Privacy Policy

Privacy Policy – Australia

Last updated: February 2025

INTRODUCTION

Civeo Pty Ltd and its associated entities (collectively, “Civeo”, “we”, “us”), are committed to respecting your privacy. This document explains our policy for dealing with your personal information which:

• you provide to us (whether as a client, visitor to our website, village guest, contractor, job applicant or member of the public); or
• we have collected from a third party or other source.

This Privacy Policy may change from time to time and is accessible on www.civeo.com.

POLICY

1. Application of Privacy Laws

Civeo is bound by the Privacy Act 1988 (Cth) including the Australian Privacy Principles (as amended or replaced from time to time) and other laws which protect privacy. Certain acts or practices of Civeo are exempt from these laws, for example in relation to:

• employee records; and
• communications between related bodies corporate (where the related bodies corporate are located in Australia).

This Privacy Policy applies only where the Australian Privacy Principles also apply and does not create obligations that otherwise would not apply (i.e. where an exemption applies).

2. What is Personal information?

This Privacy Policy concerns any personal information or sensitive information about you which is provided to us.

Personal information is any information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in material form or not. Examples of personal information include your name, address, telephone number and email address, or more complex information like a resume or information about your use of our services.

Sensitive information is a subset of personal information and is defined as information, or an opinion about, your health (including information about a health service provided), racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, biometric information that is to be used for the purpose of automated

biometric verification or biometric identification or biometric templates. We will take reasonable steps to ensure that we only collect sensitive information that is relevant for the required purpose of collection and does not unreasonably intrude on your personal affairs.

3. How does Civeo collect your Personal Information?

We collect personal information that is necessary for our business activities and to provide and develop our services. We may do this in a number of ways, including:

• directly from you, when you provide it to us or our agents or contractors;
• from publicly available resources;
• where relevant for employment‐related accommodation services, from your employer;
• by analysing our own records of your use of our services and website;
• from surveillance systems and body worn cameras used at our Villages (see 4 below)

For example, we may collect personal information:

• when you request, or in the course of us providing, accommodation services or other associated services;
• when considering requests for sponsorship;
• when you seek employment with Civeo (e.g. via our vacancies page or on seek.com.au);
• that you otherwise provide via www.civeo.com (e.g. in an online profile, electronic form, email or survey).

The type of personal information we collect may include your name, professional and contact details, physical appearance, information relating to dealings with us or our clients, interests and preferences in relation to our services and, in the case of job applicants, information about your education and employment history.

We may also collect sensitive information about you, including health information.

If we are not provided with personal information that we request, we may not be able to meet your request, provide our services to you, maintain a safe environment for everyone or, in the case of job applicants, consider your eligibility for employment with us.

4. CCTV and Body Worn Cameras

We use CCTV systems at our Villages. Certain of our personnel at our Villages are also equipped with bodyworn cameras (BWC) which may be activated from time to time.

We collect your personal information via CCTV and BWC in and around our Villages for the purpose of:

• monitoring the safety and security of our guests, visitors, employees, contractors and suppliers, and completing incident investigations;
• detecting and deterring unauthorised access to, or unwelcome or criminal behaviour at, our Villages; and
• implementing and enforcing our policies and procedures.

BWC will only be activated in the following circumstances:

• medical emergencies;
• where there is a threat to your or others’ safety;
• responding to a security incident or call, including in relation to theft, vandalism, unauthorized access to the property, suspicious behaviour;
• conducting routine patrols and searches;
• engaging in interactions with guests, visitors, contractors or employees.

5. Use of Personal Information

We may use the personal information we collect for a number of purposes connected with our business operations, including:

• to verify your identity;
• to contact you;
• to provide our services to you;
• to obtain your products and services;
• to assess your job application;
• to maintain our relationships with you and others;
• for research, planning, service development, security or risk management;
• to lessen or prevent risks to personal safety and property;
• detection and investigation of incidents;
• civil or criminal proceedings; and
• where a third party acquires or wishes to acquire, or makes inquiries in relation to acquiring, an interest in Civeo.

