Privacy Policy — JBM Logistics App
JBM Logistics (Aust) Pty Ltd
Last updated: 9 October 2026
1. Who we are
The JBM Logistics App ("the app") is operated by JBM Logistics (Aust) Pty
Ltd (ABN 37 633 477 906), of Unit 306, 20A Lexington Drive, Bella Vista
NSW 2153, Australia.
In this policy, "we", "us" and "our" mean JBM Logistics (Aust) Pty Ltd.
Contact us about privacy:
compliance@jbmlogistics.com.au
2. Who this app is for
The app is a workplace tool for our own employees and contractors. It is
not available to the general public, and accounts cannot be created by
the person using them — we create every account ourselves and issue it to
a named driver or staff member.
The app is not intended for anyone under 18, and we do not knowingly
collect information from children.
3. What information the JBM system handles
This section covers the whole system — the driver app and the office
compliance portal together. Some of what follows is entered and held by
the office and is only shown to you in the app; some you create yourself
in the app. We describe it in one place because it is all one set of
records about you, and you are entitled to know we hold it however it
got there.
Between them, the app and the portal record the paperwork that
heavy-vehicle operators are required to keep under the Heavy Vehicle
National Law and our NHVAS accreditation.
Identity and contact
Name, work email address, phone number, employee number, date of birth,
and the position you hold.
Driver licensing and entitlements
Driver licence number, class, state of issue and expiry; dangerous goods
licence details where held; driving history dates.
Health information
Medical certificate dates and expiry, and the answers you give to the
fitness-for-duty declaration — including any note you write explaining
why you answered "No" to a question about fatigue, medical conditions,
alcohol or drugs.
We treat this as health information and sensitive information under the
Privacy Act 1988 (Cth). It is collected because the law requires a driver
to declare fitness for duty before driving, and because we have a duty to
act on it.
Background checks
Police check dates and expiry. We record dates only. Where a document has
been uploaded, the file itself is stored securely as described in
section 6.
Identity documents
Passport number and expiry, where you have provided one for work-rights
purposes.
Work records you create in the app
Pre-start vehicle inspections and your answers to each check; faults you
report and the notes you write about them; run sheets, including
locations, customer references, break and waiting times; vehicle odometer
readings; axle weights and mass records; logbook submissions; and your
signature, recorded as a drawing you make on the screen.
Technical information
The date and time you sign in, and the technical data needed to deliver
the app and keep your account secure. The app contains no advertising, no
analytics and no tracking of any kind.
4. Why we collect it, and what we do with it
We collect and use this information to:
- meet our obligations under the Heavy Vehicle National Law, including
fatigue management, mass management and vehicle maintenance
requirements;
- maintain the records required by our NHVAS accreditation and produce
them to an auditor or to the National Heavy Vehicle Regulator on
request;
- confirm that a driver holds a current licence, medical and other
entitlements before being allocated work;
- act on a fitness-for-duty declaration, a reported fault or an
overweight vehicle;
- investigate incidents, and meet our work health and safety and
workers' compensation obligations;
- pay and manage our workforce.
We do not use your information for marketing, and we do not sell it to
anyone.
5. Who we share it with
Service providers. The app runs on Google Firebase, provided by Google
LLC. Google stores and processes the data on our behalf, under our
instructions, and does not use it for its own purposes.
Regulators and auditors. We disclose compliance records to the National
Heavy Vehicle Regulator, to NHVAS auditors, to police and to other
authorities where the law requires or permits it — for example during an
audit, an intercept, or an investigation.
Insurers and advisers. Where relevant to a claim, an incident or legal
advice.
We do not share your information with anyone else without your consent,
unless the law requires it.
6. Where it is stored, and how it is protected
All data is stored in Australia, in Google's australia-southeast1
(Sydney) region.
Protections include:
- every screen requires a sign-in, and nothing in the app is public;
- access depends on your role — a driver can see only their own records;
supervisors and compliance staff see what their role requires;
- these restrictions are enforced by the database itself, not only by the
app;
- uploaded documents are held in restricted storage, and links to them
are issued only to a person whose role permits access, and expire;
- data is encrypted in transit and at rest by the platform.
No system is perfectly secure. If a data breach occurs that is likely to
cause serious harm, we will notify affected people and the Office of the
Australian Information Commissioner as required by the Notifiable Data
Breaches scheme.
7. How long we keep it
We keep compliance records for at least 3 years from the date the record
was made, as required under the Heavy Vehicle National Law and our NHVAS
accreditation.
We may keep information longer where:
- it relates to an incident, claim, dispute or investigation that is not
finished;
- a longer period is required by employment, work health and safety, or
tax law.
When a person leaves, their account is deactivated immediately and they
can no longer sign in. The compliance records they created remain,
because they are the operator's records of work performed and the law
requires us to keep them.
8. Your rights
You can ask us to:
- see the personal information we hold about you;
- correct anything that is wrong or out of date;
- explain how a particular piece of information is being used.
Write to compliance@jbmlogistics.com.au. We will respond within a
reasonable period, and ordinarily within 30 days.
Deleting your account. You can ask us to close your account and delete
your personal information at any time, by emailing
compliance@jbmlogistics.com.au or by using the deletion request page at
https://sites.google.com/view/jbm-logistics-privacy/account-deletion
When you make that request:
- your sign-in account is deleted, and you can no longer use the app;
- your contact details and personal documents are deleted, unless we are
required to keep them;
- compliance records you created — pre-start inspections, run sheets,
fault reports, mass records and logbook submissions — are retained for
the statutory period described in section 7. The law requires the
operator to hold these, and we cannot delete them on request. They
remain linked to your name because a compliance record that cannot
identify who made it is not a valid record.
We will tell you, in writing, exactly what was deleted and what was kept.
If you are unhappy with how we have handled your information, tell us
first at compliance@jbmlogistics.com.au. If you are not satisfied with
our response, you can complain to the Office of the Australian
Information Commissioner — oaic.gov.au, or 1300 363 992.
9. Changes to this policy
If we change this policy we will publish the new version at this address
and update the date at the top. Where a change is significant, we will
tell affected people directly.
10. Contact
JBM Logistics (Aust) Pty Ltd
compliance@jbmlogistics.com.au (privacy requests)
ayush@jbmlogistics.com.au (general)
Unit 306, 20A Lexington Drive, Bella Vista NSW 2153, Australia
0433 943 200