Phone Systems for Medium Business: How to Size a 20–50 Seat Multi-Site System

Phone Systems for Medium Business: Size Right

On this page

A 20–50 seat business needs more than a collection of desk phones. The right phone system must match peak call demand, connect multiple locations, keep routing manageable and leave room for growth without forcing a redesign.

For this guide, “medium business” means 20–50 users or seats, including organisations with a head office, branch, warehouse, showroom or remote team. Businesses below 20 seats may need a simpler design; larger deployments should be assessed as an enterprise or contact-centre project.

How many phone users does a medium business phone system support?

A medium business phone system should support 20–50 users while allowing different device types, locations, extensions, call queues and business-hour rules. The number of licensed users is only one part of the design; peak simultaneous calls and the way calls are distributed matter just as much.

A 35-person business might need 35 user profiles but only a fraction of those users will be on external calls at the same time. Conversely, a 20-person service team may need more concurrent call capacity than a 50-person professional office if most calls arrive through shared queues.

Start with a user and location register that records:

Number of employees and contractors
Desk-phone users
Laptop or desktop softphone users
Mobile-app users
Shared phones in warehouses, reception areas or meeting rooms
Users who need direct numbers
Users who only need an internal extension
Users who belong to sales, service, reception or support queues

A practical design should also allow new users to be added without changing the core call flows. Cloud platforms commonly support phones, computers and mobile devices over an internet connection, while hosted PBX systems centralise extensions and routing across locations. (comstel.com.au)

If you need to choose specific handsets, headsets or mobile apps, cover that in a separate business handset and softphone guide.

How many concurrent calls does a 20–50 seat business phone system need?

Concurrent call capacity should be based on the busiest periods, not simply on the number of employees. Review call records, queue activity and peak periods to estimate how many external calls are active, waiting or being transferred at the same time.

Use this basic sizing method:

01Identify the busiest 30- or 60-minute period.
02Count inbound and outbound calls active during that period.
03Add calls waiting in queues, calls transferred between teams and calls handled by reception.
04Allow capacity for seasonal peaks, staff changes and unexpected call surges.
05Confirm that the provider’s licensing and trunk model supports the required capacity.

For example, a 30-seat office may have 10 people who regularly make external calls, three reception or service queues and several staff who occasionally call customers. Its design may need materially more call capacity than a 30-seat office where most communication happens through email or Microsoft Teams.

Do not confuse:

Users or seats: people, extensions or licensed accounts
Devices: desk phones, computers, mobiles or shared phones
Numbers: public-facing telephone numbers
Concurrent calls: calls active at the same time
Queue agents: users assigned to answer a shared queue
Call channels or trunks: the capacity available to carry calls

For a more accurate design, use the provider’s call-detail records and queue reports rather than an employee-count rule of thumb. Microsoft’s call-flow guidance also recommends analysing the types and frequency of existing calls before creating auto attendants and queues.

Should a 20–50 seat business choose a cloud or on-premises phone system?

For most 20–50 seat organisations, a cloud phone system is the first option to assess because it can centralise users, numbers and call flows across sites without requiring a PBX server at every office. An on-premises system may still be appropriate where local control, legacy equipment or specialised integration requirements outweigh the operational simplicity of hosted services.

Requirement Cloud phone system On-premises or hybrid phone system
Multiple locations Central administration with site-based routing May require servers, gateways or inter-site configuration
Adding users Usually an administrative change or licence addition May require hardware, licensing or specialist configuration
Remote workers Native desktop and mobile applications are commonly available Often needs VPN, remote gateway or additional configuration
Local hardware dependency Lower, although phones, switches and internet remain important Higher, with PBX, gateways and local support requirements
Business continuity Depends on provider, internet services and configured failover Depends on local power, servers, gateways and backup systems
Existing analogue or legacy devices May need adapters or replacement Often easier to retain during a staged migration
IT ownership Provider manages much of the platform Business or IT partner manages more of the infrastructure
Best fit in the 20–50 seat band Growing, distributed or multi-site businesses Businesses with specific legacy, compliance or integration needs

The choice is not simply “cloud is modern” versus “on-premises is reliable”. The better question is whether your locations, internet services, IT capability and call-routing requirements support the operating model you select.

A hybrid approach can be useful during migration. For example, a business may move its main numbers and queues to a hosted platform while temporarily retaining an analogue alarm line, lift phone or specialist device through an appropriate gateway.

