Privacy Policy

Heston MRO, Unit 103.1 Da Vinci Business Park, 2-6 Leonardo Drive, Brisbane Airport, QLD 4008 (hereinafter – We, Company) is the controller of your personal data. We respect your privacy and are committed to protecting it. This Privacy Policy regulates how the Company processes personal data of its customers and Company’s website (hereinafter – the Website) visitors (hereinafter – data subjects, you) and other persons and ensures security of personal data.

Applicable Law

The Company undertakes to comply with the applicable data protection law (hereinafter – Applicable Law). Although certain requirements may vary from one country to another, the Company is particularly concerned about the privacy of data subjects, and this Privacy Policy constitutes a global guideline to which the Company is committed.  

In particular, the Company is committed to complying with the following laws, where applicable: 

  1. Privacy Act (1988). This regulation applies to the processing of personal information for Australian citizens or residents and for activity of a controller or a processor in the Australian territory 
  2. The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”). This regulation, applies to the processing of Personal Data for UE citizens or residents and for the activity of a controller or a processor in the UE territory 

What is personal data/ personal information

By “personal data/personal information” we mean any information relating to an identified or identifiable natural person.  


By “processing” we mean any operation or set of operations that are performed on Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 

What we collect

Personal data that Company collect is generally name, occupation, employer, contact details (includes telephone and email), and qualifications.


We collect your information directly from you. We only collect your personal information that is necessary for or directly relevant to our purpose of collecting. 


Sensitive information is only collected with your consent or otherwise as required by law. 

We plan to take steps to ensure that the information that we have about you is accurate and up to date. 

Why we collect information

We collect your information so that we are able to:

  • answer your queries that you may have
  • provide you with services
  • contact you regarding your job applications
  • maintain a stakeholder relationship.

If you provide us with you mobile phone or email, we may provide information electronically, unless you tell us you do not want to receive this information.

How long do we store your personal data

  • When you are contacting us by making a request by e-mail 1 year from the submission of the request 
  • When you are applying for an open position in the Company (Recruitment process) until the selection process is completed, but not longer than 12 months 

Who we can share your personal data with

The Company may share personal data, subject to your consent or another relevant legal basis, with the following third parties: 

  • Other companies of our group, such as subsidiaries and affiliated companies 
  • Trusted business partners providing services on our behalf, such as technical support, marketing purposes or other types of service delivery 
  • Governmental authorities and public authorities, as far as this is necessary to provide any services that have been requested or authorised, to protect customers, contractors and partners’ rights, or our or others’ rights, property or safety, to maintain the security of our services or if we are required to do so because of applicable law, court or other governmental regulations, or if such disclosure is otherwise necessary for the support of any legal or criminal investigation or legal proceeding   


Depending on Applicable Law, we implement contracts with some third parties to ensure that personal data are processed based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures. 



As you visit or interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal information by using cookies and other similar technologies. We use cookies to improve our website and make your browsing experience and our business decisions better. Please see our Cookie Policy for further details. 

Links to other sites

The Website may contain links to other sites. This Privacy Policy is applicable only with respect to the Website, but not any other sites. Therefore we strongly recommend to review the privacy policies of any websites that you may reach by following hyperlinks presented on this Website. We have no control and no responsibility with regard to any content presented on sites other than the Website. 


Security of your personal information is the utmost important thing to the Company. We take measures to ensure that your personal information is stored securely to prevent misuse, loss, unauthorised access, modification or disclosure. Please contact us if you believe your information has been used or disclosed without your consent. 

Your rights

As may vary based on relevant Applicable Law, data subjects have rights related to their personal information, such as the right to request access, rectification, erasure of their personal information, restriction of processing, object to processing, request data portability, to be informed and withdraw their consent for the processing of personal information based on their consent.  


The exercise of such rights is not absolute and is subject to the limitations provided by Applicable Law.  

Data subjects may have the right to lodge a complaint with the local supervisory authority or the competent regulator if they consider that processing their personal information infringes Applicable Law.  


To exercise those privacy rights, you may make a written request and we will respond within a reasonable period of time to or mail to Unit 103.1 Da Vinci Business Park, 2-6 Leonardo Drive, Brisbane Airport, QLD 4008. 

We may ask for proof of identity in order to respond to the request. If we can’t satisfy your request (refusal or limitation), we will motivate our decision in writing. 

Making a privacy complaint

Should you have any privacy complaints, please contact us on 07 3363 0999 to give us a chance to fix the issue. We will then investigate your complaint and provide you with a formal response. 

If you believe we have not handled your complaint appropriately, contact the Office of the Australian Information Commissioner, Privacy Hotline 1300 363 992 or at 

Contact us

If you have any questions regarding our Policy or have requests relating to your personal information, you can contact us:

By email: 

Address: Unit 103.1 Da Vinci Business Park, 2-6 Leonardo Drive, Brisbane Airport, QLD 4008.

Final provisions

This Privacy Policy may be updated from time to time by Heston MRO. The newest Privacy Policy will include the last date of updates. This Privacy Policy is effective from the 14th of September 2022.