Privacy Statement update 

We have updated our Privacy Statement. These changes have been updated and are effective from 1 October 2025. We’ve clarified:

  • Personal information we collect and why;
  • Information on how we handle personal information, including retention and disclosures; and
  • Details and instruction on how to exercise your privacy rights and choices 

For more information, refer to the Privacy Statement or contact the QIC Privacy Team at [email protected].

-------

Privacy Statement

Your privacy is important to us. Our Privacy Statement (“Statement”) sets out our personal information collection and handling practices, and how you can exercise your rights and choices. 

About this Statement

This Statement relates to how QIC Limited (ABN 95 942 373 762) and its related subsidiaries, including QICP Pty Ltd (ABN 18 075 744 151) (“QIC”, “we”, “us”, or “our”), collect, use, disclose, transfer, store, or otherwise process personal information as an owner, co-owner, manager, or operator of one of our retail or commercial properties, through the delivery of our services, related websites, and mobile applications. Some of our properties can be found on our website through the following link: https://qicre.com/Properties and include our retail, commercial, and residential spaces, and car park facilities (“properties”). 

This Statement covers how we collect and handle personal information of visitors to our properties, users of our related digital services, websites or mobile applications, customers and prospective customers, suppliers and contractors, retailers, licensees, and their guarantors. “Personal information” refers to information or an opinion about an individual, where that individual is identified or reasonably identifiable, and as defined under applicable laws. For information on QIC’s collection and handling of personal information other than as described above, please refer to our corporate Privacy Statement at https://www.qic.com/Privacy-Statement.

Our Statement sets out the following information:

  1. Personal information we collect and why
    1. Property visitors and customers, including prospective customers
    2. Interacting with our digital services, websites, and mobile applications
    3. Suppliers and Contractors
    4. Retailers, Licensees, and Guarantors
  2. Further information on our personal information handling practices
    1. Disclosures
    2. Retention
    3. Protection
  3. Your rights and choices
  4. Contact Us
  5. Changes to this Statement

 

1. Personal information we collect and why

We may collect and handle personal information, including the kinds of personal information detailed in this section of the Statement, in the following ways:

  • Directly from the individual whose personal information it is about or relates to;

  • Through interactions with us, including visiting one of our properties, digital services, websites or mobile applications; or

  • From third party sources, such as suppliers who provide services on our behalf, or authorised representatives acting on an individual’s behalf.

We may collect and handle personal information we hold in the following circumstances:

  • With your consent;

  • for the purpose it was collected for, including as described in this Statement below; 

  • where it is required or authorised by law; or

  • where there is otherwise a lawful basis to do so under applicable laws.

We may collect and process personal information categorised as sensitive information under applicable laws, such as your health information. We will only collect this information where it is reasonably necessary, and we have your consent or where required or permitted by applicable laws.

If you refuse or are unable to provide us with necessary personal information we request from you, or we do not obtain your consent where we are required to rely upon it, we may not be able to proceed with entering or fulfilling some of our services or experiences. For instance, if you would like to enter a competition at a shopping centre, you may not be able to participate without providing your contact details, in case we need to contact you if you are selected as a winner.

 

a. Property visitors and customers, including prospective customers

Purposes Categories of personal information

To sign up or participate in events and programs

  • When you sign up or participate in an event or program, such as a holiday program, or store launch, we might collect personal information about you for registration and to participate in the event, including tailoring our event or program to meet your interests and preferences
  • We or our third party service provider may process your payment for paid events
  • We may use personal information to send confirmation of sign-up notifications and request feedback
  • We may also use personal information to help us understand the success of our events and event planning and opportunities to improve our products and services
  • We may also sign you up to our marketing communications where you have consented or otherwise where permitted by law 

Personal identifiers, such as your name, email address, phone number

Payment information, such as an encrypted credit or debit card

Other relevant information to run an event or program, such as your interests and preferences, and payment information for paid events or programs