We may also use your personal information for employee recruitment and assessment purposes.

Your personal information may also be used by us for purposes related to those described above which would reasonably be expected by you, but we will not otherwise use your personal information unless you have consented (e.g. where you consent to receive marketing materials) or as required by or permitted by Australian law (including for public health or safety or law enforcement reasons).

6. Disclosure of Personal Information

We may share your personal information where required or permitted by Australian law. We may also share your personal information with third parties including:

• our clients;
• investigation and enforcement authorities;
• our offices overseas;
• your employer or company paying for your accommodation; and
• our professional advisers and organisations with whom we have co‐promotional arrangements (and third parties used in administering those arrangements).

We may also share your personal information with our related companies, business partners and others engaged in providing us with services where reasonably required, including organisations that assist us by providing archival, auditing, professional advisory (including legal, accounting, financial and business consulting), mailhouse, delivery, technology, website, research, banking, payment, customer contact, data processing, insurance and security services.

Some of these third parties may be located outside Australia including the United States of America and Canada.

These overseas organisations provide support and assistance to us in delivering our services to you. You consent to the collection, use, storage, and processing of your personal information outside Australia as set out in this Privacy Policy.

If submitting an employment application, in certain circumstances you may be required to complete a preemployment health questionnaire. You may also be asked to undergo a pre‐employment medical assessment.

In that case, Civeo will disclose your questionnaire to its service providers for the purposes of arranging the medical assessment and for the relevant service providers to disclose the results of the assessment to Civeo.

Civeo may also disclose the information contained in your application to contracted service providers for purposes such as screening, aptitude testing, medical testing and human resource management activities.

We may also share your personal information with your employer or the company paying for your accommodation if we believe in good faith that the disclosure is required by law or to protect the safety of you,

other village guests, contractors on site, employees or Civeo’s property. In the case of a medical emergency requiring treatment, we may also contact your employer to let them know your whereabouts.

7. Accessing and updating Personal Information

Individuals have a right to request access to, or correction of, their personal information. If you wish to seek access to or to request correction of any personal information we hold about you, please contact us using the ‘contact details’ set out below. We request that you provide us with as much detail as possible about the particular information sought, in order to help us retrieve it. A reasonable access fee may be charged to cover our costs of providing that information.

We will need to verify your identity before responding to your request. Subject to any applicable exceptions or requirements, we will provide you with access to the personal information you request within a reasonable time and usually within 28 days. If we decide to refuse your request, we will tell you why in writing and how to complain.

We take reasonable steps to make sure that the personal information we collect, hold, use and disclose is accurate, complete and up‐to‐date. To ensure your personal information held by us is accurate, if you become aware that such information is incorrect or out of date, please contact us to request that the information be updated.

8. Security of Personal information

We may store your personal information in hard copy and/or electronically. We note that some information obtained via third party software may be stored by a third party storage provider. We aim to store your information securely and take reasonable steps against misuse, interference, loss, unauthorised access, modification and disclosure. We have a range of security controls in place (including physical, technical and procedural measures).

If we discover that the security of your personal information has been compromised (a data breach), and we are unable to rectify the data breach without any potential adverse effect on your privacy, we may contact you to inform you. We will work with you to minimise or mitigate the consequences of any data breach.

We are required to notify the Office of the Australian Information Commissioner (OAIC) about eligible data breaches under the Privacy Act.

9. Complaints

If you are concerned that we have not complied with your legal rights or applicable privacy laws, you may make a complaint internally through our complaints process or you may decide to make a formal complaint with the Office of the Australian Information Commissioner (www.oaic.gov.au) (which is the regulator responsible for privacy in Australia).

We will deal with complaints as follows:

Step 1: Let us know

If you would like to make a complaint, please let us know by contacting our Privacy Officer using the Contact Details set out below. A response will be provided within a reasonable period.

Step 2: Investigation of complaint

Your complaint will be investigated by our Privacy Officer. A response to your complaint will be provided in writing within a reasonable period.