How should a multi-site phone system route calls between locations?

A multi-site phone system should give the business one controlled dial plan while still allowing each location to operate its own hours, teams and public numbers. Staff should be able to call colleagues by extension, transfer calls between sites and route customers to the right location without relying on manual forwarding.

Define the following before selecting or configuring the platform:

Site names and extension ranges
Main number and location-specific numbers
Reception and overflow rules
Sales, service and support queues
Business hours for each location
Public holidays and site closures
After-hours voicemail destinations
Emergency or urgent-call handling
Inter-site transfer rules
Failover destinations if a site loses connectivity

A simple numbering plan might reserve:

100–199 for head office
200–299 for a branch
300–399 for a warehouse or service location
Shared numbers for reception, sales and support queues

The exact numbering scheme is less important than consistency. Avoid using a different logic at every location, because staff and administrators then have to remember exceptions when transferring calls or troubleshooting extensions.

For multi-site administration, look for one management view with permissions that can be delegated to the right people. Microsoft’s guidance on authorised users describes delegated control for auto attendants and call queues, including separate permissions for users who need to change greetings, hours or queue settings.

Do all locations need their own phone numbers?

No. A business can use one main number, location-specific numbers, direct numbers for selected staff, shared queue numbers or a combination of these. The correct arrangement depends on how customers identify each location and how calls need to be answered.

Use one main number when:

Customers expect a single company contact point
A central reception or service team handles most calls
Locations operate similar hours
Staff can identify the caller’s required site from the call flow

Use separate local numbers when:

Customers contact branches directly
Locations have different opening hours
Each site manages its own bookings or service calls
Local identity is important
Calls need to report separately by location

Use shared queue numbers when:

Several people answer the same function
Calls should follow the available agent rather than a fixed desk
You need overflow or timeout handling
A manager needs queue-level reporting

When changing providers, Australian businesses can generally retain eligible local numbers through number porting. The ACMA’s Local Number Portability Code sets operational processes and target timeframes, although complex ports and multiple services can take longer than a simple single-number port.

Porting should be treated as a project dependency rather than a last-minute administration task. Confirm the account holder, service address, numbers, billing records, existing services and cutover plan before the new system is configured.

What internet and network capacity does a 20–50 seat VoIP system require?

A 20–50 seat VoIP system needs a business-grade network that can prioritise voice traffic, maintain stable connectivity and separate phone traffic from uncontrolled data usage. The required internet speed cannot be determined from seat count alone because codec choice, video use, concurrent calls, cloud applications and network design all affect performance.

Assess each site for:

Internet service type and upload capacity
Expected peak simultaneous calls
Wi-Fi coverage for mobile or wireless devices
Switch capacity and Power over Ethernet availability
Voice VLAN capability
Firewall and router support
Traffic prioritisation or QoS
Backup internet or 4G/5G failover
Power protection for network equipment
Local cabling and patching condition

Voice quality depends on the complete connection between the phone, local network, internet service provider and hosted platform. NBN’s Traffic Class 1 guidance explains that business-grade voice traffic can use a wholesale traffic class designed for voice, while also noting that the customer experience depends on equipment, software, service design and other factors outside the nbn access network.

Do not assume that buying more bandwidth fixes every voice problem. Congestion, poor Wi-Fi, misconfigured firewalls, packet loss, jitter, inadequate switching or a failing router can affect calls even when a speed test reports a high download rate.

For multi-site businesses, test each office separately. The head office may have an excellent connection while a small branch, warehouse or medical room has unstable internet, weak Wi-Fi or no practical backup path.

How should a business phone system handle outages and after-hours calls?

An outage plan should decide where calls go when a user, location, internet connection or provider service is unavailable. The plan should be designed before installation and tested after configuration.

Failure or exception Possible call treatment Configuration question
One user is unavailable Ring another user or shared queue Who owns the backup responsibility?
Queue has no available agents Send to voicemail, overflow queue or alternate site What is the maximum acceptable wait?
Site internet fails Divert to another site or mobile destination Which location can answer?
Main number is unavailable Use a backup number or published contingency contact Who activates the fallback?
Business is closed Play an after-hours message and offer voicemail Does each site have different hours?
Public holiday Use a holiday message or alternate service team Who maintains the holiday calendar?
Power outage at a site Use mobile or remote applications Which users are authorised to answer?