To offer and manage public wi-fi services

  • When you enter one of our properties you may be able to connect to our public wi-fi services, using our infrastructure (including Bluetooth beacon networks) 
  • We may collect and handle personal information to provision access and manage wi-fi and network capability, and for security purposes 
  • We may collect and handle personal information to verify your age, as these services are only available to individuals over the age of 18 
  • We may also use cookies, including to remember your device next time you visit us for ease of log in 
  • We may also sign you up to our marketing communications where you have consented or otherwise where permitted by law 
  • We may use personal information to keep track of our demographics and use of these services (including data used) 

Personal identifiers, such as your name, date of birth, email address, postcode, gender, and other information provided by you

Information collected through your use of our public wi-fi services, such as your MAC Address, network ID, venue location, geolocation, including onsite movements, dwell time, data usage, and social media ID if you sign up using your Facebook or Google+ logins

To hire mobility equipment

  • We may collect and handle personal information to offer mobility equipment hire services, including to contact you in relation to an equipment hire such as if damage was caused to the equipment
  • We also ask to sight a valid identity card in some of our centres for security reasons, and to verify you are over the age of 18
  • When necessary, we may also use this information for incident, claims, and insurance management purposes

Personal identifiers, such as your name, date of birth, address

Other necessary details to provide this service

Visiting signed recorded areas

  • When you visit a signed recorded area we may process a visual or audio recording of you to create promotional materials. These areas will be clearly visible as signed recorded areas
  • We may also collect personal information from you to obtain your consent to use visual or audio recordings where you are featured and identifiable

Video, images, audio recordings

Other relevant information collected when necessary to obtain your consent to use visual or audio recordings featuring or identifying you, such as your name, contact details

For incident, claims, and insurance management purposes

  • We may collect and handle personal information to identify, investigate, and respond to an actual or suspected incident, including injury or property damage, and other matters relating to health or safety of an individual, public health, unlawful activity or misconduct
  • We may also use personal information for insurance claims and management, incident logging and auditing, risk management, and where otherwise required or permitted to handle in accordance with applicable laws, including with respect to health and safety 

Personal identifiers, such as name, contact details

Visual or audio recordings and images captured through surveillance technology

Other information about you and relating to the incident, including with your consent and where necessary your sensitive and health related information 

Registering for permanent parking or entering a paid or ticketless parking facility

We may collect and handle personal information to:
  • To facilitate and manage car park operations, including paid or ticketless parking facilities and communicating with car parkers, such as to assist you to locate your car 
  • Register parking with us, including permanent parking, employee, supplier, and contractor discounts, disability permit and seniors card registration 
  • To calculate and process your car park payment fee, including when your vehicle exits a ticketless parking facility 
  • For the security, health, and safety of those visiting and working at one of our properties, property safety, and public interests
  • To measure and analyse car park usage and dwell times 
  • For marketing communications with your consent or where permitted by law 
  • For incident, claims, and insurance management purposes

Third party car park managers who operate some of our car parks may collect and handle your personal information in accordance with their Privacy Statement or Policy. 

Personal identifiers, such as name, contact details 

Visual and audio recordings and images captured through surveillance technology, including a license plate number

Payment information, such as encrypted credit or debit card details

The name of your employer, disability permit or senior card details, as necessary

For surveillance-related purposes in or around our properties and facilities

“Surveillance technology” in this Statement refers to CCTV, body-worn cameras, license plate recognition systems, mobile phones, display screen cameras, and other visual or audio recording devices. We may collect and handle personal information captured through these technologies (such as videos, audio, or images) for the following purposes:

  • To facilitate and manage car park operations, including permanent parking, paid or ticketless parking facilities
  • For the security, health, and safety of those visiting and working at one of our properties or facilities, property safety, and public interests
  • For incident, claims, and insurance management purposes

Police or other law enforcement bodies, a Retailer or Licensee may also provide us with personal information as they determine is necessary, which we may use in connection with other personal information collected about that person, including through surveillance technology, for the security, health and safety of those visiting and working at one of our properties.

