When you use the services of Goodman Limited (ABN 69 000 123 071) and Goodman Funds Management Limited (ABN 48 067 796 641; AFSL 223621) as responsible entity for the Goodman Industrial Trust (ARSN 091 213 839) and Goodman Logistics (HK) Limited (Company No. 1700359 ARBN 155 911 149), and any of their controlled entities (Goodman or Group), you entrust us with personal information (Personal Information). This Goodman Customer Privacy Policy(Privacy Policy) sets out what information we obtain, and how we use it.

If you are based in the European EconomicArea (the EEA) during your interactions with us, the Appendix to this Privacy Policy applies in addition to this Privacy Policy.

1. Our commitment to protect your privacy

At Goodman, we are committed to protecting your Personal Information and your privacy. To confirm that you can make informed decisions and feel confident about sharing certain personal information with us, please read this Privacy Policy to understand for what purposes we outsource the handling of your Personal Information to a third party, and the choices you have concerning how your Personal Information is obtained and used by us. We may also provide further privacy collection notices highlighting certain uses of your Personal Information, together with the ability to opt in or out of certain uses, when we collect Personal Data from you. The laws of certain countries require us to provide you with additional information about our processing activities and we have included a separate appendix to deal with these. As well as this document, please refer to the appendix if it applies to you. We will notify you of any changes to our Privacy Policy, including by posting the revised policy on www.goodman.com.

2. The Personal Information Etc. we obtain

We may obtain and handle some or all of the following Personal Information Etc. about you:

Information about you: Your personal information such as your name, gender, date of birth, nationality, address, telephone number, e-mail address, photographs and other images.
Your payment details: Account and billing information.
Our interactions with you: A record of any interactions and correspondence between us such as any interactions you have with our team members and any interactions with us or posts that refer to us on social media.
Survey information: Your responses to customer surveys conducted by us or on our behalf.
Your use of our website, apps and social media platforms: Details of your visits to our website, your use of social media platforms and our mobile applications and other information collected through cookies and other tracking technology including information that you look at. We may also collect information about you that is publicly available online, including your social media profiles.
Online Identifiers: such as your mobile device advertising identifier and geo-location data when using the Goodman Go! mobile application.

3. What happens if we cannot obtain Personal Information

Certain Personal Information (particularly payment details and contact information) are required for many of our products and services and if you fail to supply such Personal Information as requested for specific services, we may be unable to deliver you the products and services in full or provide you with information about these products or services.
If you do not provide us with Personal Information we may not be able to tailor the content of our websites to your preferences and your experience of our websites may not be as enjoyable or useful.

4. How we obtain Personal Information

We may obtain some Personal Information from you directly:

Through your access and use of our website.
During conversations between you and our representatives.
When you make an enquiry, complete an application or purchase order.

We will obtain other Personal Information from third parties including credit reporting agencies, law enforcement agencies and other Governmental agencies.
If you provide us with information about other individuals, you must tell those individuals and let them know where they can find a copy of this Privacy Policy.

5. What we use your Personal Information for

When you share information with us, you help us make our services to you better. The purposes for which we use your Personal Information are listed below.

To provide our products or services to you: To provide our products or services that we provide to you.
To provide customer support: For customer support purposes such as responding to your enquiries and requests or providing assistance to you.
For marketing purposes: For providing you with marketing communications including to provide updates concerning Goodman, as explained in more detail in Section 7 below.
To improve our products and services: For the purposes of improving our products and services for the benefit of our customers generally, including to confirm that our websites and web pages (including social media pages) function correctly and in accordance with your preferences and circumstances.
For legal and administrative purposes: For legal and administrative purposes such as verifying and processing payment, screening against fraud, screening against money laundering and other criminal or unlawful activities, accounting, billing and audit purposes, developing, maintaining and testing our systems, for complaints handling and for understanding, exercising, enforcing or protecting our legal rights and those of others.

6. Outsourcing the handling of your Personal Data

In certain circumstances, we may outsource the handling of your Personal Data to third parties as described below:

Our service providers and members of the Goodman Group who undertake the handling of personal data on our behalf for the purposes described in Section 5 above: We may outsource the handling of your Personal Data to our third party service providers, including agents, contractors and other Goodman Group companies on our behalf for the purposes described above. Examples of such third parties include operators of our IT systems, web hosting providers, manage our human resources information, share registry providers, custodians and professional advisors.
Our third party partners, for marketing purposes: We may disclose your Personal Data to third parties so they can provide marketing services or conduct marketing or social interaction activities on our behalf such as campaigns, market research, customer surveys and data analytics to help us improve and tailor our marketing activities, products and services.

