How Does a Multi Site Phone System Connect Offices and Support Inter-Site Dialling?

Colleagues in a boardroom watch a four-way video call on a wall screen, the tiles labelled with other office locations.

A multi site phone system connects users, extensions and call flows across multiple offices, branches or facilities through one coordinated telephony architecture. The key design question is whether staff can dial, transfer and reach colleagues at another site as easily as they can at the same site.

Instead of treating every office as an isolated phone system, a multi-site design creates a shared dial plan while preserving the operational rules each location needs. Depending on the business, this may use one cloud PBX, interconnected local phone systems, or a hybrid architecture.

How does a multi site phone system work?

A multi site phone system links phones and call-processing services across locations so that internal calls can be routed using extensions rather than public telephone numbers. A call between sites typically involves call signalling to establish the connection and voice traffic carrying the conversation across the organisation’s network or hosted platform, as described in Mitel’s Multi-Site Management operating manual (Mitel, 2024). (mitel.com)

In a cloud arrangement, phones at different sites register to the same hosted phone platform. The platform identifies the destination extension, applies the dial plan and connects the call without requiring the caller to dial the other office’s external number.

In a distributed or hybrid arrangement, each site may retain local call-processing equipment while the systems exchange routing information across a private WAN, site-to-site VPN or managed voice connection. This can provide greater local independence, but it introduces more components to design, monitor and maintain.

The architecture should be documented before deployment. At minimum, document each site, extension range, public number, call-processing location, internet connection, local survivability method and emergency-calling configuration.

Can employees dial extensions between different office locations?

Yes. Inter-site dialling allows an employee at one location to call an extension at another location using a short extension, a site prefix or a full internal number, depending on the dial-plan design.

For example, a business could use:

Three-digit extensions: 201 for head office and 301 for the warehouse.
Site prefixes: 2-201 for head office and 3-301 for the warehouse.
Unified extensions: 5201 for one user, regardless of the site where their device is registered.
Directory dialling: selecting a person or department from a shared directory instead of remembering a number.

Cisco’s BE4000 Architecture and Design Considerations guide (Cisco, 2019) describes inter-site dialling for businesses with multiple locations, including the use of site-specific dialling patterns. (cisco.com)

The most important factor is consistency. Staff should not need to remember a different procedure for every branch, and the system should make it obvious whether a call is internal, external or being routed through another site.

What is the best extension numbering plan for multiple sites?

The best extension numbering plan is one that identifies the destination site, leaves room for growth and remains simple enough for everyday use. A business with two sites may manage with a shared extension range, while a larger organisation usually benefits from site prefixes or reserved extension blocks.

Numbering approach How it works Strengths Risks to manage
Shared extension range Every user has a unique extension across the organisation Simple directory and user experience Can become difficult to manage as sites and users grow
Site prefix plus extension Users dial a site code followed by the local extension Makes the destination clear and supports expansion Requires staff to learn the site codes
Separate extension blocks Each site receives a reserved range, such as 200–299 or 300–399 Easy to understand and administer Moving users between sites may require renumbering
User-based extension A person keeps the same extension while devices or locations change Works well for mobile and hybrid staff Shared phones, rooms and temporary workstations need a separate plan
Directory-first dialling Staff search for names, teams or locations Reduces reliance on memorised numbers Directory data must be accurate and maintained

A numbering plan should distinguish between people, departments, queues, meeting rooms and shared devices. Giving every physical handset a personal extension can create confusion when employees move between offices or when several people use the same desk phone.

A practical design may reserve one range for users, another for departments and another for site functions. For example, extensions 2xx could represent users at one site, 3xx another site, and 8xx shared services such as reception, security or after-hours support.

Should every site have its own phone system?

Not necessarily. The choice depends on the required level of centralisation, the reliability of each site’s connectivity and whether locations need to continue operating independently during a network failure.