Retailers, licensees, and other third parties may operate their own surveillance technology and collect and handle personal information for their own purposes in accordance with their Privacy Policy.  

Visual and audio recordings and images captured through surveillance technology

Analysis of captured recordings, including in connection with other information we may hold about you

License plate number

Information provided by Police or other law enforcement bodies as they determine is necessary, such as a name, photo, or other details relating to their matter

To obtain aggregated insights about engagement with our digital screens in our Centres
 
We (or third parties acting on our behalf) may capture visual recordings and images of individuals from digital screen cameras, that are immediately de-identified, to obtain aggregated insights on viewer engagement with digital screens in our centres. Insights are based on physical and behavioural attributes – such as dwell time, responses, and demographic trends. These visual recordings and images are not used to identify, track or target individuals, and are not retained.  
 
Visual recordings and images

 

 

b. Interacting with our digital services, websites, and mobile applications

Purposes Categories of personal information

To sign up or participate in competitions, giveaways, and promotions (including in person)

  • We may collect and handle personal information to sign you up and enter you into a competition, giveaway or promotion 
  • We will also reach out to you if you have won or are successful. The competition, giveaway or promotion terms and conditions include further information 
  • We may also sign you up to our marketing communications where you have consented or otherwise where permitted by law 
  • We may also use information to understand how we can improve these offerings and experiences 

Personal identifiers, such as your name, email, address, postcode

Other information that may be requested to sign up and participate in a competition, giveaway, or promotion, such as your feedback or opinions

To send you direct marketing communications

When you consent to the use and disclosure of your personal information for marketing purposes or where otherwise permitted by law 

  • We’ll send you marketing communications to your designated contact address that may include updates on upcoming events, programs, competitions, giveaways, or promotions, and other marketing related material
  • We’ll use personal information collected to tailor our communications to you and target our advertising on third party platforms
  • We’ll use personal information collected and insights obtained through email opening tracking, to understand whether our marketing materials are being viewed, their impact, and whether we can improve our marketing communications 

Third party marketing platforms may collect and handle personal information in accordance with their Privacy Statement or Policy.  

Personal identifiers, such as your name, contact details

Interests, gender, and other information provided by you

Confirmation that you opened our marketing email

To issue and manage gift cards

  • We may collect and handle personal information for card fulfillment purposes, by helping you purchase, redeem, receive or manage your gift card 
  • To support compliance with obligations under applicable laws, including for fraud prevention and chargeback purposes 
  • Finance, accounting and operational purposes
  • We may also sign you up to our marketing communications where you have consented or otherwise where permitted by law 

Our third party gift card supplier may collect and handle personal information in accordance with their Privacy Statement or Policy. 

Personal identifiers, such as your name, email address, phone number, billing and delivery address

Payment information, such as an encrypted credit or debit card details 

Identity documentation, such as your driver’s license or passport details, as necessary. 

Our use of cookies and other tracking technologies when you visit or engage with our websites or mobile applications

When you visit our websites or applications, we may collect information through the use of cookies or other tracking technology (such as SDKs, tags, iframes, collectively “cookies”). We use cookies and any information collected, including anonymised information, for the following purposes:

  • Strictly necessary cookies. To make our websites and applications work as you’d expect, such as to route traffic and maintain anonymised user sessions
  • Functional cookies. To provide enhanced functionality, such as to embed and link third party services into our site, to remember your device next time you visit us or your form inputs, embed videos or other content, such as our interactive property maps
  • Performance cookies. To measure and understand the performance of our site and demographics, such as unique visitors and sessions tracking, to improve our digital services, websites, applications, and services, including in-centre experiences
  • Targeting and social media cookies. To personalise what we or our advertising partners advertise or campaign to you, and to enable social media content sharing buttons

Device information, such as a Device ID, device type, screen size, operating system, location