Government and regulatory bodies and other individuals, bodies and organisations: We may disclose your Personal Data to governments and regulatory authorities and bodies and to other individuals, bodies and organisations such as dispute resolution, prosecution and law enforcement bodies, legal advisers, organisations which conduct credit, fraud checks, and other individuals, bodies and organisations for the purposes of complying with our legal obligations. We may also outsource the handling of your Personal Data to such individuals, bodies and organisations for reasons of safety and security, to enable us to provide our products and services to you and otherwise for legal and administrative purposes.

We will not provide your Personal Data to any third party, except in the following cases:

cases in which we have obtained your prior consent;
cases in which the provision of Personal Data is required by laws and regulations;
cases in which there is a need to protect the life, wellbeing, or property of an individual, and it is difficult to obtain your consent;
cases in which there is a special need to improve public wellbeing or promote healthy child development, and it is difficult to obtain your consent;
cases in which there is a need to cooperate with a national government, local government, or person entrusted thereby with performing the functions prescribed by laws and regulations, and obtaining your consent is likely to interfere with the performance of such functions;
cases in which the third party is an academic research institution or the equivalent (a university or other organization or group associated with academic studies, or a person belonging to it), and the third party needs to handle the Personal Data for academic research purposes (including cases in which a part of the purpose of handling the Personal Data is for academic research purposes, and excluding cases in which there is a risk of unjustly infringing on individual rights and interests).

7. Marketing

We may use Personal Data for marketing and promotional purposes, including:

For sending or showing you updates on latest news, offers and promotions in connection with our products and services (and the products and services of our group companies and third parties) .
For tailoring and tracking your interactions with internet banner advertisement and links from third party websites to our website.

We may also use Personal Data to analyse our customers’ preferences and market trends and derive insights, which we may use to tailor the types of products and offers that we present to you.

We may communicate marketing and promotions to you by post, telephone, or online (including by email or through your mobile device or via online banner advertisement) and, as appropriate and where required, we will ask you for your consent, or otherwise provide you with the opportunity to choose not to receive marketing, at the time we collect your data.

We will provide an option to unsubscribe or opt out of further communication on any direct marketing communication sent to you. You may also opt out by contacting us as set out in Section 8 below.

Please note that if you choose to unsubscribe or opt out of marketing communication, we will still send you communications about [the services/product] and any other services that we provide to you.

8. Transmission, storage and security of your Personal Information

IT Security

No data transmission over the Internet, a website, mobile application or via email or other message service can be guaranteed to be secure from intrusion. However, we maintain commercially reasonable physical, electronic and procedural safeguards to protect your Personal Data in accordance with the requirements of data protection legislation applicable in your country.
All Personal Data we collect about you is stored on our or our subcontractors’ secure servers. We comply with our security policies and standards when accessing or using this information and restrict access to your Personal Data to those persons who need to use it for the purpose(s) for which it was collected. You are responsible for keeping any information that we send to you confidential and for complying with any other security procedures that we notify you of. In particular, where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or mobile applications, we ask you not to share a password with anyone.

Retention period

We will retain your Personal Data for as long as is necessary for the processing purpose(s) for which it was collected and any other permitted linked purpose (for example where we are required to retain personal data for longer than the purpose for which we originally collected it in order to comply with certain regulatory requirements). Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised (and the anonymised information will be retained) or securely destroyed.

9. Your rights and contacting us

General rights

You have the right (subject to various exceptions and in accordance with data protection legislation in your country) to access certain Personal Data held about you and correct any inaccuracies. Specifically, you may request that we provide information about the purposes of use of the Personal Data we have about you, as well as disclose, update, add, delete, stop using, remove, or cease providing your Personal Data to third parties. You may also request that we disclose records of provision to third parties relevant to your Personal Data.

Right to opt out of direct marketing

You have the right to ask us not to process your Personal Data for direct marketing purposes. You can exercise your right to prevent such processing by indicating that you do not consent to direct marketing at the point at which we collect your Personal Data. You can also exercise the right at any time after we have collected and used your Personal data for direct marketing purposes by following the opt-out instructions contained in the relevant communications.

Updating information

We will take reasonable steps to try and guarantee that your Personal Data is accurate. To help us do this, please notify us of any changes to your Personal Data.

