Cyber Security & Data Protection

GreenTech Microgrids Pty Ltd ("GreenTech", "we", "our" or "us") is committed to protecting the information entrusted to us by our customers, partners and stakeholders.GreenTech recognises that protecting customer information and maintaining resilient digital systems are fundamental to delivering safe, reliable and trusted energy services.GreenTech's cyber security practices are informed by recognised Australian cyber security guidance, including the Australian Cyber Security Centre (ACSC) Essential Eight and other industry-recognised security practices, where appropriate to our operations.As part of providing energy services, GreenTech collects and manages personal information, billing information, metering information and other operational data. We recognise the importance of protecting this information and maintaining the confidentiality, integrity and availability of our systems and services.This Statement outlines GreenTech's approach to cyber security and data protection.

GreenTech takes reasonable steps to protect information from:Unauthorised accessUnauthorised disclosureMisuseInterferenceLossModificationCyber security threatsGreenTech implements a range of administrative, operational and technical measures designed to support the security of customer information and business systems.Information We ProtectGreenTech may collect and manage information including:Customer names and contact detailsProperty and account informationBilling and payment informationMetering and energy usage informationCustomer support and complaint recordsLife support registration informationPayment support informationWebsite enquiry informationoperational dataenergy management datacustomer portal informationauthentication credentialsdigital platform informationcloud-hosted informationThis information is managed in accordance with GreenTech's Privacy Policy.Security MeasuresGreenTech maintains a range of security controls designed to protect information and systems.These measures may include:Access controlsMulti-factor authenticationPassword management controlsSecure system configurationsEncryption technologiesNetwork monitoringSecurity patch managementSystem backupsStaff training and awareness programsVendor and service provider oversightRole-based access controlsecurity loggingvulnerability scanningemail securitysupplier security assessmentsprivileged access managementGreenTech regularly reviews its security measures and seeks to improve them over time.

GreenTech utilises specialist utility industry systems to support customer account management and billing activities.GreenTech's customer billing platform is provided by Utilmate Limited, a specialist utility billing software provider located in New Zealand.Where customer information is processed through third-party service providers, GreenTech takes reasonable steps to ensure appropriate privacy, security and confidentiality obligations are maintained.

GreenTech may engage trusted service providers to assist with the delivery of services and business operations.Where third-party service providers have access to information on GreenTech's behalf, GreenTech seeks to ensure that:Appropriate confidentiality obligations apply;Information is only used for authorised purposes;Implement appropriate cyber security controls;Maintain confidentiality;Protect customer information;Notify GreenTech of security incidents affecting GreenTech information; andComply with contractual security obligations; andPrivacy obligations are respected.

GreenTech maintains processes for identifying, managing and responding to actual or suspected data breaches.Where required by law, GreenTech will comply with the Notifiable Data Breaches Scheme under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where appropriate.

Customers can also play an important role in protecting their information.We encourage customers to:Keep account information currentProtect passwords and login credentialsUse strong passwordsAvoid sharing account access detailsBe cautious of phishing emailsNotify GreenTech if suspicious activity is identifiedExercise caution when responding to unsolicited communicationsCustomers should immediately report any suspected fraud or unauthorised account activity to GreenTech.

Cyber security risks continue to evolve.GreenTech is committed to continually reviewing and improving its systems, processes and controls to support the protection of customer information and the resilience of its services.

Further information about how GreenTech collects, uses, stores and protects personal information is available in our:Privacy PolicyCookie PolicyAll these documents can be found on our Customer Hub

Customer Experience TeamGreenTech Microgrids Pty LtdAddress:Level 4, 167 Queen Street,Melbourne VIC Australia 3000Office Hours:Monday - Friday9am - 5pmEmail:privacy@greentechmicrogrids.com.auPhone:1300 738 529 Website:www.greentechmicrogrids.com.au