Privacy Policy

1. About This Policy

This policy explains how Low Carbon Materials Hub Pty Ltd (ABN 32 680 697 287) ("LCMH", "we", "us") collects, holds, uses and discloses personal information. LCMH is based at 329, 98-100 Elizabeth Street, Melbourne VIC 3000, Australia.

It covers our website (lcmhub.com), the LCMH platform, and our sales, support, marketing and recruitment activities. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

LCMH is a business-to-business platform. Most personal information we hold is business contact information about people who work for our customers, prospects and partners.

2. Personal Information We Collect

We collect only what we need to run our website, platform and business.

Calls and meetings. With notice to participants, we may record and transcribe sales and customer calls and meetings, and log calls in our CRM. Tell us at the start if you would prefer not to be recorded.

Sensitive information. We do not collect sensitive information about customers or website visitors. The one exception is pre-employment screening: with the candidate's consent, people offered a role may have a police check, identity check and right-to-work check through a screening provider. We do not otherwise collect health, racial or ethnic origin, religious or similar information. Please do not include it in platform content or messages to us.

You can browse our public website without telling us who you are. To use the platform, we need to identify you.

3. How We Collect and Hold It

We collect most personal information directly from you: when you sign up, use the platform, contact us, meet with us or apply for a role. We collect website and usage data automatically through our monitoring tools and cookies (Section 8).

If you sign in with Google, our authentication provider receives your name, email address and profile picture from Google. Sometimes we receive business contact details from a colleague who invites you to the platform, from a referral, or from public professional sources such as LinkedIn.

We hold personal information electronically in approved cloud systems. Our platform is hosted in Australia (Sydney). Data is encrypted in transit and at rest, and access is limited to staff who need it for their role.

4. Why We Use It

We use personal information to:

• provide, secure and support the platform, including creating and managing accounts
• respond to enquiries, run sales conversations and manage customer relationships
• invoice customers and meet our contractual, tax and legal obligations
• understand how the website and platform are used, so we can fix problems and improve them
• detect and prevent fraud, abuse and security incidents
• assess job and internship applications
• send product updates and, where permitted, marketing about LCMH

We only use personal information for another purpose if you would reasonably expect it, you consent, or the law allows it.

Marketing. Every marketing email includes an unsubscribe link, or you can email us to opt out. We will still send essential service messages, such as security notices.

5. Customer Platform Data

When customers upload project, materials or other content to the platform, LCMH handles it on the customer's behalf. We use it only to provide the service, under the customer agreement and our Data Processing Addendum.

The customer organisation decides what is uploaded and who can see it. If you have a question about personal information in a customer's workspace, contact that organisation first; we will help them respond.

We do not sell customer platform data, and we do not use it to train AI models.

6. Who We Share It With

We do not sell personal information. We share it with service providers that help us run LCMH, under written terms that limit their use of it to providing their service.

These include providers of:

• cloud hosting, databases and platform infrastructure
• sign-in and authentication
• AI services that power platform features
• email, document storage and team collaboration
• CRM, call and meeting recording, and email delivery
• online forms, recruitment and pre-employment screening
• accounting, banking, payroll and contractor management
• security and compliance monitoring

Customers can request our current list of subprocessors at hello@lcmhub.com.

We may also disclose personal information to our professional advisers (lawyers, accountants and auditors), to a buyer or investor in a business transfer under confidentiality terms, or where the law requires or authorises it.

7. Overseas Disclosure

Our platform is hosted in Australia, but some of our service providers store or process personal information overseas, mainly in the United States. We only use providers that commit by contract to protect personal information.

8. Cookies and Analytics

We use essential cookies to keep you signed in and keep the platform secure. These cannot be turned off without breaking the service.

We use Datadog to understand how our website and platform are used and how they perform. It records technical data such as page load times, errors, browser and device type, IP address and approximate location, and how pages are used. We use this to improve the product and fix problems, not to profile individuals. We do not use advertising or cross-site tracking cookies, and we do not sell or share data for targeted advertising.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop the platform from working.

9. Automated Decisions

LCMH does not use computer programs to make, or substantially help make, decisions that could significantly affect an individual's rights or interests.

The AI features in our platform analyse construction materials and carbon data, not people. Hiring decisions are made by people, and we do not use automated tools to screen or score applicants. If this changes, we will update this policy before we start.

10. How We Protect It

We run a security program aligned with SOC 2. Key protections include:

• encryption in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent)
• multi-factor authentication and single sign-on wherever our systems support them
• access limited to named roles, removed promptly when someone leaves
• encrypted laptops with regular security checks, and a company password manager
• vendor security reviews, independent penetration testing and continuous compliance monitoring

If a data breach is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

11. How Long We Keep It

We keep personal information only as long as we need it for the purposes in this policy, or as the law requires (for example, financial records for tax purposes). Then we delete or de-identify it.

We confirm deletion in writing, unless the law requires us to keep the information. We review what we hold once a year.

12. Accessing, Correcting or Deleting Your Information

You can ask to see the personal information we hold about you, correct it, or delete it. Email hello@lcmhub.com with your request.

1. We acknowledge your request within 5 business days.
2. We verify your identity, using details we already hold where possible.
3. We respond within 30 days. For deletion, we complete it within 30 days of verifying the request.

There is no charge. If we cannot do what you ask (for example, because the law requires us to keep the information), we will explain why in writing and tell you how to complain.

13. Making a Complaint

If you think we have mishandled your personal information or breached the APPs, please tell us first so we can fix it.

1. Contact us at hello@lcmhub.com, with "Privacy complaint" in the subject line. Tell us what happened and what outcome you want.
2. We acknowledge your complaint within 5 business days and name the person handling it. Our Chief Operating Officer is responsible for privacy complaints.
3. We investigate and give you a written response within 30 days, explaining what we found and any steps we will take.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).

14. Users Outside Australia

We apply this policy to everyone, wherever they are. If you are in a place with its own privacy law, you may have extra rights.

• European Union and United Kingdom. We process your information to perform our contract with you or your organisation, for our legitimate interests in running and securing our business, to meet legal obligations, or with your consent. You can also object to or restrict processing, ask for a portable copy of your data, and complain to your local data protection authority.
• New Zealand. You can complain to the Office of the Privacy Commissioner.
• Other countries. Contact us and we will respond in line with the law that applies to you.

To use any of these rights, follow Section 12.

15. Children, Changes and Contact

Children. LCMH is a business service for adults. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

Changes. We review this policy at least once a year. We will post any update here with a new "last updated" date, and tell customers directly about significant changes.

Contact us.

Low Carbon Materials Hub Pty Ltd
329, 98-100 Elizabeth Street, Melbourne VIC 3000, Australia
Email: hello@lcmhub.com

You can ask for a copy of this policy in another format, free of charge.

Last updated: 2 November 2026