Cloud routing can help a business continue receiving calls when a local office is unavailable, but it does not remove the need for working internet, power, configured destinations and people available to answer.

At minimum, test:

Main number routing
Queue overflow
No-agent handling
After-hours routing
Holiday routing
Site-to-site transfers
Mobile-app or softphone login
Backup internet
Voicemail access
Emergency calling arrangements

Avoid promising “zero downtime” or assuming failover works because it appears in a product brochure. A failover route is only useful when its destination, permissions, devices and activation process have been tested.

Which phone system features matter most for 20–50 seats?

The most important features are the ones that make calls easy to answer, transfer, monitor and recover across users and locations. Choose features based on call patterns rather than selecting the longest available feature list.

Prioritise:

01Auto attendantsfor structured main-number routing.
02Call queuesfor sales, service, bookings or support teams.
03Business-hours and holiday rulesfor each location.
04Overflow and timeout handlingso calls do not remain unanswered indefinitely.
05Shared voicemailfor teams rather than one person.
06Desktop and mobile applicationsfor remote or travelling staff.
07Presence and status toolsto reduce blind transfers.
08Call reportingfor queue demand, missed calls and service levels.
09Number portabilityso the business can change providers without changing public numbers.
10Role-based administrationso routine changes do not depend on one technical administrator.

Auto attendants should remain simple. Microsoft recommends keeping menu choices to five or fewer and using terminology callers understand; its call-flow design documentation also covers business hours, holidays, queues, overflow and routing destinations.

Avoid adding features that no one will own. Call recording, transcription, CRM integration, SMS, analytics and AI functions can be useful, but each needs a policy, administrator, user workflow and cost assessment.

If you need a detailed feature-by-feature comparison, link this article to a cloud phone system features checklist.

How much should a 20–50 seat business phone system cost?

The total cost depends on user licences, call charges, numbers, handsets, network changes, installation, integrations, support and contract terms. A per-user price alone is not enough to compare proposals.

Request quotes using the same scope:

Number of users and sites
Number of public numbers
Estimated concurrent calls
Desk phones and shared phones
Softphone or mobile-app users
Queues and auto attendants
Call recording or transcription
CRM or Microsoft 365 integration
Number porting
Network remediation
Installation and training
Support hours and escalation
Backup connectivity
Contract term and exit conditions
Cost area Questions to ask before comparing quotes
User licences Are reception, shared phones and occasional users licensed differently?
Call charges Are Australian landlines, mobiles, 13, 1300 and 1800 numbers included or metered?
Numbers Are new numbers, porting and temporary numbers included?
Hardware Are phones purchased, leased, rented or supplied as part of a contract?
Setup Does the price include call-flow design, configuration and testing?
Network Are switches, cabling, QoS, firewalls or backup links excluded?
Integrations Are CRM, Teams, recording or reporting features extra?
Support Is support local, business-hours only or available after hours?
Growth Can users and sites be added without a new platform or migration?

Do not compare a basic user licence from one provider with a fully managed multi-site proposal from another. Ask each provider to separate recurring charges, one-off charges, optional features and excluded work.

For help scoping the project, use Nexgen Australia’s business communications assessment or request a multi-site phone system consultation.

What should be included in a phone system implementation plan?

A suitable implementation plan should move from discovery to testing, training and controlled cutover. For a 20–50 seat business, the plan should include every site, queue, number, user type and exception route—not just the phones on desks.

A practical plan includes:

01Discoverydocument users, sites, numbers, devices, call patterns and hours.
02Network reviewcheck internet, switching, Wi-Fi, firewall, VLAN and power requirements.
03Call-flow designmap main numbers, menus, queues, transfers, overflow and after-hours paths.
04Number preparationverify ownership and submit porting information early.
05Configurationcreate users, extensions, permissions, queues and site rules.
06Pilottest with a small group from each location.
07User trainingshow answering, transferring, voicemail, status and mobile-app use.
08Cutoverschedule the change with named owners and a fallback plan.
09Validationtest inbound, outbound, internal, queue, after-hours and failover calls.
10Handoverprovide administrator access, documentation and change procedures.

The pilot should include the busiest queue and the least reliable location. Testing only at head office can hide the exact problems that affect branches, warehouses and remote users.

For a staged migration, see business phone system installation and porting.

How do you compare phone systems for a 20–50 seat multi-site business?