Architecture Where call processing happens Inter-site dialling Site outage behaviour Administration
Single cloud phone system Hosted platform Shared internal dial plan Depends on internet, handsets and failover design Centralised
Centralised on-premises PBX One primary business location Routed across WAN or VPN Other sites may depend heavily on the central site Centralised, with local network work
Separate PBX per site Local system at each site Requires inter-PBX trunks or federation One site can remain locally operational More complex and distributed
Hybrid architecture Combination of hosted and local components Requires mapped routes between platforms Can provide selected local survivability Highest design complexity

A single cloud platform usually gives the cleanest user experience when the business wants one directory, one dial plan and central administration. Separate systems can make sense where sites have independent operations, unreliable wide-area connectivity or existing equipment that cannot yet be replaced.

The distinction is not simply “cloud versus on-premises”. It is whether the chosen design gives the business a controlled path for extension registration, call routing, failover and administration across all sites.

How should inter-site calls be routed?

Inter-site calls should be routed through the private or hosted voice architecture whenever the destination is an internal user, queue or service. The dial plan should recognise the number as internal and send it to the correct site or platform without sending it out to the public telephone network and back again.

A typical routing sequence is:

01The caller dials an extension or site-prefixed internal number.
02The phone system checks the organisation’s dial plan.
03The system identifies the destination site and extension.
04Signalling establishes the call.
05Voice media travels between the endpoints or through the platform’s media services.
06The destination phone, softphone, app or queue rings.

Mitel’s multisite documentation identifies signalling and voice as separate traffic requirements that must be exchanged between sites. (mitel.com)

This distinction matters during troubleshooting. A call may fail because the systems cannot exchange signalling, or it may connect with poor audio because the voice media path is blocked, congested or incorrectly prioritised.

The design should also specify whether voice media travels directly between sites or is anchored through a central service. Direct media may reduce unnecessary traffic paths, while centralised media can simplify policy control, recording and security inspection.

What internet and network design does inter-site dialling need?

Inter-site dialling needs dependable connectivity between each location and the phone system, with enough capacity and suitable treatment for real-time voice traffic. Bandwidth alone is not a complete test: latency, jitter, packet loss, congestion and firewall behaviour can all affect call quality.

ITU guidance on packet-network voice quality identifies packet delay, delay variation and packet loss as important influences on perceived speech quality. (itu.int)

A multi-site readiness check should include:

The internet access method at every site.
Upload as well as download capacity.
Peak-time congestion.
Wi-Fi coverage and handset placement.
Voice VLAN or traffic-segmentation requirements.
Quality-of-service policy on switches, routers and WAN links.
Firewall and session-border-controller rules.
Alternative connectivity or call diversion for critical sites.
Monitoring for packet loss, jitter and latency.

Cisco’s site-management guidance notes that voice allocation and QoS configuration need to be considered separately for each site, rather than assumed to work uniformly across the network. (cisco.com)

Do not size the network only from the number of handsets. Estimate the maximum number of simultaneous calls between and within sites, then account for conferencing, video, backups, cloud applications and other traffic that shares the connection.

How can a business keep calling when one site loses internet access?

A multi site phone system needs an explicit outage plan because a hosted phone platform cannot make a phone at an offline site reachable through that site’s normal connection. The usual controls are local survivability, mobile or alternate-network failover, call diversion and the ability for staff to work from another registered device.

Possible measures include:

A secondary internet connection at critical sites.
4G or 5G failover for the voice network.
Local survivable call processing.
Automatic diversion of the site’s public numbers.
Mobile or desktop softphone access.
Reception overflow to another branch.
Printed or offline emergency contact procedures.
UPS protection for network and voice equipment.

These are design options, not automatic features. Each must be tested under realistic conditions, including a failed primary internet connection, a failed power source and a failure of the central phone service.

A resilient design should define what still works during an outage. For example, local extension-to-extension calls may continue, while external calls divert to mobiles; or the entire site may fail over to another office. Document the expected behaviour so staff know what to do rather than discovering the process during an incident.

How should emergency calling be configured across multiple sites in Australia?

