, proposals and engagement documents;

  • provide structural-engineering and related professional services;

  • review drawings and project documentation;

  • communicate with clients and project participants;

  • coordinate with architects, builders, contractors and consultants;

  • issue reports, drawings, calculations and other deliverables;

  • manage construction support and site inspections;

  • process digital-product purchases and downloads;

  • administer product licences and authorised-user access;

  • provide customer and technical support;

  • process payments, invoices, refunds and transaction records;

  • maintain project, contractual, professional and business records;

  • manage insurance, risk and quality-assurance requirements;

  • improve our services, website and digital products;

  • investigate suspected misuse, fraud or cybersecurity incidents;

  • protect ECSEC’s rights and intellectual property;

  • send relevant business or marketing communications where permitted;

  • obtain professional, accounting, insurance or legal advice;

  • respond to complaints or disputes; and

  • comply with taxation, corporate, professional, insurance, legal and regulatory obligations.

We may also use information for a related purpose that you would reasonably expect or where otherwise authorised or required by law.

8. Professional engineering information

Information provided in connection with an engineering project may be retained as part of ECSEC’s professional project records.

Project records may include:

  • correspondence;

  • drawings and specifications;

  • calculations and models;

  • inspection records;

  • design assumptions;

  • reports;

  • design changes;

  • approvals;

  • construction information;

  • client instructions; and

  • information received from other consultants.

ECSEC may retain these records for professional, contractual, insurance, quality-assurance, regulatory, evidentiary and legal purposes.

9. Digital products and online purchases

When you purchase or download an ECSEC digital product, we may collect or receive:

  • your name and contact information;

  • business or organisation name;

  • billing information;

  • order number and transaction details;

  • product name and version;

  • purchase and download dates;

  • licence information;

  • records of support enquiries;

  • refund or complaint information; and

  • technical information reasonably required to provide access or support.

ECSEC may use this information to:

  • complete the transaction;

  • deliver the product;

  • manage and verify licences;

  • prevent unauthorised distribution;

  • provide product notices or support;

  • investigate download or access problems;

  • process eligible refunds or remedies; and

  • maintain taxation and transaction records.

10. Payments

Payments made through the website may be processed by third-party payment providers.

Where payment-card information is entered directly into a third-party payment system, ECSEC may not receive or retain complete payment-card details. ECSEC may receive transaction information such as:

  • the purchaser’s name;

  • billing contact details;

  • payment status;

  • transaction reference;

  • purchase amount; and

  • limited payment-method information.

Payment providers handle information under their own privacy policies, security arrangements and terms of service.

You should review the privacy information presented by the relevant payment provider during checkout.

11. Disclosure of personal information

ECSEC may disclose personal information where reasonably necessary to:

  • ECSEC’s employees and authorised representatives;

  • subcontractors and external engineering support providers;

  • architects, builders, contractors and project consultants;

  • clients and other authorised project participants;

  • accountants, lawyers, insurers and professional advisers;

  • payment and e-commerce service providers;

  • website hosting, cloud-storage and technology providers;

  • email, communications and document-management providers;

  • cybersecurity and fraud-prevention providers;

  • government, taxation, regulatory and law-enforcement authorities;

  • courts, tribunals and dispute-resolution bodies;

  • parties involved in a proposed business sale, restructure or transfer; and

  • other parties where you have consented or where disclosure is authorised or required by law.

ECSEC does not sell personal information.

Where practical, ECSEC will disclose only the information reasonably necessary for the relevant purpose.

12. Overseas storage and disclosure

Some website, cloud, payment, software, communications or technology service providers used by ECSEC may store or process information outside Australia.

The countries in which information is stored or accessed may depend on the service provider’s systems, data-centre arrangements and subcontractors.

Where the Australian Privacy Principles apply and personal information is disclosed to an overseas recipient, ECSEC will take reasonable steps required under applicable privacy law.

Because technology-provider arrangements may change, you may contact ECSEC at info@ecsec.com.au for further information about known overseas data-handling arrangements relevant to your personal information.

13. Direct marketing

ECSEC may use your contact information to send communications about:

  • structural-engineering services;

  • technical publications;

  • business updates;

  • new digital engineering products;

  • product revisions;

  • special offers; and

  • information that may be relevant to clients or engineering professionals.

ECSEC will send direct marketing communications only where permitted by law.

You may unsubscribe at any time by:

  • using the unsubscribe function included in the communication; or

  • emailing info@ecsec.com.au.

ECSEC may still send non-marketing communications reasonably necessary to administer an existing project, transaction, licence, product update or professional engagement.

14. Security of personal information

ECSEC takes reasonable administrative, technical and physical measures to protect personal information from:

  • misuse;

  • interference;

  • loss;

  • unauthorised access;

  • unauthorised modification; and

  • unauthorised disclosure.