Compare systems against the business’s call flows, locations, network conditions and administration model rather than choosing solely by brand or monthly licence price. The strongest option is the one that can be operated reliably by the people responsible for day-to-day changes.

Score each proposal against:

Capacity for current and forecast users
Concurrent call and queue requirements
Multi-site numbering and routing
Business-hours and holiday controls
Mobile and remote-worker support
Network and outage requirements
Reporting and missed-call visibility
Number porting plan
Administrative permissions
Support response and escalation
Integration requirements
Total cost over the contract term

Ask the provider to demonstrate your own call flows using realistic examples:

A customer calls the main number and selects service.
A branch is closed while head office remains open.
A queue has no available agents.
A staff member transfers a call to another site.
A user answers from a mobile application.
The internet connection at one branch fails.
A manager needs to change a greeting without changing the entire system.

A demonstration using your call scenarios reveals more than a generic product tour. It also exposes whether a feature is included, requires extra licensing or depends on ongoing provider assistance.

Frequently asked questions about phone systems for medium business

Is 20 users too small for a multi-site cloud phone system?

No. A 20-user organisation may benefit from a multi-site design when it has multiple branches, shared queues, remote staff or different operating hours. The system should still be sized around actual call demand and administration requirements rather than user count alone.

Does every employee need a desk phone?

No. Desk phones suit reception, customer-facing teams and fixed workstations, while softphones and mobile applications may suit remote, travelling or infrequent callers. Use a device mix that reflects each role instead of issuing identical hardware to every user.

Can a business keep its existing phone numbers when changing systems?

In many cases, eligible Australian geographic, local-rate and freephone numbers can be ported to a new provider. Confirm number ownership, service details and porting requirements early because complex services or multiple numbers may need additional preparation.

What is the biggest sizing mistake for a 20–50 seat phone system?

The biggest mistake is sizing licences and handsets without measuring concurrent calls, queues, site connectivity and failover requirements. A system can have enough user accounts but still deliver a poor experience if callers cannot reach an available team or a branch loses connectivity.

Talk to Nexgen about your phone system

Get a like-for-like comparison against a managed cloud phone service.

Terms Of Use

Your access to the Nexgen website at https://www.nexgen.com.au is your acceptance of these Terms and Conditions and your access and use of the website is subject to these Terms and Conditions. If you do not accept these Terms and Conditions, you must refrain from using the Website. In these Terms and Conditions, capitalised words have special meanings. These special meanings are set out in the “General” section of this document.

Disclaimer of Liability – General Disclaimer

We are not liable to you or anyone else for any Loss in connection with use of this Website or a Linked Website or the failure to provide this Website.

This general disclaimer is not restricted or modified by any of the following specific warnings and disclaimers.

Disclaimer of Liability – Specific Warnings and Disclaimers

We are not liable to you or anyone else if interference with or damage to your computer systems occurs in connection with use of this Website or a Linked Website. You must take your own precautions to ensure that whatever you select for your use from this Website is free of viruses or anything else (such as worms or trojan horses) that may interfere with or damage the operations of your computer systems.

We may, from time to time, change or add to this Website (including these Terms and Conditions and privacy policy) or information, products or services without notice and your continued use of the Website will constitute acceptance of the variation. However, we do not undertake to keep this Website or these Terms and Conditions updated. We are not liable to you or anyone else if errors occur in the information on this Website or if that information is not up-to-date.

To the extent permitted by applicable law, all representations, warranties and other terms are excluded. You must ensure that your access to this Website is not illegal or prohibited by laws which apply to you or in your location.

To the extent permitted by applicable law, our liability for negligence, breach of contract or contravention of any law as a result of our failure to provide the Website, is limited to providing access to the Website.

You may not use the Website to collect or harvest Personal Information, including Internet addresses, about other users. You must comply with our Acceptable Use Policy available on the Website.

You must abide by any Terms and Conditions posted on the Website. You indemnify us from and against all actions, claims, suits, demands, liabilities, costs or expenses arising out of, or in any way connected to, the use of the Website by you.

Charges

You are responsible for the costs of all Internet access and telecommunications charges incurred when using the Website and accept that your use of the Website is your responsibility and is at your own risk entirely.

Nexgen operates secure servers to minimise the risk of unauthorised use of credit card information but unauthorised credit card use is at your risk.

Copyright

This Website, including without limitation, documents, information, programs and designs is our copyright property.

You are provided with access to it only for your personal and non-commercial use.