Emergency calling must be configured so the service provider and internal administrators can identify the caller’s relevant location, particularly when users can move between offices or use softphones remotely. In Australia, 000 is the primary emergency number, and ACMA states that VoIP callers may be asked to provide the town and state because they may not be calling from their service address. (acma.gov.au)

ACMA’s emergency-details guidance explains that current address information held by the telco can be important when emergency services need to identify where assistance is required. (acma.gov.au)

For a multi-site deployment, confirm:

Which emergency address is associated with each public number.
Whether the platform supports site-based emergency policies.
How softphone users identify their current location.
Whether reception or security receives an internal notification.
What happens when a user works from a different site.
How address changes are recorded and tested.
What staff are told about providing their location to the emergency operator.

Emergency calling should be treated as a separate workstream in the deployment plan. It should not be assumed that a shared extension or centralised phone account automatically communicates the caller’s physical location.

Businesses using Microsoft Teams Phone or another integrated calling platform should also review site and network-location controls. Microsoft’s emergency calling policy documentation describes assigning policies to network sites and handling users who work outside the corporate network. (learn.microsoft.com)

What should be tested before launching a multi site phone system?

A multi site phone system should be tested from every location, not just from the head office. The test plan should confirm both normal inter-site dialling and the behaviour of the system when a site, link, phone or user is unavailable.

Use this commissioning checklist:

Test area Example test Expected result
Internal dialling Site A calls an extension at Site B Destination rings using the planned internal number
Call transfer Reception transfers an external caller to another site Call reaches the correct person or queue
Busy and unavailable states Destination is busy, offline or in Do Not Disturb The documented fallback rule applies
Shared directory User searches for a colleague at another site Correct name, extension and site appear
Caller identity Staff call between sites and externally Caller ID follows the approved policy
Voice quality Several sites make simultaneous calls Audio remains usable during normal peak traffic
Internet failure Disconnect the primary link at one site Failover or diversion behaves as documented
Power failure Remove power from local network equipment UPS or outage process works as intended
Emergency calling Test according to provider and regulatory requirements Location and notification behaviour are understood
New-site expansion Add a test site or extension Numbering, permissions and routing scale without redesign

A failed test should produce a documented action, owner and retest date. “The phones work” is not enough; the important question is whether calls behave correctly across site boundaries and during exceptions.

What questions should you ask a multi site phone system provider?

Ask the provider to show the proposed architecture, not only the handset catalogue or feature list. The design should explain where call processing occurs, how sites are identified, how extensions are assigned and what happens when connectivity fails.

Use these questions during evaluation:

Can staff dial any site using a consistent internal numbering plan?
Can an external caller be transferred between sites without redialling?
Can each site retain its own public numbers and business-hours rules?
Where does voice media travel during an inter-site call?
What network conditions must each site meet?
Which traffic must be prioritised or allowed through the firewall?
What is the failover behaviour for each site?
Can users keep the same extension when working from another location?
How are shared phones, meeting rooms and queues represented?
How are emergency locations managed for fixed phones and softphones?
Can the provider demonstrate a site-outage test?
What configuration and documentation will be handed over?

A provider should be able to express the answer as a diagram and a dial-plan example. If the explanation depends on vague terms such as “the locations are connected” without showing routing, media paths and failure behaviour, the architecture is not yet specific enough for approval.

For related planning, use.

What are the most common multi-site phone system mistakes?

The most common mistakes are treating multiple sites as separate installations, assigning extensions without a growth plan and failing to test the network and outage paths between locations.

Other recurring problems include:

Using public numbers for internal site-to-site calls.
Duplicating the same extension at different sites without a clear routing rule.
Assuming every site has identical internet performance.
Routing all voice through a central site without checking capacity.
Forgetting that softphone users may work from changing locations.
Treating emergency calling as a standard number-porting task.
Building call flows that only the installer understands.
Launching without testing transfers, queues and after-hours rules.
Failing to document who owns each site’s network and phone configuration.

The fix is to make the dial plan, network assumptions and failure behaviour explicit before installation. A concise design document is more valuable than a long feature list because it gives the business something to test and maintain.

Frequently asked questions about multi site phone systems

Can phones at different offices call each other for free?

They can usually be handled as internal calls when the sites share the same phone platform or are connected through configured inter-site trunks. Whether there is a separate carrier charge depends on the provider, architecture and contract.

Do all sites need the same phone numbers?