Step 3: Contact OAIC

We expect our policies will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also contact the Office of the Australian Information Commissioner as follows:

Office of the Australian Information
Commissioner (OAIC) 

Complaints must be made in writing

Phone: 1300 363 992

Address:

Director of Compliance
Office of the Australian
Information Commissioner
GPO Box 5288
Sydney NSW 2001

Website: www.oaic.gov.au

10. Our Website and Electronic Communications

If you visit our website to read, browse or download information, our system may record information such as the date and time of your visit to the website, the pages accessed and any information downloaded. This information is used for statistical, reporting and website administration and maintenance purposes only.

The website may contain links to other third party sites. We are not responsible for the privacy practices or policies of those sites – you should check their own privacy policies before providing your personal information.

11. Contact Details

If you have any questions or feedback about privacy, or the way in which we handle your personal information (including whether and what type of health information we hold about you), you may contact us at:

Address:

Civeo Pty Ltd
Level 29, 264 George Street
Sydney NSW 2000
Attn: Privacy Officer

Phone 02 8346 9200
Email: info@civeeo.com

Privacy Policy – North America

Last Updated: November, 2025

This Privacy Policy explains how Civeo Corporation and Civeo Canada Inc. (collectively “Civeo,” “we,” “our,” or “us”) collects, uses, discloses, and protects information about individuals in Canada and the United States, and describes the rights and choices available to such individuals under applicable privacy laws.

This Privacy Policy applies to personal information collected online through our websites and offline through our booking process or other communications with clients, customers, and vendors in Canada and the United States (collectively, “Services”). Any personal information we collect about users of our Services or other business contacts (“you” and “your”) is managed according to applicable Canadian and U.S. state privacy laws. Your use of our Services indicates your acknowledgement of and agreement to our collection, use, and disclosure of your information as described in this Privacy Policy. If you disagree with the way we collect or handle your personal information, please do not use our Services.

Collection and Use of Personal Information

Personal information provided by individuals

We collect the following categories of personal data that you provide us or that is provided about you by the entity securing your booking:

• Contact Information, including first and last name, phone number, email address, and mailing address. We use this information primarily to fulfill booking requests, to communicate with you directly, and to send you marketing communications in accordance with your preferences.
• Professional Information, including job title and company name. We use this information primarily to provide you with our services, including to fulfill your booking request, to determine how we communicate with you, and for customer support purposes.
• Other voluntary information: any voluntary information you may provide us in the course of your interactions with us.

Information collected automatically via the Internet

Civeo automatically collects certain information through your use of our website. We may associate this usage data with contact information you provide (for example, when you fill out an online form) to understand engagement with our website and campaigns. The following information is automatically collected:

1. The Internet domain and IP address from which you access our website;
2. The device type, manufacturer, and model, type of browser and operating system, screen resolution of your monitor, Internet Service Provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID) used to access our site;
3. The date and time you access our website, the pages you visit, how frequently you visit, the address of the website you visited before ours, and the address of website you visit when you leave ours;
4. Other browsing behavior and actions you take on our website (such as the content you view, videos you watch, the communications you have through our services, and links, and ads you interact with) through the use of the cookies or other related tracking technologies (see “Cookie Policy” below); and
5. Information about your location, including general geographic location that we or our third-party providers may derive from your IP address. For the avoidance of doubt, this does not include precise geolocation.

Other Personal Information Collected

We may also draw inferences from the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, behavior, attitudes, aptitudes, predispositions, etc.

Purposes of Collection of Your Personal Information

Personal information may be used for the following purposes:

• To provide information you request. We process personal information to respond to your inquiries, provide details about our Services, and deliver materials such as newsletters or brochures.
• To fulfill the Services you request. We process personal information to fulfill your requests, such as booking of a room.
• To administer and improve the Services. We use personal information to operate, maintain, and enhance our websites, communications, and service offerings. This includes monitoring performance, tailoring content, and ensuring you receive accurate updates.
• To personalize your experience. We may use personal information (e.g., contact details, preferences, or engagement history) to customize communications and make your interactions more relevant.
• To enforce our terms or policies. We process your personal information to actively monitor, investigate, prevent and mitigate any alleged, suspected or actual prohibited use or illicit or illegal activities on our websites and investigate, prevent, or mitigate violations of our terms or policies.
• To ensure the security of the websites. We are committed to ensuring the safety and integrity of our websites. To do so, we process your personal information to: combat spam, malware, malicious activities or security risks, and improve and enforce our security measures.
• To provide you with information about other services.We process your personal information to send you marketing and other communications relating to our services by post, email, social media, or similar technology. Where required by law, we will not send you promotional communications without first obtaining your consent.
• To maintain the websites and conduct research and development. We use your personal information to understand how our Services are being used and to ensure our websites are reliable and working as intended, such as by tracking outages or troubleshooting issues that you report to us. Also, we collect information about the way you use and interact with our websites for research and development purposes. Research and development help us update and improve our websites and communications.

Disclosure of Personal Information

We disclose or otherwise make available personal information in the following ways:

1. To Business Partners and Service Providers: We may share personal information with our business partners, vendors, service providers, and subcontractors who aid our business, such as for marketing/campaigning, technical support, and customer service.
2. To our Marketing Partners: We may share personal information with our marketing partners to inform you about other services and products that may be available through us, our affiliated companies, and our marketing partners.
3. To Analytics and Search Engine Providers: We may share your personal information with analytics and search engine providers that that assist us in the improvement and optimization of our websites and provide data analysis and insight.
4. In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal information to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal information may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
5. To Facilitate Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
   1. in connection with the establishment, exercise, or defense of legal claims;
   2. to comply with laws or to respond to lawful requests and legal process;
   3. to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
   4. to detect, suppress, or prevent fraud;
   5. to reduce credit risk and collect debts owed to us;
   6. to protect the health and safety of us, our customers, or any person; or
   7. as otherwise required by applicable law.

Cookie Policy

We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our website when you engage with us. We typically collect this information through the use of a variety of our own and our third-party partners’ automatic data collection technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. A cookie is a small piece of text information that is stored by your browser or other application when you access a website. Your browser will return this cookie information to the domain where the cookie originated.

If you are concerned about the use of cookies, you can refer to the help information in your browser software for information on how to disable cookies. If you wish to delete cookies from your machine, consult your browser’s help files for instructions on how to do so. For mobile applications, you should review the device’s settings and select the option that allows you to disable tracking or personalization.

Personal Data Disclosures, Sales and Targeted Advertising

We engage third parties to help us facilitate limited digital and targeted advertising activities, primarily to generate business leads and measure interest in our services.  The information we and our third-party partners use for purposes of facilitating targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research, may be collected through the use of a variety of automatic data collection technologies, including cookies, web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies and may be designed to show you personalized ads based on predictions of your preferences and interests developed using personal data we maintain and personal data our third-party partners obtain from your activity over time and across nonaffiliated websites and other services. We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help link the personal information we and our third-party partners collect to the same person or otherwise target advertising to an individual on a third-party website or platform.

These categories of personal information are shared for cross-context behavioral advertising or targeted advertising with advertising networks and other companies that facilitate or engage in digital advertising. We engage in such sharing to facilitate personalized advertising and lead generation campaigning. We do so by allowing third parties to place cookies or other tracking technologies on our Sites that may collect information about your online activities over time and across different websites or applications. For more information about the use of cookies and other tracking technologies, see the “Cookie Policy” above.

Sensitive Personal Information

To the extent applicable, we only use sensitive personal information for the purposes set forth in the “Collection and Use of Personal Information” section of our Privacy Policy above. We do not sell sensitive personal information, and we do not process or otherwise share sensitive personal information for the purpose of targeted advertising.

Children’s Personal Information

Our websites are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 16. If an individual is under the age of 16, they should not use our websites or otherwise provide us with any personal information either directly or by other means. If a child under the age of 16 has provided personal information to us, we encourage the child’s parent or guardian to contact us at our contact information below to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 16, we will take steps to delete such information from our files.

