Privacy Policy

EC Bills is an internal business system used by EC Group staff to process supplier invoices, statements and payments. It is not a public service. You need an EC Group account to sign in, and there is nothing here for a member of the public to use.

If you have simply arrived at this page, we collect nothing from you. There is no sign-up, no advertising and no tracking of visitors.

A person who uses EC Bills has an account holding their name, work email address, a password and the role and division that decide what they can see. Passwords are stored hashed, never in a readable form.

Sign-in activity is recorded for security, including when a sign-in happened, the network address it came from and failed attempts, so that repeated failures lock the sign-in out for a period. Staff who use the phone app also have their device registered so notifications can reach it.

Staff use EC Bills to handle EC Group's supplier paperwork: invoices, credit notes, supplier statements, delivery dockets, receipts and staff expense claims, along with the supplier and subcontractor account details needed to pay them. These are EC Group business records, held on EC Group's own server.

Uploaded documents are read automatically by a third-party AI service, so their details do not have to be typed in by hand.

EC Bills exchanges information with Xero for accounting and payment, Simpro for job costing and purchase orders, and EC HR, EC Group's own staff system, so that the same records stay consistent across EC Group. Approval requests, reminders and reports are sent by email, and phone notifications are delivered through Expo's push service and on to Apple and Google. Some of these providers may handle information outside Australia.

What a person can see and do depends on the role their account holds. Passwords are hashed, and the credentials for connected systems are stored encrypted. Signing in is rate limited and locks out after repeated failures. Actions taken in the app are logged against the person who took them, and the system is backed up nightly.

Business records are kept for as long as EC Group needs them, including to meet Australian tax and company record-keeping obligations. Backups are kept on a rolling basis, with older ones removed as newer ones are taken.

EC Group handles personal information in line with the Privacy Act 1988 (Cth). To ask what we hold about you, to have it corrected, or to raise a concern, contact us:

If you are not satisfied with our response, you can raise it with the Office of the Australian Information Commissioner at oaic.gov.au.