It also explains how to contact us to correct, update or delete any personal data provided to us, or make a complaint if you have concerns.
We will only collect and process personal data about you where we have a lawful basis to do so. Lawful basis includes consent (where you have given consent), use of our service (where processing is necessary for the delivery of services to you) and legitimate interests (including security threats or frauds, risk of harm to self or others, compliance with applicable laws, and enabling us to administer our service).
Unless otherwise indicated by the context words importing the singular include the plural and vice versa.
Personal data is defined as data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which the organisation has or is likely to have access.
We collect most personal data directly from you when you consent to use our services or receive communications from us. Your consent may be express (e.g. you agree to the use of your information by ticking a box) or implied by an action you take or do not take (i.e. because you have agreed to terms and conditions that contain information about the use or disclosure of your information).
You provide us your information when you use our services or you use our website generally or you deal with us.
We collect demographic and personally identifiable information. That personally identifiable information may include (but not be limited to):
We may collect these types of personal data either directly from you, or from third parties. We may collect this information when you:
You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the features of our services or our website.
We may collect your personal data when required by law but generally we collect personal data from you (or about you) to allow us to:
Personal data collected or received by us will only be used for the stated purpose for which it was provided.
We may collect, hold, use and disclose your personal data for the following purposes:
If personal data is disclosed to a third party, we are required to take all reasonable steps to ensure your personal data is treated in accordance with the laws that apply to personal data in that country. We may also disclose your personal data to a trusted third party who also holds other information about you. This third party may combine that information in order to enable it and us to develop anonymized consumer insights so that we can better understand your preferences and interests, personalize your experience and enhance the products and services that you receive.
We do not sell your personal data. We may aggregate the information you and others make available to us and share it with third parties.
We may use, sell, license, and share this aggregated information with third parties for research or other purposes such as to improve our services or to help our partners understand more about the users of our service issues.
We and/or our carefully selected business partners may send you direct marketing communications and information about our service and products. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the laws of your country. You may opt-out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (eg an unsubscribe link).
You can object to us using your information for these purposes.
You are not obligated to provide us with your personal data. You may choose whether you receive communications from us. Whilst it is your choice not to provide your personal data to us this may impede our ability to provide you with all the functionality of our services and website.
Should you wish to remove yourself from our database you may do so at any time by contacting us by emailing us at email@example.com
At any time, you may contact us and request your personal data be modified. We will make all efforts to correct data once we have proved your identity.
We will deal with all requests for access to personal data as quickly as possible, but no later than the prescribed time required by law (unless any complexities arise). Requests for a large amount of information, or information which is not currently in use, may require further time before a response can be given.
We will provide you your personal data in a structured, commonly used, machine-readable format.
In some cases, we will refuse to give you access to personal data we hold about you. This includes, but is not limited to, circumstances where giving you access would: be unlawful; have an unreasonable impact on other people’s privacy; prejudice an investigation of unlawful activity; reveal our intentions in relation to negotiations with you so as to prejudice those negotiations; prejudice enforcement related activities conducted by, or on behalf of, an enforcement body; reveal evaluative information generated within our business in connection with a commercially sensitive decision-making process.
We will also refuse access where the personal data relates to existing or anticipated legal proceedings, and the information would not be accessible by the process of discovery in those proceedings. Further, we will refuse access where your request is frivolous or vexatious, and where we reasonably believe that unlawful activity, or misconduct of a serious nature, is being or may be engaged in against us and giving access would be likely to prejudice the taking of appropriate action in relation to that matter.
If we refuse to give you access we will provide you with reasons for our refusal, unless doing so would be unreasonable in the circumstances. We will also take reasonable steps to give you access in a way that meets your needs without giving rise to the reasons of our refusal. Further, we will provide details of how you may make a complaint about our decision.
For us to provide excellent service we are required to store some personal data and take the greatest of care to ensure this information is treated as private and confidential. Transmitting personal data via the internet does have inherent risks associated with it. We will however take all reasonable steps to ensure the security of this data.
We have taken the necessary measures to ensure the personal data we hold is not compromised. In accordance with and as permitted by applicable law and regulations we will retain your information as long necessary to serve you, to maintain your account or as otherwise required to operate our service.
Our third party data storage centre is equipped with the latest technology, infrastructure and dedicated technical staff to ensure our working environment has reliability and security for your data. However, we cannot be held liable for events outside our control particularly with respect to third parties who act as repositories of your information.
Our website is protected by security certificates and are built considering all modern security stands where possible. We will take reasonable steps to maintain the integrity and security of any personal data we have stored, including taking reasonable steps to prevent interference and loss, misuse, unauthorised access, modification or disclosure of such personal data.
Note that no information transmitted over the Internet can be guaranteed to be completely secure. While we will endeavour to protect your personal data as best as possible we cannot guarantee the security of any information that you transmit to us or receive from us. The transmission and exchange of information is carried out at your own risk.
We have obligations to notify you if you are affected by a data breach. We will take all reasonable precautions to take remedial action to prevent such an event. However, as we cannot guarantee that remedial action will be sufficient to prevent all instances of a breach, we will take steps to notify you of an eligible data breach as soon as practicable and provide recommendations as to what steps you should take to mitigate any serious issues.
Whenever you use our website, or in a case of an error within the website, we collect data and information (through third party products) called Log Data. This Log Data may include information such as your device, Internet Protocol address, device name, operating system version, the configuration of the device when utilizing our website, the time and date of your use of our website and other statistics.
We may transfer data we receive about you, including all personal data, to our hosting service providers and data centres located overseas, such as an Amazon Web Services node in countries such the United States of America. You hereby expressly and voluntarily grant your informed consent to such transfers. Transfers out of your country will be protected by appropriate safeguards.
You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology. While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.
Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:
Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all the features on our website.
If you think your personal data, held by us, may have been compromised in any way or you have any other Privacy related complaints or issues, you should also raise the matter with the Privacy Officer.
We will ensure your claims are investigated and a formal response will be provided to you, within a reasonable time, considering the circumstances of your claims. If any corrective action is determined to be required, as a result of that investigation, we will take all reasonable steps to rectify the situation and advise you of such, again within a reasonable time considering the circumstances.
If we do not resolve your enquiry, concern or complaint to your satisfaction or you require further information in relation to any privacy matters, please contact the Office of Australian Information Commissioner, whose contact details are below.
DATE OF CURRENT VERSION: 01.04.2022
Telephone 1300 363 992
Office Address 175 Pitt Street Sydney NSW 2000