No. A shared platform can support separate public numbers for each site while still giving staff one internal directory and dial plan. The number strategy should be decided separately from the extension strategy.

Can one employee use the same extension at different sites?

Yes, if the system assigns the extension to the user rather than permanently to one physical handset. The deployment still needs rules for shared phones, emergency location, caller ID and simultaneous device registration.

Is a VPN required for inter-site dialling?

Not always. Some hosted systems connect sites through the provider’s platform, while other designs use a private WAN, VPN or direct inter-PBX connection. The required method depends on the phone platform, security model, media path and network design.

Talk to Nexgen about your phone system

Get a like-for-like comparison against a managed cloud phone service.

Terms Of Use

Your access to the Nexgen website at https://www.nexgen.com.au is your acceptance of these Terms and Conditions and your access and use of the website is subject to these Terms and Conditions. If you do not accept these Terms and Conditions, you must refrain from using the Website. In these Terms and Conditions, capitalised words have special meanings. These special meanings are set out in the “General” section of this document.

Disclaimer of Liability – General Disclaimer

We are not liable to you or anyone else for any Loss in connection with use of this Website or a Linked Website or the failure to provide this Website.

This general disclaimer is not restricted or modified by any of the following specific warnings and disclaimers.

Disclaimer of Liability – Specific Warnings and Disclaimers

We are not liable to you or anyone else if interference with or damage to your computer systems occurs in connection with use of this Website or a Linked Website. You must take your own precautions to ensure that whatever you select for your use from this Website is free of viruses or anything else (such as worms or trojan horses) that may interfere with or damage the operations of your computer systems.

We may, from time to time, change or add to this Website (including these Terms and Conditions and privacy policy) or information, products or services without notice and your continued use of the Website will constitute acceptance of the variation. However, we do not undertake to keep this Website or these Terms and Conditions updated. We are not liable to you or anyone else if errors occur in the information on this Website or if that information is not up-to-date.

To the extent permitted by applicable law, all representations, warranties and other terms are excluded. You must ensure that your access to this Website is not illegal or prohibited by laws which apply to you or in your location.

To the extent permitted by applicable law, our liability for negligence, breach of contract or contravention of any law as a result of our failure to provide the Website, is limited to providing access to the Website.

You may not use the Website to collect or harvest Personal Information, including Internet addresses, about other users. You must comply with our Acceptable Use Policy available on the Website.

You must abide by any Terms and Conditions posted on the Website. You indemnify us from and against all actions, claims, suits, demands, liabilities, costs or expenses arising out of, or in any way connected to, the use of the Website by you.

Charges

You are responsible for the costs of all Internet access and telecommunications charges incurred when using the Website and accept that your use of the Website is your responsibility and is at your own risk entirely.

Nexgen operates secure servers to minimise the risk of unauthorised use of credit card information but unauthorised credit card use is at your risk.

Copyright

This Website, including without limitation, documents, information, programs and designs is our copyright property.

You are provided with access to it only for your personal and non-commercial use.

Other than for the purposes of and subject to the conditions prescribed under the Copyright Act 1968 (Commonwealth of Australia) and similar statutes that apply in your location, you may not, in any form or by any means:

1. adapt, reproduce, store, distribute, transmit, print, display, perform, publish or create derivative works from any part of this Website; or

2. commercialise any information, products or services obtained from any part of this Website, without our written permission.

Google Online Advertising

Nexgen use the Google AdWords Remarketing service which advertises across the internet to previous visitors to our website.

Google AdWords Remarketing displays relevant advertising content based on which sections of the Nexgen website you have visited. This is done by placing a cookie on your machine. A cookie is a small file sent to your browser from a web server to be stored on your computer. Cookies do not allow access to your computer or any data / files contained in your computer. It will not identify you in any way. Google Adwords Remarketing allow us to tailor our advertising and marketing content so it is relevant and suits your needs.

Any data collected as part of our use of Google Adwords Remarketing will be in accordance with Arrow’s privacy policy and Google’s privacy policy.