Contacting us

Please contact us using the details set out below: privacy@goodman.com
The Hayesbery 1-11 Hayes Road Rosebery, NSW 2018
For any privacy queries in the following regions please contact:
New Zealand: privacy.NZ@goodman.com
United Kingdom/Continental Europe: privacy.UKCE@goodman.com
United States: privacy.US@goodman.com
Greater China: privacy.HK@goodman.com
Japan: privacy-JP@goodman.com
Brazil: privacy.Brazil@goodman.com

10. Use of Cookies

The websites of Goodman, including www.goodman.com use cookies which, among other things, help us to improve your experience of our websites and to confirm that they perform as you expect them to.
When you access our website, we may place a cookie (which is a small summary file containing a unique ID number) on your computer. This enables us to recognise you when you return and greet you each time you visit our website with any relevant preferences. It also enables us to keep track of services you view or preferences you have so that, if you consent, we can send you news about those services. We may also use cookies to measure traffic patterns, to determine which areas of our website have been visited and to measure transaction patterns in the aggregate. We use this to research our users’ habits so that we can improve our online services. If you do not wish to receive cookies, you can set your browser so that your computer does not accept them.
We log IP addresses (that is, the electronic addresses of a computer connected to the internet) to analyse trends, administer the website, track users movements and gather broad demographic information.

11. Links to other sites

This website contains links to other sites that are operated by third party companies with different privacy practices. You should remain alert when you leave our site and read the privacy statements of other websites. We have no control over Personal Data that you submit to or receive from these third parties.

Appendix for Residents in Europe

This Appendix applies if you are based in the European Economic Area (the EEA) during your interactions with us.

1. Why we collect your data, and who we disclose it to

The legal basis or “grounds” for our use of your Personal Data (which means personal data stipulated in EU DP Law (EU DP Law) in this Appendix. The same applies hereinafter.) are set out below, as required under EU DP Law (EU DP Law). In the table below, we have linked each purpose mentioned in Section 3 of our Privacy Policy below to the relevant legal ground/s.

Purpose of the data processing	Use bases (the specified ground may vary depending on the specific processing activity and particular personal data being processed)
To provide our products and services to you (4.1(a))	Contract performance Legitimate interests (to allow us to provide our services) For sensitive Personal Data Consent
To provide customer support (4.1(b))	Contract performance Legal obligation Legitimate interests (to allow us to correspond with you in connection with our services)
For marketing purposes (4.1(c))	Legitimate interests (to allow us to inform business partners of relevant news and events) Consent (which can be withdrawn at any time)
To improve our products and services (4.1(e))	Legitimate interests (to allow us to maintain and improve the quality of our services and products)
For legal and administrative purposes (4.1(g))	Contract performance Legal obligation Legal claims Legitimate interests (to allow us to guard against fraud and other unlawful activity) For sensitive Personal Data Legal claims Substantial public interest

2. Special categories of Personal Data

If we collect and handle sensitive Personal Data (for example medical and health data, ethnicity and race), we will typically ask you for your consent when collecting and handling this type of Personal Data, unless we are otherwise permitted to process such Personal Data under European data protection law or the laws of the EU member state in which you are based.

3. Legal grounds for use of Personal Data

The legal grounds for our use of Personal Data are as follows:

Consent: where you have consented to our use of your Personal Data. You may withdraw your consent to the use of your Personal Data by contacting us as set out in Section 9 of the Privacy Policy.
Contract performance: where we are required to collect and handle your Personal Data in order to provide you with the services that we have contractually agreed to provide to you, e.g. contact details of a customer (tenant) of one of our properties.
Legal obligation: where we need to use your Personal Data to comply with our legal obligations.
Vital interests: where we need to process your Personal Data in order to protect the vital interests of you or another natural person, e.g. where you require urgent assistance.
Public interest: where we need to process your Personal Data in order to carry out a task that is in the public interest.
Legitimate interests: where we have a legitimate interest in using your information. We will only rely on this legal ground if we consider that our interest in using your Personal Data for the relevant purpose is not outweighed by any interests that you may have, or any prejudice that you may suffer, from the relevant use of your Personal Data.

The legal grounds for our use of the sensitive categories of Personal Data are:

Consent: where you have explicitly consented to our use of your Personal Data. You may withdraw your consent to the use of your Personal Data by contacting us as set out in Section 8 of the Privacy Policy.
Vital interest: where we need to process your Personal Data in order to protect the vital interests of you or another natural person where you or the other person is physically or legally incapable of giving consent.
Legal claims: where your Personal Data is necessary for us to establish, exercise of defend any legal claims.
Substantial public interest: where we need to process your Personal Data for reasons of substantial public interest set out in EU law or the laws of the member state in which you are based.