These measures may include:

  • access controls;

  • password protection;

  • multifactor authentication;

  • endpoint security;

  • secure cloud-storage arrangements;

  • backup and recovery measures;

  • controlled access to project information;

  • cybersecurity monitoring;

  • software maintenance; and

  • secure disposal or deletion practices.

No internet transmission, website, email service or electronic storage system is completely secure. ECSEC cannot guarantee the absolute security of information transmitted electronically.

You should avoid sending highly sensitive information through unsecured email unless appropriate security arrangements have been agreed.

15. Data breaches

If ECSEC becomes aware of a suspected privacy or data-security incident, we may:

  • investigate the incident;

  • take steps to contain and remediate it;

  • assess the possible impact on affected individuals;

  • notify affected individuals where appropriate or legally required;

  • notify regulators where legally required; and

  • review relevant security practices and controls.

16. Retention of information

ECSEC retains personal information for as long as reasonably necessary to:

  • provide services;

  • complete transactions;

  • administer digital-product licences;

  • maintain project and professional records;

  • meet taxation and accounting requirements;

  • address insurance and risk-management requirements;

  • respond to disputes or claims; and

  • satisfy legal, contractual and regulatory obligations.

Different retention periods may apply to different categories of information.

When personal information is no longer reasonably required and ECSEC is not legally or professionally required to retain it, we will take reasonable steps to destroy or permanently de-identify it.

17. Access to personal information

You may request access to personal information ECSEC holds about you.

To make a request, email info@ecsec.com.au with:

  • your full name;

  • your contact information;

  • sufficient details to identify the relevant information; and

  • your preferred method of receiving a response.

ECSEC may ask you to verify your identity before releasing information.

In some circumstances, access may be refused or limited where permitted or required by law. If ECSEC refuses access, we will provide an explanation where legally required.

18. Correction of personal information

You may ask ECSEC to correct personal information that you believe is inaccurate, incomplete, irrelevant, misleading or out of date.

Correction requests should be sent to info@ecsec.com.au and should identify:

  • the information to be corrected;

  • why you believe it is incorrect; and

  • the correct or updated information.

ECSEC will take reasonable steps to review correction requests and update relevant information where appropriate.

19. Privacy enquiries and complaints

If you:

  • have a question about this Privacy Policy;

  • wish to access or correct your personal information;

  • are concerned about how ECSEC has handled your information; or

  • wish to make a privacy complaint,

please contact:

Privacy Contact
East Coast Structural Engineering Consultant Pty Ltd
ABN 40 702 108 307
Attention: Luay Al-loos
c/o Work Inc
6 Middlemiss Street
Lavender Bay NSW 2060
Australia

Email: info@ecsec.com.au

Please include sufficient details for ECSEC to understand and investigate your enquiry or complaint.

ECSEC will:

  1. acknowledge or review the matter within a reasonable period;

  2. investigate the circumstances;

  3. request additional information where reasonably necessary; and

  4. communicate the outcome or proposed response.

If you are not satisfied with ECSEC’s response and the Privacy Act applies, you may be entitled to contact the Office of the Australian Information Commissioner.

20. Third-party websites

The ECSEC website may contain links to third-party websites, platforms or services.

ECSEC does not control and is not responsible for the privacy, security, content or data-handling practices of third parties.

You should review the privacy policy of a third-party website or service before providing personal information.

21. Children’s information

The ECSEC website and professional services are intended for businesses, property owners, construction-industry participants, engineering professionals and adult users.

ECSEC does not knowingly seek to collect personal information directly from children through the website. If you believe a child has provided personal information without appropriate authorisation, contact info@ecsec.com.au.

22. Automated decision-making

ECSEC does not intend to use personal information through a computer program to make decisions that significantly affect an individual’s rights or interests without appropriate human involvement.

If ECSEC introduces a relevant automated decision-making process, this Privacy Policy will be updated as required to explain:

  • the types of personal information used;

  • the types of decisions made or substantially assisted by the system; and

  • how those decisions may affect individuals.

The OAIC states that additional privacy-policy disclosure requirements relating to qualifying automated decisions commence on 10 December 2026.

23. Changes to this Privacy Policy

ECSEC may update this Privacy Policy when:

  • its services or business practices change;

  • new digital products or website functions are introduced;

  • service providers’ change;

  • privacy or data-security practices change; or

  • applicable legal or regulatory requirements change.

The current version will be published on the ECSEC website and identified by the “Last updated” date.

Material changes may also be communicated through the website or another appropriate method.

24. Contact details

East Coast Structural Engineering Consultant Pty Ltd
Trading as ECSEC
ABN 40 702 108 307
Attention: Luay Al-loos
c/o Work Inc
6 Middlemiss Street
Lavender Bay NSW 2060
Australia

Email: info@ecsec.com.au
Website: ECSEC Structural Engineering