Other than for the purposes of and subject to the conditions prescribed under the Copyright Act 1968 (Commonwealth of Australia) and similar statutes that apply in your location, you may not, in any form or by any means:

1. adapt, reproduce, store, distribute, transmit, print, display, perform, publish or create derivative works from any part of this Website; or

2. commercialise any information, products or services obtained from any part of this Website, without our written permission.

Google Online Advertising

Nexgen use the Google AdWords Remarketing service which advertises across the internet to previous visitors to our website.

Google AdWords Remarketing displays relevant advertising content based on which sections of the Nexgen website you have visited. This is done by placing a cookie on your machine. A cookie is a small file sent to your browser from a web server to be stored on your computer. Cookies do not allow access to your computer or any data / files contained in your computer. It will not identify you in any way. Google Adwords Remarketing allow us to tailor our advertising and marketing content so it is relevant and suits your needs.

Any data collected as part of our use of Google Adwords Remarketing will be in accordance with Arrow’s privacy policy and Google’s privacy policy.

If you do not wish to be a part of our Google AdWords Remarketing, you can opt out by visiting Google Ads Preference Manager:

https://www.google.com/settings/ads

Then go to the “opt-out settings” where you can opt out of all interest based ads on Google and across the web.

Trade Marks

Intellectual Property in all materials, documents, information, data, images, logos and trade marks that we provide you or which are contained on the Website are owned or licensed to us and all rights are reserved.

Other product and company names mentioned in this Website may be the trade marks of other people or entities.

If you use any of our trade marks to refer to our activities, products or services, you must include a statement attributing that trade mark to us. You must not use any of our trade marks:

Linked Websites

This Website may contain links to Linked Websites. Those links are provided for convenience only and may not remain current or be maintained. We do not make any representation as to the accuracy or sustainability of any of the information contained on those other sites, and do not accept any responsibility or liability for the conduct or content of those other sites.

Links to those Linked Websites should not be construed as any endorsement, approval, recommendation, or preference by us of the owners or operators of the Sites, or for any information, products or services referred to on those Other Websites.

Unless stated otherwise on this Website, we have:

1. no relationship with the owners or operators of those Linked Websites; and

2. no control over or rights in those Linked Websites.

Personal Information

When transacting with you we may ask you for personal details such as your name, address and email address so that we can accurately identify who is using our services. By accessing the Website you consent to us sending you commercial electronic messages. If you do not want us to send you commercial electronic messages you may ask us not to by sending a blank email to [email protected]

Cookies

“Cookies” are a standard for storing small pieces of data on a web client (ie. the web browser on your computer). Any Web server (including this one) may:

1. store one or more cookies in your browser; or

2. request your browser to transmit the data to the Web server.

This Website may store cookies on your Web client in order to better serve you upon your subsequent visits to this Website.

By using cookies, Websites can track information about visitors’ usage of the site, provide customised content, or even the use of password protection. Note that some browsers can be configured to allow cookies to be accessed by servers other than the originating server.

Please note that most Web browsers can also be configured to notify the user when a cookie is received, allowing you to either accept or reject it. Please refer to the documentation and help screens for your web browser.

Security of Information

Unfortunately, no data transmission over the Internet can be guaranteed as totally secure. Whilst we strive to protect such information, we do not warrant and cannot ensure the security of any information or content which you transmit to us. Accordingly, any information which you transmit to us is transmitted at your own risk. Nevertheless, once we receive your transmission, we will take reasonable steps to preserve the security of such information.

Termination of Access

Access to this Website may be terminated at any time by us without notice. Our disclaimer will nevertheless survive any such termination.

General

In these Terms and Conditions:

1. “Intellectual Property” means any and all intellectual and industrial property rights throughout the world including but not limited to any copyright, trade mark, domain name, business name, design, patent, circuit layout, semi-conductor or other similar proprietary rights and licenses and sub-licenses of such rights (irrespective of whether or not such rights are registered, or formal or informal); trade secrets, technical or non-technical data, knowledge, information or documentation; secret or confidential operations or information; business systems, business methods or business plans (whether registered, formal, informal or otherwise); customer lists, supplier lists and other proprietary lists, names, addresses or information not generally known; techniques, diagrams, data, proofs, prints, particulars, inventions and prototypes.

2. “Linked Websites” means Websites of people other than NexGen which are hyperlinked from this Website.