If you do not wish to be a part of our Google AdWords Remarketing, you can opt out by visiting Google Ads Preference Manager:

https://www.google.com/settings/ads

Then go to the “opt-out settings” where you can opt out of all interest based ads on Google and across the web.

Trade Marks

Intellectual Property in all materials, documents, information, data, images, logos and trade marks that we provide you or which are contained on the Website are owned or licensed to us and all rights are reserved.

Other product and company names mentioned in this Website may be the trade marks of other people or entities.

If you use any of our trade marks to refer to our activities, products or services, you must include a statement attributing that trade mark to us. You must not use any of our trade marks:

Linked Websites

This Website may contain links to Linked Websites. Those links are provided for convenience only and may not remain current or be maintained. We do not make any representation as to the accuracy or sustainability of any of the information contained on those other sites, and do not accept any responsibility or liability for the conduct or content of those other sites.

Links to those Linked Websites should not be construed as any endorsement, approval, recommendation, or preference by us of the owners or operators of the Sites, or for any information, products or services referred to on those Other Websites.

Unless stated otherwise on this Website, we have:

1. no relationship with the owners or operators of those Linked Websites; and

2. no control over or rights in those Linked Websites.

Personal Information

When transacting with you we may ask you for personal details such as your name, address and email address so that we can accurately identify who is using our services. By accessing the Website you consent to us sending you commercial electronic messages. If you do not want us to send you commercial electronic messages you may ask us not to by sending a blank email to [email protected]

Cookies

“Cookies” are a standard for storing small pieces of data on a web client (ie. the web browser on your computer). Any Web server (including this one) may:

1. store one or more cookies in your browser; or

2. request your browser to transmit the data to the Web server.

This Website may store cookies on your Web client in order to better serve you upon your subsequent visits to this Website.

By using cookies, Websites can track information about visitors’ usage of the site, provide customised content, or even the use of password protection. Note that some browsers can be configured to allow cookies to be accessed by servers other than the originating server.

Please note that most Web browsers can also be configured to notify the user when a cookie is received, allowing you to either accept or reject it. Please refer to the documentation and help screens for your web browser.

Security of Information

Unfortunately, no data transmission over the Internet can be guaranteed as totally secure. Whilst we strive to protect such information, we do not warrant and cannot ensure the security of any information or content which you transmit to us. Accordingly, any information which you transmit to us is transmitted at your own risk. Nevertheless, once we receive your transmission, we will take reasonable steps to preserve the security of such information.

Termination of Access

Access to this Website may be terminated at any time by us without notice. Our disclaimer will nevertheless survive any such termination.

General

In these Terms and Conditions:

1. “Intellectual Property” means any and all intellectual and industrial property rights throughout the world including but not limited to any copyright, trade mark, domain name, business name, design, patent, circuit layout, semi-conductor or other similar proprietary rights and licenses and sub-licenses of such rights (irrespective of whether or not such rights are registered, or formal or informal); trade secrets, technical or non-technical data, knowledge, information or documentation; secret or confidential operations or information; business systems, business methods or business plans (whether registered, formal, informal or otherwise); customer lists, supplier lists and other proprietary lists, names, addresses or information not generally known; techniques, diagrams, data, proofs, prints, particulars, inventions and prototypes.

2. “Linked Websites” means Websites of people other than NexGen which are hyperlinked from this Website.

3. “Loss” means any loss or damage, however caused (including through negligence) which may be directly or indirectly suffered.

4. “Personal Information” means any information from which your identity is apparent or can be reasonably ascertained as defined in the Privacy Act 1988 (Cth).

5. This “Website” means the whole or any part of the web pages located at https://www.nexgen.com.au (including the layout of this Website; individual elements of the Website design; underlying code elements of this Website; or text, sounds, graphics, animated elements or any other content of this Website).

6. “We” and “us” refer to Nexgen Australia Group Pty Ltd trading Nexgen Australiaas and “our” has a similar meaning.

These Terms and Conditions are governed by the laws in force in New South Wales, Australia and you submit to the non-exclusive jurisdiction of the courts of New South Wales, Australia and any courts which may hear appeals from those courts in respect of any proceedings in connection with these Terms and Conditions or this Website.

