PetroChina International Australia

Privacy Policy PetroChina International (Australia) Pty Ltd (we or us) is committed to collect, secured, maintained, used and disclosed any Personal Information under the requirements of the Privacy Act 1988(Cth) (Privacy Act), the Australian Privacy Principles (APPs) and this up-to-date Privacy Policy.

Personal Information

“Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is in a material form or not.

The types of Personal Information that we collect from you depends on the circumstance in which the information is collected. Generally, we may collect the following Personal Information:

• of our suppliers, customers, prospective customers, agents, contractors and consultants and people working for them

• of our employees and applicants for jobs with us

• of community members and other stakeholders relevant to our business

• of owners and occupiers of land relevant to our business, and

• of visitors to our premises or guests at our business promotions or functions.

We does not generally require you to disclose “Sensitive Information”, which includes information or opinion about your racial or ethnic origin, political opinion, religious beliefs, sexual orientation or criminal record. In some limited circumstances, however, we may ask for your consent to collect your Sensitive Information. If you disclose Sensitive Information to us for any reason, you consent to us collecting the information and using and disclosing it for the purpose for which it was disclosed and as permitted by the Privacy Act and other relevant laws.

Personal Information Covered by This Privacy Policy

This Privacy Policy applies to all Personal Information that we now holds or may in the future collect. Information collected when you visit our website or third party platforms on which we have a presence, order products or service, enter a competition or promotion or otherwise collected when you provide information to us.

If you are or become our employee, the handling of your personal information is exempt from the Privacy Act if it is directly related to your current or former relationship with us and is contained in an employee record. We will not disclose your Personal Information other than to manage your employment relationship with us or otherwise as permitted by law.

Employees should direct all enquiries regarding information relevant to their employment to their manager in the first instance or to our Human Resources department.

How we collect and hold personal information

We will collect Personal Information directly from you and inform you of such collection where is reasonable and practicable. Such collection will only be carried out by lawful and appropriate means and no unreasonably intrusive collection will be allowed.

We may collect your Personal Information by various means such as by telephone, correspondence (including but not limited to letters and email), our website, social media, our forms and in person in the course of conducting our business.

We will allow you to deal with us anonymously or using a pseudonym where it is lawful and practicable to do so. This may be possible if you are making a general inquiry but it may not be possible if we are to assess and investigate a query and provide a response, or are required to transact or engage with you.

In some circumstances, we may also collect personal information about you from third parties, including:

• Your authorised representatives acting on your behalf

• Your employer

• Related Companies

• Third Parties

• Publicly available sources of information and

• Government agencies.

Why we collect, hold, use and disclose personal information

The purpose for which we collect, hold, use and disclose Personal Information will depend on the circumstances in which it is collected.

We may use or disclose your personal information for the primary purpose for which it was collected, related secondary purposes that we could reasonably be expected to use it for and any other purposes to which you have consented (expressly or impliedly).

We may disclose your personal information to other people and organizations locally or overseas depending on the function or activity for which we collected your personal information. If it becomes necessary for us to disclose your Personal Information to an oversea recipient, we will update this policy to reflect such disclosure.

We will, where commercially practical, require that any third party to whom Personal Information is disclosed will treat the Personal Information in a manner that is consistent with the APPs.

We will not sell your Personal Information to a third party without your consent. We may sell de-identified, aggregated data to third parties that cannot be used to specifically identify an individual.

Website links

Our website may contain links to other third party websites to which this privacy policy does not apply. To the extent that you have concerns, you may wish to familiarise yourself with the privacy policy of those websites.

Cookies

A ‘cookie’ is a small data file that your browser places on your computer or device. Cookies help your browser navigate a website. The cookies themselves cannot collect any information stored on your computer or from within your files. Cookies assist a website deliver a more user-friendly and speedier service. We will not use cookies to collect personal information about you. However, should you wish to do so, you can choose to reject or block cookies by changing your browser settings – see the Help function within your browser for further details. Please note that most browsers automatically accept cookies so if you do not wish cookies to be used you may need to actively delete or block the cookies.

Information security

We hold personal information electronically in our IT systems, secure servers and databases and in physical form. We take all reasonable precautions to protect personal information from misuse, loss, interference, unauthorised access, modification or disclosure. However, except to the extent liability cannot be excluded due to the operation of statute, We excludes all liability (including in negligence) for the consequences of any unauthorised access to, disclosure of, misuse of or loss or corruption of Personal Information. Nothing in this Privacy Policy restricts, excludes or modifies or purports to restrict, exclude or modify any statutory consumer rights under any applicable law including the Competition and Consumer Act 2010 (Cth).

We will take steps (as long as it is reasonable and lawful to do so) to destroy or de-identify personal information if we are not required by or under an Australian law or an order of a court or tribunal to retain the information, or if we no longer need your personal information.

Accessing & seeking correction to your Personal Information

You can request us to give you access to your personal information at any time by contacting us using the contact details set out below. We cannot give you information about anyone else.

We will ask you to verify your identity before giving access.

Sometimes we may charge you a fee to cover the cost of retrieval and supply of personal information. The fee will not be excessive and we will let you know if a fee will apply before we proceed with giving you access.

If we are unable to give you access to your personal information we will advise you of the reasons in writing.

We will respond to an access request within a reasonable period after the request is made.

Employees should direct all enquiries regarding information relevant to their employment to their manager in the first instance or to our Human Resources department.

We will take all reasonable steps to ensure that your personal information is accurate, up to date, complete and relevant. This is important for us to perform our functions and activities.

Please keep us informed of any changes to your personal information.

You can contact us at any time using the contact details following to update or correct your personal information, but we will ask you to verify your identity before we do so. If we cannot update or correct your personal information we will advise you of the reasons in writing.

We will respond to a request to update or correct personal information within a reasonable period after the request is made.

How to make a complaint

If you have a complaint about how we have handled your personal information or if you think we have breached the Privacy Act or the APPs, you may contact us to lodge a complaint.

If you are not satisfied with our response to your complaint you can refer your complaint to the Office of the Australian Information Commissioner (for more information, see www.oaic.gov.au).

How to contact us

In writing:

Attention: Company Secretary

PetroChina International (Australia) Pty Ltd

Level 22, Central Plaza One, 345 Queen Street

Brisbane QLD 4000

Australia

Email: hr@petrochina.com.au

Changes to our privacy policy

We may change this policy from time to time. Any updated versions will be posted on our website and will be effective from the date of posting. By continuing to use the website, or otherwise continuing to deal with us, you accept this Privacy Policy as it applies from time to time.