We are committed to protecting your privacy in compliance with our legislative obligations.
We will only collect, use, handle and disclose personal data as allowed by, and in compliance with, the privacy legislation applicable to us.
Your Privacy is Important to us
We are committed to being open about how we use personal data and this Policy sets out how we handle your information.
By providing personal data to us, you consent to our collection, use and disclosure of your personal data in accordance with this Policy and any other arrangements that apply between us. We may change our Policy from time to time by publishing changes to it on our website. We encourage you to check our website periodically to ensure you are aware of our current Policy.
Collection of information
We limit our collection of personal data to those details we identify as reasonably necessary for the lawful purposes of our business.
The types of personal data we collect may include names, contact details (eg email, telephone, residential address), information to identify you (eg date of birth), household details, details regarding participation in clubs / programs we may operate from time to time along with records of communications we have with you and your buying preferences, interests and transactional behaviour.
We note that we may not be able to offer you our products or services, or make you offers, if you choose not to provide us with your personal data.
We take reasonable steps to keep personal data as accurate, complete and up to date as necessary for the purposes we have identified.
Handling of information
We only collect and use data for the purpose of providing our products or services, including sending you information, or undertaking our business. We collect and use personal data for purposes in connection with the management, administration, operation and promotion of our retail and commercial properties. This can include communicating with you about products, services and promotions (including direct marketing), helping us improve what we do, respond to feedback, work with our service providers and conduct any necessary investigations by us or authorized entities or bodies.
We may provide marketing communications and targeted advertising to you on an ongoing basis unless you advise us to stop by contacting us as below.
We may monitor and record your communications with us (including by email and telephone) for security, dispute resolution and training purposes and operate audio and video surveillance devices in our properties.
We may also collect personal data from third parties including public sources, information service providers or any person authorized by you.
We may hold personal data electronically and/or in hard copy form both at our premises and with the assistance of our service providers. By a range of means involving people, processes and technology we protect the security of your personal data.
Disclosure of information
To us, personal data is strictly confidential. We will only disclose personal data in accordance with the law. We may disclose your personal data:
- to our agents, contractors and advisers;
- to our insurers and insurance brokers;
- to our commercial and joint-venture partners;
- to third parties who perform services for us;
- to law enforcement or government agencies, including where necessary to meet our statutory obligations;
- where it is required or authorized by law;
- where you have consented to the disclosure of your personal data
Overseas disclosure of personal data
We may from time to time disclose your personal data to third party suppliers and service providers located overseas (including providers for the operation of our websites and/or our business or in connection with providing our products and services to you). We will not send your personal data outside Australia unless we take steps to ensure that the recipient of the data is obliged to protect the privacy and security of personal data in accordance with Australian standards. Recipients outside the jurisdictions set out in this policy may also be subject to foreign law that could compel the disclosure of personal data to a third party, such as an overseas authority. At this time it is not practicable to specify to which countries recipients may be located.
Storage of information
We protect personal data with appropriate safeguards and security measures and restrict access to those who have a legitimate business purpose and reason for accessing it. Personal data is only retained for as long as is necessary for the identified purposes or as required by law.
Information access and correction
We may make decisions and actions on the basis of personal data in our possession and we take reasonable steps to keep personal data as accurate, complete, and up-to-date as is necessary.
Should you, or your authorized representative, want to exercise your right to access, modify, correct, or restrict your personal data, we may ask you to put such a request in writing. We may require identification to ensure the person requesting access is entitled to such access. If you, or your representative, is denied access to your information, we will provide reasons for the denial.
If we are reasonably satisfied our records need correcting, we will make the correction as soon as possible. If we do not agree our records need correcting, we will inform you of the reason(s) and you may require us to keep a statement on our records that you believe the information is inaccurate, incomplete, misleading, irrelevant or not up-to-date.
In the event you would like us to delete, stop processing, or withdraw consent for, your personal data to the extent you are entitled to under applicable law, you can make such a request in writing.
Opting Out of Communications
If you receive direct marketing communications from us, you may easily request not to receive such communications from us by:
- following the instructions on the communication to opt-out or unsubscribe from further communications; or
- contacting our Privacy Compliance Officer on firstname.lastname@example.org / ph: 03 9455 3934 / PO Box 124, Heidelberg Vic 3084
Resolving enquiries or complaints
If you have any questions, concerns or complaints about the treatment of your personal data, the first step is to discuss the issue with us.
If you lodge a complaint with us we will advise you who will be handling the matter and when you can expect a reply (within 30 days).
If your concerns have not been resolved to your satisfaction you may contact the Office of the Australian Information Commissioner on 1300 363 992 or by email at email@example.com. You can also visit their website at www.oaic.gov.au.