3. “Loss” means any loss or damage, however caused (including through negligence) which may be directly or indirectly suffered.

4. “Personal Information” means any information from which your identity is apparent or can be reasonably ascertained as defined in the Privacy Act 1988 (Cth).

5. This “Website” means the whole or any part of the web pages located at https://www.nexgen.com.au (including the layout of this Website; individual elements of the Website design; underlying code elements of this Website; or text, sounds, graphics, animated elements or any other content of this Website).

6. “We” and “us” refer to Nexgen Australia Group Pty Ltd trading Nexgen Australiaas and “our” has a similar meaning.

These Terms and Conditions are governed by the laws in force in New South Wales, Australia and you submit to the non-exclusive jurisdiction of the courts of New South Wales, Australia and any courts which may hear appeals from those courts in respect of any proceedings in connection with these Terms and Conditions or this Website.

Nothing contained in these Terms and Conditions derogates from Nexgen’s right to comply with law enforcement requests or requirements relating to your use of this Website or information provided to or gathered by Nexgen with respect to that use.

Nexgen Master Security License Certificate Number is 410 295 251, ID Number 108 216 452 Nexgen is a member of ASIAL.

Privacy Policy

  • 1. About this Document
    • 1.1 This document (“Privacy Policy”) sets out the policy of Nexgen Investment Group Pty Ltd Trading As Nexgen Australia – ABN 88 606 251 503 in respect of the treatment of your Personal Information or your affairs or personal particulars.
  • 2. Interaction with Telecommunications Act 1997 (Cth)
    • 2.1 Nexgen is a Carriage Service Provider and is subject to obligations set out in the Telecommunications Act 1997 (Cth)
    • 2.2 To the extent that any of your Personal Information is also information of the kind referred to section 276 of the Telecommunications Act 1997 (Cth) (in particular, information that relates to your affairs or personal particulars) Nexgen will not use or disclose that information unless permitted by the Telecommunications Act 1997 (Cth) and the Privacy Act 1988 (Cth).
  • 3. Dictionary
    • 3.1 To assist in the understanding of this Privacy Policy, the following capitalized words in this Privacy Policy have the following meanings:
      Carriage Services has the meaning given to that term in the Telecommunications Act 1997 (Cth).
      Carriage Service Provider has the meaning given to that term in the Telecommunications Act 1997 (Cth).
      Personal Information has the meaning given to that term in the Privacy Act 1988 (Cth).
      Related Body Corporate has the meaning given to that term in the Privacy Act 1988 (Cth).
      Sensitive Information has the meaning given to that term in the Privacy Act 1988 (Cth).
      and includes information as to race, political opinion, religious believes, sexual preferences and membership of a professional or trade association.
  • 4. Collection
    • 4.1 1 Nexgen will collect Personal Information from you if that Personal Information is necessary for one or more of Nexgen’s functions or activities.
    • 4.2 Personal Information is predominantly collected so that Nexgen can supply Carriage Services to you (or contact you in respect of a proposed supply of Carriage Services) and perform ancillary and incidental functions. This includes:
      • customer service;
      • complaints handling;
      • billing; and
      • promoting our special offers as well as offers from our Related Bodies Corporate, suppliers and/or affiliated third parties.
    • 4.3 Nexgen may collect Personal Information using several different methods. For example, Personal Information may be collected by Nexgen:
      • directly from you by telephone, email or by completing a form (e.g. Nexgen may be provided with Personal Information on a customer application form, during contractual negotiations, during voice verification etc.); or
      • from third parties such as our Related Bodies Corporate, credit reporting agencies or your representatives; or
      • from information in the public domain – however if it is reasonable and practicable to do so, we will only collected Personal Information about you directly from you.
    • 4.4 Nexgen will take reasonable steps to ensure that you are aware at the time of collection (if practicable):
      • that Nexgen is collecting the Personal Information and as to how to contact Nexgen (if this is not obvious to you);
      • that you may gain access to the Personal Information (see paragraph 9 below);
      • the purpose for which the Personal Information is collected (this may be referring you to this Privacy Policy); done by
      • of the organisations (or types of organisations) to which Nexgen usually discloses Personal Information (this may be done by referring you to this Privacy Policy);
      • of any law that requires the Personal Information to be collected (for example, for compliance with the laws relating to the Integrated Public Number Database); and
      • of the consequences (if any) of Nexgen not collecting the Personal Information (typically, this will be an inability to supply Carriage Services to you).
