Privacy Policy & Drone Imagery Notice
ALL ALTITUDES | PROFESSIONAL DRONE SERVICES — AN APPENZELLER GROUP BUSINESS
AA-LEG-POL-001 | Version 1.0 | Effective 30 August 2026
1. Purpose and scope
This Privacy Policy explains how Appenzeller Group Pty Ltd (ACN 676 224 990), trading as All Altitudes handles personal information in connection with All Altitudes websites, enquiries, bookings, quotations, contracted drone services, imagery, mapping outputs, customer relationships and marketing. It applies to https://www.allaltitudesdrones.com.au/ and related communications.
All Altitudes will manage personal information in accordance with applicable Australian privacy law. Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply, this policy is intended to support transparent handling under those requirements.
2. Information we may collect
- Identity and contact details, including name, organisation, role, email, telephone number and billing details.
- Enquiry, booking, quotation, contract, service-location, access, safety, operational and support information.
- Payment, billing and transaction information relevant to an enquiry or service. Do not send full card details, passwords or identity documents through a general enquiry form.
- Website and device information, such as IP address, browser, cookie identifiers, referring pages, session activity and consent choices.
- Aerial photographs, video, sensor records, mapping data and associated metadata captured in the course of an authorised service. These materials may incidentally contain identifiable people, vehicles, properties or activities.
- Feedback, complaints, correspondence and records needed to respond to regulatory, safety or legal matters.
3. How information is collected
We may collect information directly from you, from an authorised representative, through website forms and booking tools, during site assessments and service delivery, from contracted technology providers, or from publicly available and lawfully accessible sources. Where reasonably practicable, we collect personal information directly from the individual or with appropriate notice. You may make a general enquiry anonymously or using a pseudonym where lawful and practicable. Without information reasonably needed to identify a customer, assess a site or deliver a service, we may be unable to proceed. Sensitive information will only be requested where reasonably necessary and with consent or another lawful basis.
4. Purposes of handling
- Respond to enquiries; assess feasibility; prepare quotations; schedule and deliver services; manage customer relationships and accounts.
- Plan safe and lawful operations, including site access, risk assessment, permissions, flight approvals and incident response.
- Create, quality-check, secure, deliver and archive contracted outputs.
- Operate, secure, measure and improve the website, booking flow, systems and services.
- Meet legal, regulatory, insurance, accounting and record-keeping obligations; establish, exercise or defend legal claims.
- Send service communications and, only where permitted, marketing communications with a functioning unsubscribe option.
5. Drone imagery and sensor data
Operational capture is limited to the approved scope and subject to safety, access and aviation constraints. Customers must identify sensitive locations, confidentiality restrictions and site rules before capture. All Altitudes will take reasonable steps to minimise unnecessary capture and access, but cannot guarantee that incidental persons or property will never appear in raw material.
Customer-commissioned imagery and project data will not be used for unrelated publicity, model training or portfolio publication without a separate lawful authority. A project contract does not override an individual's non-excludable privacy rights. De-identification, cropping, access control or deletion may be used where appropriate and lawful.
6. Disclosure and service providers
Information may be disclosed to authorised personnel; pilots, specialists and subcontractors; cloud, website, booking, communications, accounting and storage providers; professional advisers and insurers; regulators, emergency services or law-enforcement bodies where required or authorised; and other parties with consent or as permitted by law. Providers are given only information reasonably needed for their function and should be subject to suitable confidentiality, security and use restrictions.
7. Overseas access and storage
The website and booking infrastructure use Wix. Wix identifies data-centre locations in the United States and Ireland, and processing by its Israeli company and other group companies or providers worldwide. Wix's site-visitor guidance also identifies Israel, South Korea and Taiwan as possible storage locations. These are possible provider locations, not a representation that every visitor's data is stored in every country. Other project-specific providers and likely overseas recipients must be identified in the collection notice or project agreement where applicable. Where APP 8 applies, All Altitudes must take the reasonable steps it requires before an overseas disclosure; publishing this policy is not itself consent to waive those safeguards.
8. Security, retention and deletion
All Altitudes uses risk-based administrative, physical and technical safeguards appropriate to the information and service. Controls may include role-based access, strong authentication, secure transfer, vendor review, backups, incident handling and secure disposal. No transmission or storage method can be guaranteed completely secure.
Information is retained only for as long as reasonably required for service delivery, legal, regulatory, insurance, dispute, safety, accounting and legitimate business purposes. When no longer required and no lawful retention basis applies, reasonable steps will be taken to destroy or de-identify it. Project-specific retention or deletion commitments must be recorded in the quotation or contract.
9. Access, correction and complaints
Requests for access to or correction of personal information, privacy questions and complaints may be sent to info@appenzellergrp.com.au | 1800 757 988. Identity may be verified before access is provided. We aim to acknowledge a privacy complaint within 5 business days and provide a substantive response within 30 calendar days, or explain any necessary extension.
If a complainant is not satisfied, they may be able to contact the Office of the Australian Information Commissioner. Nothing in this policy limits a right available under applicable law.
10. Data incidents
Suspected privacy or security incidents should be reported promptly. Where the Notifiable Data Breaches scheme applies, All Altitudes will assess eligible data breaches and notify affected individuals and the OAIC when legally required.
11. Cookies, children and changes
Website cookies and tracking technologies are addressed in Cookie & Tracking Technologies Notice (/cookie-policy). Services are generally directed to adults and organisations. A parent or guardian should make enquiries or provide information for a person under 18. Material changes will be published with an updated version or effective date.
