01.Our Privacy Commitment

Our operations are built on disciplined planning, documented procedures, evidence integrity, accountability and professional governance. Privacy is considered at every stage: when we plan a flight, when we capture data, when we process and store it, and when we report to a client.

Privacy considerations form part of our operational risk assessment and planning process before each project.

In practice, this means we plan operations to avoid capturing people and private activity wherever we can, collect only the data a project genuinely requires, and use imagery and data solely for the purpose the client engaged us for. Data is stored securely, access is controlled, and material is retained or destroyed according to documented procedures.

We also recognise the limits of what any operator can promise. Aerial and field capture in real environments can sometimes record incidental detail that cannot be predicted or fully avoided. Where that happens, our approach is to minimise, de-identify or delete that material where practical.

02.About This Policy

This policy applies to Savannah Solutions Pty Ltd, trading as Savannah Aerial Solutions, referred to in this policy as “Savannah Solutions”, “we”, “us” or “our”. We are an Australian company based in Busselton, Western Australia, operating in accordance with applicable Civil Aviation Safety Authority regulations.

Our services include RPAS operations, infrastructure and asset inspections, environmental monitoring, agricultural and rural inspections, thermal imaging, mapping and photogrammetry, field intelligence and reporting, research and demonstration projects, and related consulting.

We manage personal information in a manner consistent with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and we take account of the Australian Government’s Drone Privacy Guidelines.

03.What Personal Information We Collect

The personal information we collect is generally limited to what is needed to respond to enquiries, quote and deliver services, manage business relationships, and meet legal and aviation obligations. This may include:

• Name, position and organisation.
• Contact details such as email address, phone number and business address.
• Property, site or asset details relevant to a proposed or contracted job.
• Records of correspondence, quotes, contracts and project deliverables.
• Payment and invoicing details for clients and suppliers.
• Contractor and subcontractor qualifications, licences, certifications, insurance details and suitability information.
• Limited technical information collected through our website.

We do not seek to collect sensitive information in the ordinary course of business. If a specific project requires it, we will explain why and how it will be handled before collection.

04.How We Collect Information

We collect personal information directly from you wherever practical, including when you submit an enquiry, request a quote, engage us to deliver a project, work with us as a contractor or supplier, or subscribe to occasional updates.

Occasionally we receive personal information indirectly, for example when a client provides contact details for a site manager or landholder so we can coordinate access. Where this happens, we handle that information under this policy and use it only for the purpose it was provided.

05.Why We Collect and Use Information

We collect, hold and use personal information to:

• Respond to website enquiries and quote requests.
• Plan, coordinate and deliver contracted services.
• Arrange site access and notify stakeholders where appropriate.
• Maintain client records, project files and deliverables.
• Engage and manage contractors and suppliers.
• Invoice, receive and make payments, and maintain accounting records.
• Meet legal, regulatory and aviation record keeping obligations.
• Send occasional service or company updates where requested.

We do not sell personal information, and we do not use it for unrelated purposes without consent or as otherwise permitted by law.

06.Marketing Communications

Our marketing is minimal. If we send updates about our services or capabilities, it will be to people who have dealt with us or asked to hear from us. Every communication will include a simple way to opt out.

07.Cookies and Website Analytics

Our website may use cookies and analytics tools to understand how visitors use the site, such as which pages are viewed and for how long. This information is generally aggregated and does not identify you personally. You can adjust your browser settings to refuse or delete cookies.

08.Privacy During Drone Operations

Drone operations are the part of our work where privacy expectations are highest. Our approach is based on the Australian Government’s Drone Privacy Guidelines, which complement our obligations under the Privacy Act and our operational planning and procedures.

In conducting RPAS operations, Savannah Solutions aims to:

• Respect privacy by planning flight paths, camera angles and capture parameters to focus on the subject of the job.
• Inform property owners, occupiers or site stakeholders where practical and appropriate.
• Minimise recording of people and unrelated private activity.
• Collect only what the job requires.
• Use imagery only for the agreed project.
• Store imagery securely with access limited to personnel working on the project.
• Retain, archive or delete data according to documented requirements, contractual obligations and applicable law.
• Comply with applicable privacy, surveillance and aviation laws.
• Operate in accordance with CASA regulations.

Where appropriate, we undertake stakeholder notification, obtain landholder permission, or implement operational controls to reduce unnecessary collection of personal information.

In public or broadacre environments it is not always possible to inform or obtain consent from every person who may be incidentally visible. We do not claim otherwise. Instead, we minimise such capture and handle incidental material carefully.

09.Client Data and Imagery

Imagery and project data captured for a client are treated as confidential. Access is limited to the people working on the engagement, and material is not shared outside the project without the client’s permission or as required by law.

Project imagery and data are used only for the agreed purpose of the engagement. We do not publish client imagery or use it in marketing, case studies or demonstrations without permission.

Ownership of deliverables and permitted uses of captured data are governed by the client agreement where one applies. Where an agreement is silent, we default to the conservative position: the data serves the project it was collected for, and nothing else.

10.Artificial Intelligence

We may use AI-assisted software to help process, organise or analyse imagery and field data, for example to sort large image sets, flag potential anomalies or assist in preparing reports.

AI is a decision support tool in our workflow, not a decision maker. All significant findings are reviewed by a suitably qualified person before they are relied upon in reports or recommendations. AI does not replace professional judgement, and responsibility for our deliverables always rests with us.

11.How We Store and Protect Information

Personal information and project data are held in commercially managed cloud platforms and controlled local storage. We apply practical safeguards including access controls, account authentication, device security and structured file management. Access to client project data is limited to the people who need it to do the work.

Where a project requires it, approved contractors or subcontractors may be given access to project information. Access is limited to what is necessary for their role, and they are expected to manage that information consistently with this policy and any contractual confidentiality obligations.

No storage system is immune from risk. If a data breach occurred that was likely to result in serious harm, we would act promptly to contain it, assess it, and notify affected individuals and the Office of the Australian Information Commissioner where required by law.

12.Data Retention

We keep personal information and project data only for as long as it is needed for the purpose it was collected, to meet contractual commitments, or to satisfy legal, tax, insurance and aviation record keeping requirements. When information is no longer required, we delete it or de-identify it using secure methods where practical.

13.Overseas Services

Like most Australian businesses, we use reputable third party platforms to run our operations, including secure commercial cloud platforms used for communication, project management, accounting and data storage. Some providers may store or process data on infrastructure located outside Australia or use overseas support services.

Where this occurs, we use recognised cloud providers with established security practices and take reasonable steps to protect personal information and ensure it is handled consistently with Australian privacy standards.

14.Access, Correction and Complaints

You may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. We will respond within a reasonable period.

If you believe we have mishandled your personal information, please contact us first so we have the opportunity to resolve the issue. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.

15.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal obligations. The current version will always be available on this website.