    • 4.5 If it is not practicable for Nexgen to take reasonable steps to ma e you aware of the matters set out in paragraph 4.4 at the time of collection, Nexgen will do so as soon as practicable after collection.
  • 5. Use and Disclosure
    • 5.1 Nexgen will generally only use Personal Information for the primary purpose for which it was collected (for example, Personal Information set out in a customer application form is collected for Nexgen). the primary purpose of facilitating the supply of Carriage Services by
    • 5.2 However, Nexgen may use or disclose Personal Information for a secondary purpose in the following circumstances:
      Reasonable Expectation
    • 5.3 Nexgen may use or disclose Personal Information for a secondary purpose if:
      • the secondary purpose is related to (or if the Personal Information is Information, directly related to) the primary purpose of collection; and Sensitive
      • you would reasonably expect Nexgen use or disclose the Personal Information for that purpose.
    • 5.4 For example, Nexgen considers that if you are a customer, you would reasonably expect Nexgen to disclose or use your Personal Information to:
      • its printing and mailing house to print and dispatch correspondence and communications to you or
      • notify the customer of special offers or promotions from Nexgen, its Related Bodies Corporate, suppliers and/or affiliated third parties; or
      • ask you to participate in a customer satisfaction survey; or
      • to its dealers, sub-contractors and agents to enable them to perform certain functions on behalf of Nexgen.
  • Consent
    • 5.5 5 Nexgen may use or disclose Personal Information for a secondary purpose if you provide your express consent or consent can be implied.
    • 5.6 Nexgen may seek your consent on an application form for services, during the voice contracting stage of your application or in some other way.
  • Direct Marketing
    • 5.7 Nexgen may use or disclose Personal Information for the secondary purpose of direct marketing.
    • 5.8 Unless paragraphs 5.3 to 5.6 allow Nexgen to otherwise use Personal Information for direct marketing, Nexgen will only use Personal Information for direct marketing to you if:
      • it is not Sensitive Information;
      • it is impracticable for Nexgen to seek your consent before that particular use;
      • Nexgen will not charge you for giving effect to a request by you to not receive direct marketing communications;
      • you have not made a request to Nexgen not to receive direct marketing communications;
      • in each direct marketing communication with you, Nexgen draws to your attention, or prominently displays a notice, that you may express a wish not to receive any further direct marketing communications; and
      • each written direct marketing communication by Nexgen with you sets out Nexgen’s business address and telephone number and, if the communication is made by fax, telex or other electronic means, a number or address at which Nexgen can be directly contacted electronically.
    • 5.9 To avoid doubt, Nexgen will also comply with the Spam Act 2001 (Cth) and Do Not Call Register Act 2006 (Cth) in circumstances of direct marketing to you.
  • Life, Health and Safety
    • 5.10 Nexgen may use or disclose Personal Information if Nexgen reasonably believes that it is necessary to lessen or prevent:
      • a serious and imminent threat to an individual’s life, health or safety; or
      • a serious threat to public health or public safety.
  • Unlawful Activity
    • 5.11 Nexgen may use or disclose Personal Information if Nexgen has reason to suspect that unlawful activity has been, is being, or may be engaged in. However, Nexgen’s use or disclosure will be limited to that which is a necessary part of Nexgen’s investigation into the matter or in reporting Nexgen’s concerns to relevant persons or authorities.
  • Permitted by Law
    • 5.12 Nexgen may use or disclose Personal Information if Nexgen is permitted by law to do so. For example, Nexgen may disclose your Personal Information pursuant to:
      • a law enforcement request;
      • ccourt order or subpoena; or
      • its interception obligations.
  • Disclosure to Enforcement Body
    • 5.13 Nexgen may use or disclose Personal Information if Nexgen is permitted by law to do so. For example, Nexgen may disclose your Personal Information pursuant to an enforcement body (for example, the Australian Federal Police, ASIC, ACCC, police force etc.) if Nexgen believes that it is reasonably necessary for:
      • the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law;
      • the enforcement of laws relating to the confiscation of the proceeds of crime;
      • the protection of the public revenue;
      • the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
      • the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal.
  • 6. Data Quality
    • 6.1 Nexgen will review, on a regular and ongoing basis, its collection and storage practices to ascertain how improvements to accuracy can be achieved.
    • 6.2 Nexgen will also take reasonable steps to make sure that the Personal Information collected, used or disclosed is accurate, complete and current.
  • 7. Data Security
    • 7.1 Nexgen will take reasonable steps to protect the Personal Information it holds from misuse and loss and from unauthorised access, modification or disclosure. It will generally do so by:
