Customer Privacy Notice Template for Australia

Create a bespoke document in minutes,  or upload and review your own.

4.6 / 5
4.8 / 5

Let's create your Customer Privacy Notice

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get your first 2 documents free

Your data doesn't train Genie's AI

You keep IP ownership of your information

Key Requirements PROMPT example:

Customer Privacy Notice

"I need a Customer Privacy Notice for my Australian e-commerce business that sells health and wellness products online, with specific sections addressing health information handling and international data transfers to our US-based cloud service providers."

Document background
A Customer Privacy Notice is a mandatory document for organizations operating in Australia that collect, use, or handle personal information. This document must comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which set out strict requirements for privacy practices and transparency. The notice should be provided to customers at or before the time personal information is collected, or as soon as practicable afterward. It must detail the types of information collected, purposes of collection, disclosure practices, overseas transfers, security measures, and individual privacy rights. The document serves as a key tool for privacy compliance and risk management, helping organizations meet their legal obligations while building trust with customers through transparent communication about data handling practices.
Suggested Sections

1. About this Privacy Notice: Introduction explaining the scope and purpose of the privacy notice, and identifying the organization responsible for data handling

2. What Personal Information We Collect: Comprehensive list of personal information types collected, including direct and indirect collection methods

3. How We Collect Your Personal Information: Explanation of collection methods, including online, in-person, and third-party sources

4. Why We Collect Your Personal Information: Purposes for collection and use of personal information, including legal bases

5. How We Use Your Personal Information: Detailed explanation of uses and processing of personal information

6. How We Share Your Personal Information: Information about third-party sharing, including categories of recipients

7. How We Protect Your Personal Information: Security measures and data protection practices

8. Your Privacy Rights: Explanation of individual rights under privacy laws and how to exercise them

9. Cookies and Tracking Technologies: Information about online tracking and cookie usage

10. How to Contact Us: Contact details for privacy-related queries and complaints

11. Changes to This Privacy Notice: Information about how changes will be communicated and handled

Optional Sections

1. Overseas Data Transfers: Required if personal information is disclosed to overseas recipients

2. Credit Information Handling: Required if the organization handles credit information

3. Health Information: Required if the organization collects or handles health information

4. Children's Privacy: Required if services may be used by or data collected from children under 18

5. Direct Marketing: Required if personal information is used for direct marketing purposes

6. Government Related Identifiers: Required if the organization handles government IDs like tax file numbers

7. Consumer Data Right: Required if the organization is subject to Consumer Data Right obligations

Suggested Schedules

1. Cookie Policy: Detailed information about cookie types and usage

2. Collection Statement Templates: Standard collection notices for different contexts (online forms, telephone, in-person)

3. Third Party Recipients List: Detailed list of third-party service providers and data recipients

4. Specific Processing Activities: Detailed information about specific data processing activities that require additional explanation

Authors

Alex Denne

Head of Growth (Open Source Law) @ Genie AI | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents | Serial Founder & Legal AI Author