HTTP Header, such as IP Address, page locations

Anonymised website or mobile application events, such as pages visited, video views

Anonymised information from connected accounts, such as gender

When you communicate with us, including in person, by email, phone, post, or online, such as through a social media platform

  • We may collect and handle personal information to understand and respond to your inquiry, comment, feedback, or complaint, including to assist you (such as to identify a lost item, or to manage your sign up and participation in an event or program) 
  • We may collect and handle personal information for market research and survey purposes 
  • We may also use this information to understand how we can improve our products, services, websites, and applications 
  • When you engage with us on social media and other publicly available platforms we may use information you provide to: 
    • Review and respond offline to any feedback or queries received 
    • Understand your experiences with us to improve our services and experiences 
    • To enter you into competitions and giveaways as requested

Personal identifiers, such as your name, contact details

Other information shared by you, such as your comments, social media ID, and profile picture (if publicly available when engaging with us on social media platforms only) 

 

 

c. Suppliers and Contractors

Purposes Categories of personal information

In addition to personal information collected from individuals when you visit or interact with us in one of our properties or facilities as described above, we may collect personal information of suppliers and contractors, such as to provide operations, cleaning, and security services. We do so for the following purposes: 

  • Assess, enter into, and enforce our agreement with you, including obtaining referee contact details and feedback where required from referees
  • Manage our relationship with the supplier or contractor, including communications, payments and invoices
  • Register your visits or work at our properties 
  • Complete necessary training and onboarding practices, including health and safety checks and compliance processes 
  • For incident, claims, and insurance management purposes

Personal identifiers, such as your name, date of birth

Business contact details, such as an email or phone number

Information about you obtained from a referee

Payment information

Licenses applicable to the role, as required

 

 

d. Retailers, Licensees, and Guarantors

Purposes Categories of personal information

In addition to personal information collected from individuals when you visit or interact with us in one of our shopping centres precincts, car park facilities or our other properties as described above, we may use personal information of prospective, current, and former retailers, licensees, directors and guarantors, across our retail and commercial properties, to: 

  • Assess, enter into and enforce our retail lease agreement with you, including performing business and guarantor verification checks as required, and debt collection 
  • To offer our services, such as through our Tenants Portal 
  • Manage our relationship with the retailer or licensee, including communications, payments, and invoices
  • To contact you or your nominated emergency contact in the event of an incident or emergency 
  • Manage and operate the centres in which you lease or license space from us, including financial management, and for incident, claims, and insurance management purposes

Retailers and Licensees may collect and handle personal information in accordance with their Privacy Statement or Policy. 

Personal identifiers, such as your name, date of birth

Business contact details such as an email or phone number

After hours emergency contact/s

Payment information

Identity documentation, such as a driver’s license or passport, as necessary. 

We may also collect and handle business information such as an ABN/ACN, registered company and billing address, information about your assets and liabilities, and other details on the ASIC business register

 

2. Further information on our personal information handling practices

  1. Disclosures

We may disclose personal information we hold in the following circumstances:

  • With your consent;
  • for the purpose it was collected for, including as described in this Statement above;
  • where it is required or authorised by law; or
  • where there is otherwise a lawful basis to do so under applicable laws.

To the extent permitted by law, we may disclose personal information to the following third parties:

  • our related entities, including those outside of Australia;
  • our agents and contractors and other trusted partners that we engage from time to time;
  • our insurers and insurance brokers;
  • our joint venture and commercial partners;
  • third party suppliers and service providers, including managers and operators in connection with our services, websites, mobile applications and/or our business
  • our professional advisors including our insurers, lawyers, and accountants;
  • law enforcement bodies, government agencies or bodies, regulatory authorities, courts or tribunals, including but not limited to: responding to a lawful request for information relating to their enquiries and/or investigations, such as suspected or actual unlawful activity or misconduct; a subpoena or court order; for the establishment, exercise or defence of a legal or equitable claim; or as otherwise permitted by law;
  • companies that we propose or plan to merge with, be acquired by, or who may invest with us, including to enable the assessment or completion of the relevant merger, restructuring, financing, acquisition, divestiture, dissolution, or other corporate change or transfer; 
  • to a subsequent owner, co-owner, manager, or operator of one of our retail or commercial properties to enable them to continue to own, operate, manage or market the property after the change of ownership, operator or manager.