Nothing contained in these Terms and Conditions derogates from Nexgen’s right to comply with law enforcement requests or requirements relating to your use of this Website or information provided to or gathered by Nexgen with respect to that use.

Nexgen Master Security License Certificate Number is 410 295 251, ID Number 108 216 452 Nexgen is a member of ASIAL.

Privacy Policy

  • 1. About this Document
    • 1.1 This document (“Privacy Policy”) sets out the policy of Nexgen Investment Group Pty Ltd Trading As Nexgen Australia – ABN 88 606 251 503 in respect of the treatment of your Personal Information or your affairs or personal particulars.
  • 2. Interaction with Telecommunications Act 1997 (Cth)
    • 2.1 Nexgen is a Carriage Service Provider and is subject to obligations set out in the Telecommunications Act 1997 (Cth)
    • 2.2 To the extent that any of your Personal Information is also information of the kind referred to section 276 of the Telecommunications Act 1997 (Cth) (in particular, information that relates to your affairs or personal particulars) Nexgen will not use or disclose that information unless permitted by the Telecommunications Act 1997 (Cth) and the Privacy Act 1988 (Cth).
  • 3. Dictionary
    • 3.1 To assist in the understanding of this Privacy Policy, the following capitalized words in this Privacy Policy have the following meanings:
      Carriage Services has the meaning given to that term in the Telecommunications Act 1997 (Cth).
      Carriage Service Provider has the meaning given to that term in the Telecommunications Act 1997 (Cth).
      Personal Information has the meaning given to that term in the Privacy Act 1988 (Cth).
      Related Body Corporate has the meaning given to that term in the Privacy Act 1988 (Cth).
      Sensitive Information has the meaning given to that term in the Privacy Act 1988 (Cth).
      and includes information as to race, political opinion, religious believes, sexual preferences and membership of a professional or trade association.
  • 4. Collection
    • 4.1 1 Nexgen will collect Personal Information from you if that Personal Information is necessary for one or more of Nexgen’s functions or activities.
    • 4.2 Personal Information is predominantly collected so that Nexgen can supply Carriage Services to you (or contact you in respect of a proposed supply of Carriage Services) and perform ancillary and incidental functions. This includes:
      • customer service;
      • complaints handling;
      • billing; and
      • promoting our special offers as well as offers from our Related Bodies Corporate, suppliers and/or affiliated third parties.
    • 4.3 Nexgen may collect Personal Information using several different methods. For example, Personal Information may be collected by Nexgen:
      • directly from you by telephone, email or by completing a form (e.g. Nexgen may be provided with Personal Information on a customer application form, during contractual negotiations, during voice verification etc.); or
      • from third parties such as our Related Bodies Corporate, credit reporting agencies or your representatives; or
      • from information in the public domain – however if it is reasonable and practicable to do so, we will only collected Personal Information about you directly from you.
    • 4.4 Nexgen will take reasonable steps to ensure that you are aware at the time of collection (if practicable):
      • that Nexgen is collecting the Personal Information and as to how to contact Nexgen (if this is not obvious to you);
      • that you may gain access to the Personal Information (see paragraph 9 below);
      • the purpose for which the Personal Information is collected (this may be referring you to this Privacy Policy); done by
      • of the organisations (or types of organisations) to which Nexgen usually discloses Personal Information (this may be done by referring you to this Privacy Policy);
      • of any law that requires the Personal Information to be collected (for example, for compliance with the laws relating to the Integrated Public Number Database); and
      • of the consequences (if any) of Nexgen not collecting the Personal Information (typically, this will be an inability to supply Carriage Services to you).
    • 4.5 If it is not practicable for Nexgen to take reasonable steps to ma e you aware of the matters set out in paragraph 4.4 at the time of collection, Nexgen will do so as soon as practicable after collection.
  • 5. Use and Disclosure
    • 5.1 Nexgen will generally only use Personal Information for the primary purpose for which it was collected (for example, Personal Information set out in a customer application form is collected for Nexgen). the primary purpose of facilitating the supply of Carriage Services by
    • 5.2 However, Nexgen may use or disclose Personal Information for a secondary purpose in the following circumstances:
      Reasonable Expectation
    • 5.3 Nexgen may use or disclose Personal Information for a secondary purpose if:
      • the secondary purpose is related to (or if the Personal Information is Information, directly related to) the primary purpose of collection; and Sensitive
      • you would reasonably expect Nexgen use or disclose the Personal Information for that purpose.
    • 5.4 For example, Nexgen considers that if you are a customer, you would reasonably expect Nexgen to disclose or use your Personal Information to:
      • its printing and mailing house to print and dispatch correspondence and communications to you or
      • notify the customer of special offers or promotions from Nexgen, its Related Bodies Corporate, suppliers and/or affiliated third parties; or
      • ask you to participate in a customer satisfaction survey; or
      • to its dealers, sub-contractors and agents to enable them to perform certain functions on behalf of Nexgen.
  • Consent
    • 5.5 5 Nexgen may use or disclose Personal Information for a secondary purpose if you provide your express consent or consent can be implied.
    • 5.6 Nexgen may seek your consent on an application form for services, during the voice contracting stage of your application or in some other way.
  • Direct Marketing
    • 5.7 Nexgen may use or disclose Personal Information for the secondary purpose of direct marketing.
    • 5.8 Unless paragraphs 5.3 to 5.6 allow Nexgen to otherwise use Personal Information for direct marketing, Nexgen will only use Personal Information for direct marketing to you if:
      • it is not Sensitive Information;
      • it is impracticable for Nexgen to seek your consent before that particular use;
      • Nexgen will not charge you for giving effect to a request by you to not receive direct marketing communications;
      • you have not made a request to Nexgen not to receive direct marketing communications;
      • in each direct marketing communication with you, Nexgen draws to your attention, or prominently displays a notice, that you may express a wish not to receive any further direct marketing communications; and
      • each written direct marketing communication by Nexgen with you sets out Nexgen’s business address and telephone number and, if the communication is made by fax, telex or other electronic means, a number or address at which Nexgen can be directly contacted electronically.
    • 5.9 To avoid doubt, Nexgen will also comply with the Spam Act 2001 (Cth) and Do Not Call Register Act 2006 (Cth) in circumstances of direct marketing to you.
  • Life, Health and Safety
    • 5.10 Nexgen may use or disclose Personal Information if Nexgen reasonably believes that it is necessary to lessen or prevent:
      • a serious and imminent threat to an individual’s life, health or safety; or
      • a serious threat to public health or public safety.
  • Unlawful Activity
    • 5.11 Nexgen may use or disclose Personal Information if Nexgen has reason to suspect that unlawful activity has been, is being, or may be engaged in. However, Nexgen’s use or disclosure will be limited to that which is a necessary part of Nexgen’s investigation into the matter or in reporting Nexgen’s concerns to relevant persons or authorities.
  • Permitted by Law
    • 5.12 Nexgen may use or disclose Personal Information if Nexgen is permitted by law to do so. For example, Nexgen may disclose your Personal Information pursuant to:
      • a law enforcement request;
      • ccourt order or subpoena; or
      • its interception obligations.
  • Disclosure to Enforcement Body
    • 5.13 Nexgen may use or disclose Personal Information if Nexgen is permitted by law to do so. For example, Nexgen may disclose your Personal Information pursuant to an enforcement body (for example, the Australian Federal Police, ASIC, ACCC, police force etc.) if Nexgen believes that it is reasonably necessary for:
      • the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law;
      • the enforcement of laws relating to the confiscation of the proceeds of crime;
      • the protection of the public revenue;
      • the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
      • the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal.
  • 6. Data Quality
    • 6.1 Nexgen will review, on a regular and ongoing basis, its collection and storage practices to ascertain how improvements to accuracy can be achieved.
    • 6.2 Nexgen will also take reasonable steps to make sure that the Personal Information collected, used or disclosed is accurate, complete and current.
  • 7. Data Security
    • 7.1 Nexgen will take reasonable steps to protect the Personal Information it holds from misuse and loss and from unauthorised access, modification or disclosure. It will generally do so by:
      • restricting or limiting the access to Personal Information to those of its employees, agents or contractors who have a ‘need to know’;
      • removing access from employees, agents or contractors who no longer work for or with Nexgen or no longer have a ‘need to know’;
      • reviewing and resetting passwords which provide access to Personal Information with reasonable frequency; and