4. Our decision-making processes

In connection with our business, we will use your Personal Data to make various decisions about you and your eligibility to access our services, to prevent abusive use of our services, to confirm security of our systems, or to detect fraud.

5. Export outside the EEA

Your Personal Data may be accessed by team members or suppliers, transferred, and/or stored outside the EEA, including to countries which may have a lower level of data protection than under EU DP law.
We must comply with specific rules when we transfer Personal Data from inside the EEA to outside the EEA. When we do this, we will use appropriate safeguards to protect any Personal Data being transferred.
We will transfer your Personal Data subject to European Commission approved contractual terms that impose different data protection obligations directly on the recipient, or as otherwise permitted under EU DP Law.
Please contact us as set out in Section 9 of the Privacy Policy if you would like to see a copy of the specific safeguards we apply to the export of your Personal Data.

6. Retention period

Our retention periods for Personal Data are based on business needs and legal requirements. We will retain your Personal Data for as long as is necessary for the processing purpose(s) for which it was collected and any other permitted linked purpose. For example, we may retain: (i) certain transaction details and correspondence until the time limit for claims arising from the transaction with us has expired (which is typically between 6 to 10 years after the relevant transaction occurred, and in some cases much less than this); or (ii) certain data to comply with regulatory requirements regarding the retention of such data. Where Personal Data is no longer needed, we either irreversibly anonymise the data (in which case we may further retain and use the anonymised data) or securely destroy the data.

7. Your rights

In addition to Section 9 of the Privacy Policy, in certain circumstances, you may have the rights under EU DP Law to ask us to:

Provide you with further details on how we use and process your Personal Data
Delete Personal Data we no longer have grounds to process
Restrict how we process your Personal Data whilst we consider an inquiry you have raised.

Please note that we will not charge a fee when we deal with your requests in the exercise of the above rights.

In addition, under certain conditions, you have the right to:

Where processing is based on consent, withdraw the consent
Object to any processing of Personal Data that we process on the “legitimate interests” or “public interests” grounds, unless our reasons for the underlying processing outweighs your interests, rights and freedoms.
Object to direct marketing (including any profiling for such purposes) at any time.

You may exercise these rights by contacting us at the contact details in Section 9 of the Privacy Policy. Please note that we will not charge a fee when we deal with your requests in the exercise of these rights.
These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege). We will aim to respond to requests within 30 days.
If we are unable to resolve an inquiry or a complaint, you have the right to contact the data protection regulator in the country in which you are based.

8. Data Controllers

As a global organisation, there are a number of entities through which Goodman is operating in the EEA. Depending on the location of our business, any of the following entities of the Group may be the data controller in relation to your personal data, solely or together with other group entities:

Belgium
Goodman Belgium NV, Medialaan 50, 1800 Vilvoorde, Belgium
Goodman Management Services (Belgium) NV, Medialaan 50, 1800 Vilvoorde, Belgium
T: +32 2 263 40 00

Luxembourg
Goodman Management Holdings (Lux) S.à r.l., 5 rue de Strasbourg, Luxembourg, L-2561, Luxembourg
GELF Management (Lux) S.à r.l., 5 rue de Strasbourg, Luxembourg, L-2561, Luxembourg
GJL Management (Lux) S.à r.l., 5 rue de Strasbourg, Luxembourg, L-2561, Luxembourg
T: +35 226 363 220

France
Goodman France S.à r.l., 24 rue de Prony , 75017, Paris, France
T: +33 1 55 35 08 50

Germany
Goodman Germany GmbH, Peter-Müller-Straβe 10, 40468, Düsseldorf, Germany
T: +49 211 49 980

Italy
Goodman Italy srl, Largo Augusto 3, 20122, Milan, Italy
T: +39 342 876 86 15

Netherlands
Goodman Netherlands BV, Zuidplein 164, 1077 XX, Amsterdam, Netherlands
T: +31 20 709 39 30

Spain
Goodman Real Estate (Spain) Paseo de la Castellana, 93, 28046, Madrid, Spain
T: +34 91 414 15 50

United Kingdom
Goodman UK Limited
Goodman Logistics Management (UK) Limited
Goodman Logistics Developments (UK) Limited
Goodman Real Estate Adviser (UK) Limited
Goodman Operator (UK) Limited
each of Nelson House, Central Boulevard, Blythe Valley Park, Solihull, West Midlands, B90 8BG
T: +44 20 3426 0800

This privacy policy was last updated August 2023.

PRIVACY

Our properties

About Goodman

Investment Management

Sustainability

Our customers