Security

We have implemented physical, technical, and organizational safeguards that are designed to protect your personal data. Please note, however, given of the nature of the internet, no system of safeguards can be guaranteed to be 100% effective and thus we cannot completely guarantee or warrant the security of the personal data we process. For site security purposes, Civeo employs software programs to monitor network traffic that identifies unauthorized attempts to upload or change information, or otherwise cause damage. If you find a security issue, or simply have a security related concern, please reach out directly to us at the “Contact Us” information below.

Retention of Personal Data

We will usually retain the personal information we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal information for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Once retention of the personal information is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal information has been stored in backup archives), we will securely store the personal information and isolate it from further active processing until deletion or deidentification is possible.

Privacy and Links to Other Sites

Civeo websites may contain links to third-party websites, plug-ins, and other services. We are not responsible for the content and the privacy practices of other websites and encourage you to examine each site’s privacy policy and disclaimers and make your own decisions regarding the accuracy, reliability, and correctness of material and information found.

Privacy Rights for Individuals in Canada, California, and Texas

Your Canadian Privacy Rights

If you are a resident of Canada, you have the following rights in respect of your personal information in our control:

• Withdrawal of Consent: We collect, use and disclose your personal information with your consent, except as may otherwise be permitted or required by law. Your consent can be express or implied, or be given by an authorized representative. In some cases, we rely on others to obtain your consent on our behalf. You have the right to withdraw your consent at any time, subject to contractual and legal restrictions.
• Access: You have the right to request access to your personal information, and to receive information about how your personal information has been collected, used, and disclosed.
• Rectification: You have the right to rectify inaccurate, out of date or incomplete personal information.
• Data Portability: You may have the right to have certain personal information that you provided to us transferred to another company in a machine-readable format.
• Questions and Complaints: You have the right to ask us questions, or raise concerns or complaints, about our personal information handling practices.

Personal information we collect may be transferred, processed and/or accessed by us or our service providers in the United States, or elsewhere outside of Canada our outside of your province of residence where privacy laws may differ from and may not be as protective as those where you live. If you would like more information about the processing of your personal information outside of Canada, please contact us as described in the Contact Us section below.

Your California and Texas Privacy Rights

If you are a resident of California or Texas, laws in your state may provide you with the following rights with respect to your personal information:

• The right to request confirmation of processing and access a copy of the Personal Information we process about you.
• The right to know what personal information we have collected, used, disclosed, and sold about you, including the categories of personal information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom Civeo discloses personal information, and the specific pieces of personal information Civeo has collected about you.
• The right to obtain a copy of personal information we have obtained about you in a portable and, to the extent technically feasible, readily usable format.
• The right to correct inaccurate personal information about you, taking into account the nature of the personal information and the purposes of the processing.
• The right to request that we delete any personal information we have about you.
• The right to opt-out of the sharing of your personal information for purposes of targeted advertising (also called cross-context behavioral advertising).
• If we deny your request, the right to appeal our decision. To submit an appeal request, please use the contact information below under

Over the past 12 months, we have collected personal information as described in the “Collection and Use of Personal Information” section above.  We do not sell your personal information, but we may have shared your personal information for cross-context behavioral and/or targeted advertising as described above.

We will not discriminate against you for exercising your rights. Specifically, we will not deny you services, charge you different prices or rates for services, or provide you a different level or quality of services, because you elected to exercise your rights.

Exercising Your Rights

You may exercise your rights by contacting us as outlined under “How to Contact Us”. To verify your identity, we may ask you to verify personal information we already have on file for you. If we cannot verify your identity from this information, we may request additional information, which will only be used for the to verify your identity, and for security or fraud-prevention purposes.

You may designate an authorized agent to make a request to exercise your rights outlined in this Privacy Policy. We may deny requests from authorized agents who do not submit proof that they have been authorized by you to act on their behalf.

Updates to This Privacy Notice

We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the date at the beginning of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

How to Contact Us

If you have any questions or requests in connection with this Privacy Policy or other privacy-related matters, or if you would like to exercise any of your rights with respect to your personal information, please contact Civeo’s Privacy Officer by completing the form below.

Privacy Inquiry Form – North America