Relevant legal definitions
Clauses
Relevant Industries

Financial Services

Healthcare

Retail

Technology

Telecommunications

Professional Services

Education

Insurance

Real Estate

E-commerce

Government Services

Manufacturing

Hospitality

Transport and Logistics

Media and Entertainment

Relevant Teams

Legal

Compliance

Information Security

Risk Management

Marketing

Customer Service

Human Resources

Information Technology

Operations

Digital

Data Analytics

Privacy Office

Relevant Roles

Chief Privacy Officer

Data Protection Officer

Privacy Manager

Compliance Officer

Legal Counsel

Risk Manager

Information Security Manager

Chief Information Security Officer

Customer Experience Manager

Marketing Director

HR Director

IT Manager

Operations Manager

Chief Executive Officer

Chief Legal Officer

Digital Services Manager

Industries
Privacy Act 1988 (Cth): The primary federal law governing privacy in Australia, including the Australian Privacy Principles (APPs) which set out standards for collecting, using, disclosing and securing personal information
Australian Privacy Principles (APPs): 13 principles under the Privacy Act that regulate the handling of personal information by Australian government agencies and organizations
Spam Act 2003: Regulates commercial electronic messages, requiring consent and opt-out facilities for marketing communications
Do Not Call Register Act 2006: Governs telemarketing practices and maintains a register of numbers that telemarketers cannot contact
Notifiable Data Breaches (NDB) scheme: Requires organizations to notify individuals and the Privacy Commissioner about data breaches likely to result in serious harm
Consumer Data Right (CDR) legislation: Gives consumers greater control over their data, including the right to direct businesses to share their data with accredited third parties
Health Records and Information Privacy Act 2002 (NSW): State-specific legislation governing the handling of health information and health records
Privacy and Personal Information Protection Act 1998 (NSW): State-specific privacy legislation applying to NSW public sector agencies and handling of personal information
Online Privacy Bill (proposed amendments to Privacy Act): Proposed legislation introducing additional requirements for social media and online platforms regarding privacy policies and handling of personal information
Teams

Employer, Employee, Start Date, Job Title, Department, Location, Probationary Period, Notice Period, Salary, Overtime, Vacation Pay, Statutory Holidays, Benefits, Bonus, Expenses, Working Hours, Rest Breaks,  Leaves of Absence, Confidentiality, Intellectual Property, Non-Solicitation, Non-Competition, Code of Conduct, Termination,  Severance Pay, Governing Law, Entire Agreemen

Find the exact document you need

Personal Data Privacy Notice

An Australian privacy notice outlining an organization's personal data handling practices in compliance with the Privacy Act 1988 and APPs.

find out more

Notice Of Personal Data Processing

An Australian privacy notice detailing how an organization handles personal information in compliance with the Privacy Act 1988 and APPs.

find out more

Privacy Information Notice

An Australian law-compliant document that informs individuals about how their personal information is collected, used, disclosed, and protected under the Privacy Act 1988 and APPs.

find out more

Customer Privacy Notice

An Australian privacy compliance document outlining how an organization handles personal information in accordance with the Privacy Act 1988 and APPs.

find out more

Privacy Disclosure Notice

An Australian-compliant legal document outlining an organization's personal information handling practices under the Privacy Act 1988 and APPs.

find out more

Data Processor Privacy Notice

An Australian-compliant privacy notice for data processors, outlining personal information handling practices under the Privacy Act 1988 and APPs.

find out more

Client Privacy Notice

An Australian-compliant privacy notice explaining how an organization handles client personal information under the Privacy Act 1988 and APPs.

find out more

Personal Data Notice

An Australian law-compliant Personal Data Notice outlining how organizations handle personal information under the Privacy Act 1988 and APPs.

find out more

Data Collection Notice

An Australian legal document that notifies individuals about how their personal information will be collected, used, and managed in compliance with the Privacy Act 1988.

find out more

Data Privacy Notice And Consent Form

An Australian-compliant document that outlines an organization's data handling practices and obtains consent for processing personal information under Australian privacy laws.

find out more

Company Privacy Notice

An Australian Company Privacy Notice detailing personal information handling practices in compliance with the Privacy Act 1988 and Australian Privacy Principles.

find out more

Data Processing Notice

An Australian-compliant notice detailing how an organization handles personal information under the Privacy Act 1988 and APPs.

find out more

Privacy Policy Notice

An Australian-compliant Privacy Policy Notice outlining an organization's personal information handling practices under the Privacy Act 1988 and APPs.

find out more

Download our whitepaper on the future of AI in Legal

By providing your email address you are consenting to our Privacy Notice.
Thank you for downloading our whitepaper. This should arrive in your inbox shortly. In the meantime, why not jump straight to a section that interests you here: https://www.genieai.co/our-research
Oops! Something went wrong while submitting the form.

Genie’s Security Promise

Genie is the safest place to draft. Here’s how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; Genie’s AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

Our bank-grade security infrastructure undergoes regular external audits

We are ISO27001 certified, so your data is secure

Organizational security

You retain IP ownership of your documents

You have full control over your data and who gets to see it

Innovation in privacy:

Genie partnered with the Computational Privacy Department at Imperial College London

Together, we ran a £1 million research project on privacy and anonymity in legal contracts

Want to know more?

Visit our Trust Centre for more details and real-time security updates.