In certain circumstances, we may disclose your personal information to overseas recipients and take appropriate steps to ensure their compliance with applicable privacy legislation. The countries to which we may transfer information are the United States of America, the United Kingdom, Ireland, Denmark, Sweden, Finland, and Singapore. QIC and its related entities are bound by an Intra-Group Personal Data Sharing Agreement.

  1. Retention

We take appropriate steps to securely destroy or de-identify personal information when we no longer require it and there is no longer a lawful basis to retain it. We may retain your personal information for a period for the purposes that we initially collected it for, as described in this Statement, as required by or under an applicable law, court or tribunal order, to manage and enforce an agreement with you, to manage legal claims or complaints, and as otherwise permitted under applicable laws.

  1. Protection

We take appropriate steps to protect your personal information with appropriate technical and organisational measures, including provisioning access to personal information for legitimate business purposes and on a need-to-know basis, and taking necessary steps to detect and respond to suspected or actual breaches of personal information.

 

3. Your rights and choices 

  1. Access to or correction of your personal information

You, or an authorised representative, have the right to request:

  • access to a copy of your personal information we hold about you; or
  • the correction of personal information we hold about you, and notify any relevant third parties of this correction, unless it is impracticable or unlawful to do so.

We may ask you to put this request in writing and provide necessary identification information to verify you or your authorised representative. We will then endeavour to respond to your request within a reasonable period. If we are unable to fulfil one of these requests, we will share with you our reasons and the mechanisms available to make a complaint. 

We may be unable to correct your personal information, having regard to the purpose for which it is held, and where we believe it is accurate, up to date, complete, relevant, and not misleading. You may ask us to keep an associated statement that the information is inaccurate, out of date, incomplete, irrelevant or misleading. 

  1. Manage your marketing communication preferences

We may send you personalised email or SMS marketing communications when you have agreed to receive such communications or where otherwise permitted by law. If you change your mind or want to manage your marketing preferences, you can do so by:

  • Following the instructions on a marketing communication received, such as clicking an “unsubscribe” button at the footer of the communication; or
  • Contacting us for assistance, using the contact details in Contact Us below.

We may use cookies on our websites or mobile applications to personalise what we or our advertising partners advertise to you, and to enable social media content sharing buttons. You can disable these types of cookies via your browser settings. However, disabling some cookies may result in loss of functionality and services we offer on our websites and mobile applications. You may opt out of interest based advertising cookies on your device by visiting https://youradchoices.com.

  1. Make a privacy complaint

If you have any questions, comments or complaints (“matter”) about our personal information collection and handling practices or compliance with applicable privacy laws, please get in touch through the contact details in Contact Us below. We may ask you to put your matter in writing and provide necessary identification information to verify you or your authorised representative. We will then endeavour to respond to your matter within a reasonable period. 

If you are unsatisfied with the outcome of your matter with us, you can contact us to discuss your concerns, or you may contact the Office of the Australian Information Commissioner. You can visit their website (https://www.oaic.gov.au) to find their contact details or further information relating to Australian privacy legislation.

 

4. Contact Us

If you have any questions or comments regarding this Statement, or would like to exercise your rights and choices, you can contact the QIC Privacy Team by emailing [email protected]. You may alternatively contact a property Centre Manager through the relevant property website contact form.  

 

5. Changes to this Statement

This Statement was last updated and came into effect on 1 October 2025. We will take reasonable steps to notify individuals covered by this Statement of material changes through available communication channels. We also recommend that you visit the Statement published online for the most recent version.