      • restricting or limiting the access to Personal Information to those of its employees, agents or contractors who have a ‘need to know’;
      • removing access from employees, agents or contractors who no longer work for or with Nexgen or no longer have a ‘need to know’;
      • reviewing and resetting passwords which provide access to Personal Information with reasonable frequency; and
      • implement enhanced security access features to prevent unauthorised access, use or disclosure.
    • 7.2 Nexgen will take reasonable steps to destroy or permanently de-identify Personal Information if it is no longer needed for any purpose for which the Personal Information may be used or disclosed.
  • 8. Openness
    • 8.1 The Nexgen website will contain a prominently displayed link to this Privacy Statement.
    • 8.2 Nexgen will refer any person to this Privacy Statement if that person requests information on Nexgen’s policy on the management of Personal Information.
    • 8.3 On request by a person, Nexgen will take reasonable steps to let the person know, in general terms, what sort of Personal Information is held and the reasons for which that Personal Information is generally collected. Nexgen will also provide information, in general terms, in respect of how Nexgen holds, uses and discloses that Personal Information.
  • 9. Access and Correction
    • 9.1 1 If Nexgen holds your Personal Information, Nexgen will provide you with access on request to that Personal Information, in particular, so that you can verify the Personal Information is accurate, complete and current. If the Personal Information is not accurate, complete or current, Nexgen will take reasonable steps to remedy the inaccurate, incomplete or outdated Personal Information.
    • 9.2 However, Nexgen will not provide you with access to the extent that:
      • providing access would pose a serious and imminent threat to the life or health of any person; or
      • providing access would have an unreasonable impact upon the privacy of any other person; or
      • the request for access is frivolous or vexatious; or
      • the Personal Information relates to existing or anticipated legal proceedings between Nexgen and yourself, and the Personal Information would not be accessible by the process of discovery in those proceedings; or
      • providing access would reveal Nexgen’s intentions in relation to negotiations with you in such a way as to prejudice those negotiations; or
      • providing access would be unlawful; or
      • denying access is required or authorised by or under law; or
      • providing access activity; or would be likely to prejudice an investigation of possible unlawful
      • providing access would be likely to prejudice:
        • the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law; or
        • the enforcement of laws relating to the confiscation of the proceeds of crime; or a prescribed law; or
        • the protection of the public revenue; or
        • the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
        • the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of its orders; by or on behalf of an enforcement body; or
      • an enforcement body performing a lawful security function asks Nexgen not to provide access to the information on the basis that providing access would be likely to cause damage to the security of Australia.
    • 9.3 Additionally, if providing access would reveal evaluative information generated within Nexgen in connection with a commercially sensitive decision-making process, Nexgen may give you an explanation for the commercially sensitive decision rather than direct access to the information.
    • 9.4 Nexgen reserves the right to charge a fee for searching for and providing access to your Personal Information (except if any other law prohibits Nexgen from charging a fee). In any event,
  • 10. Anonymous Transactions
    • 10.1 Nexgen will allow its customers to transact with it anonymously wherever that is reasonable and practicable.
  • 11. Transferring Personal Information Overseas11.1 Nexgen may transfer Personal Information outside of Australia where Nexgen considers that it is necessary or desirable to do so. However, Nexgen will not transfer your Personal Information outside of Australia unless any of the following circumstances exist:
    • Nexgen reasonably believes that the recipient of the Personal Information is subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are substantially similar to the National Privacy Principles contained in the Privacy Act 1988 (Cth); or
    • you consent to the transfer; or
    • the transfer is necessary for the performance of a contract between Nexgen and yourself, or for the implementation of pre-contractual measures taken in response to the your request; or
    • the transfer is necessary for the conclusion or performance of a contract concluded in your interest between the Nexgen and a third party; or
    • all of the following apply:
      • the transfer is for your benefit;
      • it is impracticable to obtain your consent to that transfer;
      • if it were practicable to obtain your consent, you would be likely to give it; or
    • Nexgen has taken reasonable steps to ensure that the information which it has transferred will not be held, used or disclosed by the recipient of the information inconsistently with the National Privacy Principles contained in the Privacy Act 1988 (Cth).