      • implement enhanced security access features to prevent unauthorised access, use or disclosure.
    • 7.2 Nexgen will take reasonable steps to destroy or permanently de-identify Personal Information if it is no longer needed for any purpose for which the Personal Information may be used or disclosed.
  • 8. Openness
    • 8.1 The Nexgen website will contain a prominently displayed link to this Privacy Statement.
    • 8.2 Nexgen will refer any person to this Privacy Statement if that person requests information on Nexgen’s policy on the management of Personal Information.
    • 8.3 On request by a person, Nexgen will take reasonable steps to let the person know, in general terms, what sort of Personal Information is held and the reasons for which that Personal Information is generally collected. Nexgen will also provide information, in general terms, in respect of how Nexgen holds, uses and discloses that Personal Information.
  • 9. Access and Correction
    • 9.1 1 If Nexgen holds your Personal Information, Nexgen will provide you with access on request to that Personal Information, in particular, so that you can verify the Personal Information is accurate, complete and current. If the Personal Information is not accurate, complete or current, Nexgen will take reasonable steps to remedy the inaccurate, incomplete or outdated Personal Information.
    • 9.2 However, Nexgen will not provide you with access to the extent that:
      • providing access would pose a serious and imminent threat to the life or health of any person; or
      • providing access would have an unreasonable impact upon the privacy of any other person; or
      • the request for access is frivolous or vexatious; or
      • the Personal Information relates to existing or anticipated legal proceedings between Nexgen and yourself, and the Personal Information would not be accessible by the process of discovery in those proceedings; or
      • providing access would reveal Nexgen’s intentions in relation to negotiations with you in such a way as to prejudice those negotiations; or
      • providing access would be unlawful; or
      • denying access is required or authorised by or under law; or
      • providing access activity; or would be likely to prejudice an investigation of possible unlawful
      • providing access would be likely to prejudice:
        • the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law; or
        • the enforcement of laws relating to the confiscation of the proceeds of crime; or a prescribed law; or
        • the protection of the public revenue; or
        • the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
        • the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of its orders; by or on behalf of an enforcement body; or
      • an enforcement body performing a lawful security function asks Nexgen not to provide access to the information on the basis that providing access would be likely to cause damage to the security of Australia.
    • 9.3 Additionally, if providing access would reveal evaluative information generated within Nexgen in connection with a commercially sensitive decision-making process, Nexgen may give you an explanation for the commercially sensitive decision rather than direct access to the information.
    • 9.4 Nexgen reserves the right to charge a fee for searching for and providing access to your Personal Information (except if any other law prohibits Nexgen from charging a fee). In any event,
  • 10. Anonymous Transactions
    • 10.1 Nexgen will allow its customers to transact with it anonymously wherever that is reasonable and practicable.
  • 11. Transferring Personal Information Overseas11.1 Nexgen may transfer Personal Information outside of Australia where Nexgen considers that it is necessary or desirable to do so. However, Nexgen will not transfer your Personal Information outside of Australia unless any of the following circumstances exist:
    • Nexgen reasonably believes that the recipient of the Personal Information is subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are substantially similar to the National Privacy Principles contained in the Privacy Act 1988 (Cth); or
    • you consent to the transfer; or
    • the transfer is necessary for the performance of a contract between Nexgen and yourself, or for the implementation of pre-contractual measures taken in response to the your request; or
    • the transfer is necessary for the conclusion or performance of a contract concluded in your interest between the Nexgen and a third party; or
    • all of the following apply:
      • the transfer is for your benefit;
      • it is impracticable to obtain your consent to that transfer;
      • if it were practicable to obtain your consent, you would be likely to give it; or
    • Nexgen has taken reasonable steps to ensure that the information which it has transferred will not be held, used or disclosed by the recipient of the information inconsistently with the National Privacy Principles contained in the Privacy Act 1988 (Cth).