Privacy Policy & Drone Imagery Notice
ALL ALTITUDES | PROFESSIONAL DRONE SERVICES — AN APPENZELLER GROUP BUSINESS
AA-LEG-POL-001 | Version 1.0 | Effective 30 August 2026
1. Purpose and scope
This Privacy Policy explains how Appenzeller Group Pty Ltd (ACN 676 224 990), trading as All Altitudes handles personal information in connection with All Altitudes websites, enquiries, bookings, quotations, contracted drone services, imagery, mapping outputs, customer relationships and marketing. It applies to https://www.allaltitudesdrones.com.au/ and related communications.
All Altitudes will manage personal information in accordance with applicable Australian privacy law. Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply, this policy is intended to support transparent handling under those requirements.
2. Information we may collect
- Identity and contact details, including name, organisation, role, email, telephone number and billing details.
- Enquiry, booking, quotation, contract, service-location, access, safety, operational and support information.
- Payment, billing and transaction information relevant to an enquiry or service. Do not send full card details, passwords or identity documents through a general enquiry form.
- Website and device information, such as IP address, browser, cookie identifiers, referring pages, session activity and consent choices.
- Aerial photographs, video, sensor records, mapping data and associated metadata captured in the course of an authorised service. These materials may incidentally contain identifiable people, vehicles, properties or activities.
- Feedback, complaints, correspondence and records needed to respond to regulatory, safety or legal matters.
3. How information is collected
We may collect information directly from you, from an authorised representative, through website forms and booking tools, during site assessments and service delivery, from contracted technology providers, or from publicly available and lawfully accessible sources. Where reasonably practicable, we collect personal information directly from the individual or with appropriate notice. You may make a general enquiry anonymously or using a pseudonym where lawful and practicable. Without information reasonably needed to identify a customer, assess a site or deliver a service, we may be unable to proceed. Sensitive information will only be requested where reasonably necessary and with consent or another lawful basis.
4. Purposes of handling
- Respond to enquiries; assess feasibility; prepare quotations; schedule and deliver services; manage customer relationships and accounts.
- Plan safe and lawful operations, including site access, risk assessment, permissions, flight approvals and incident response.
- Create, quality-check, secure, deliver and archive contracted outputs.
- Operate, secure, measure and improve the website, booking flow, systems and services.
- Meet legal, regulatory, insurance, accounting and record-keeping obligations; establish, exercise or defend legal claims.
- Send service communications and, only where permitted, marketing communications with a functioning unsubscribe option.
5. Drone imagery and sensor data
Operational capture is limited to the approved scope and subject to safety, access and aviation constraints. Customers must identify sensitive locations, confidentiality restrictions and site rules before capture. All Altitudes will take reasonable steps to minimise unnecessary capture and access, but cannot guarantee that incidental persons or property will never appear in raw material.
Customer-commissioned imagery and project data will not be used for unrelated publicity, model training or portfolio publication without a separate lawful authority. A project contract does not override an individual's non-excludable privacy rights. De-identification, cropping, access control or deletion may be used where appropriate and lawful.
6. Disclosure and service providers
Information may be disclosed to authorised personnel; pilots, specialists and subcontractors; cloud, website, booking, communications, accounting and storage providers; professional advisers and insurers; regulators, emergency services or law-enforcement bodies where required or authorised; and other parties with consent or as permitted by law. Providers are given only information reasonably needed for their function and should be subject to suitable confidentiality, security and use restrictions.
7. Overseas access and storage
The website and booking infrastructure use Wix. Wix identifies data-centre locations in the United States and Ireland, and processing by its Israeli company and other group companies or providers worldwide. Wix's site-visitor guidance also identifies Israel, South Korea and Taiwan as possible storage locations. These are possible provider locations, not a representation that every visitor's data is stored in every country. Other project-specific providers and likely overseas recipients must be identified in the collection notice or project agreement where applicable. Where APP 8 applies, All Altitudes must take the reasonable steps it requires before an overseas disclosure; publishing this policy is not itself consent to waive those safeguards.
8. Security, retention and deletion
All Altitudes uses risk-based administrative, physical and technical safeguards appropriate to the information and service. Controls may include role-based access, strong authentication, secure transfer, vendor review, backups, incident handling and secure disposal. No transmission or storage method can be guaranteed completely secure.
Information is retained only for as long as reasonably required for service delivery, legal, regulatory, insurance, dispute, safety, accounting and legitimate business purposes. When no longer required and no lawful retention basis applies, reasonable steps will be taken to destroy or de-identify it. Project-specific retention or deletion commitments must be recorded in the quotation or contract.
9. Access, correction and complaints
Requests for access to or correction of personal information, privacy questions and complaints may be sent to info@appenzellergrp.com.au | 1800 757 988. Identity may be verified before access is provided. We aim to acknowledge a privacy complaint within 5 business days and provide a substantive response within 30 calendar days, or explain any necessary extension.
If a complainant is not satisfied, they may be able to contact the Office of the Australian Information Commissioner. Nothing in this policy limits a right available under applicable law.
10. Data incidents
Suspected privacy or security incidents should be reported promptly. Where the Notifiable Data Breaches scheme applies, All Altitudes will assess eligible data breaches and notify affected individuals and the OAIC when legally required.
11. Cookies, children and changes
Website cookies and tracking technologies are addressed in Cookie & Tracking Technologies Notice (/cookie-policy). Services are generally directed to adults and organisations. A parent or guardian should make enquiries or provide information for a person under 18. Material changes will be published with an updated version or effective date.