1. Purpose
The purpose of this policy is to support our commitment to the protection of the privacy of individuals’ personal information, by stating the ways in which we may collect, store, use, manage and protect personal information in accordance with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth).
2. Scope
This policy is relevant to any individual who discloses personal information to us.
If you do not agree with any part of this policy, we recommend that you do not provide your personal information to us. However, our ability to provide services to you may be affected if you do not provide us with your personal information, or if you withdraw any consent we are legally required to have in order to process the personal information you have given us.
3. Definitions
4. Privacy Framework
The Privacy Framework is the mechanism by which we implement our commitments to the privacy of individuals’ personal information. It includes the following elements:
· this Privacy Policy; and
· internal business process documents setting out the process for investigating and responding to unauthorised use or disclosure of personal information.
5. Kinds of personal information we collect
We might collect and hold different personal information depending upon how an individual interacts with us. For example:
· If you access our website, we may collect information about how you have used our website, or
· If you contact us for any reason, we may collect your name, address, email address, phone number or contact details.
We may also collect information about:
· your demographic
· your preferences or opinions
· your transactions with us
· your bank account details and financial records with us
· your photograph or video recording
· your vehicle registration and contact details
· the frequency of your enquiries
· your location and your access to, and use of, our services
· the technology you use to access our services
· how and when you use our services, and
· sensitive information.
6. Collecting personal information
We may collect personal information:
· directly from you (e.g., when we contact you, when you contact us)
· from third parties whom you have authorised to provide us with information
· from publicly available sources, such as public webpages and published databases
· via routine monitoring of our information technology and telephone networks
· from audio and video recordings in public locations and other spaces identified as being subject to recording devices, or
· where generated by us in the course of our business activities.
We do not collect or retain sensitive information, unless it is supplied by you, you consent to its collection and the information is reasonably necessary for our business or activities. By supplying us with sensitive information, you consent to our use of that information in any of the ways and for any of the purposes described in this policy.
7. Holding and securing personal information
We store your personal information digitally. Any hardcopy material is secured using locked filing cabinets or office security. All digital material is secured using file access controls.
We only keep your personal information for as long as it is required for the purpose for which it was collected or as otherwise required by law. If we no longer need to hold your personal information for any reason, we will take reasonable steps to de-identify or destroy that information. These steps may vary depending on the nature of the information, the way it was collected and how it was stored.
8. Reasons for collecting, holding, using and disclosing personal information
We may collect, use and disclose personal information for a number of purposes, including:
· providing you with goods or services, including processing payments
· providing you with information about our goods or services
· developing or refining our services
· internal business and administrative purposes (such as training staff, risk management; developing and marketing products and services, undertaking planning, research and statistical analysis)
· providing you with marketing material and communicating with you generally
· tailoring our marketing, services, promotions, philanthropic activities, and other operations for you
· reporting to Government agencies as required by law or Government policy
· responding to, investigating and managing inquiries, complaints, feedback and claims
· responding to legitimate inquiries from government agencies, including law enforcement agencies, upon request
· corporate governance, auditing and record keeping, or
· any other reason disclosed to you at the time of collection.
If we collect personal information from you, we may:
· use and disclose that information, including to a third party, for any of the purposes outlined in this section
· store that information in accordance with this policy
· pass that information amongst entities we work with
· disclose that information to third parties who provide products or services to us (including our accountants, auditors, lawyers, IT contractors, advertising and marketing providers, and other service providers)
· provide that information to third parties as required by law and to law enforcement agencies upon receipt of an official request
· publish photographs of you that have been taken for informational, marketing and promotional purposes, or
· ask you from time to time to confirm that the information is accurate, up-to-date, complete and relevant.
Our use of personal information may extend beyond these uses but will be restricted to purposes that we consider to be related to our functions and activities.
9. Direct Marketing
We may use your personal information to identify a product or service that you may be interested in or to contact you about an event or important initiative. We may use your phone number, email address or mailing address to contact you from time to time to tell you about products or service offerings that we believe may be of interest to you.
You can withdraw your consent to receiving direct marketing communications from us at any time by unsubscribing from the mailing list, by contacting us at the details at the end of this policy, or by using the opt out mechanism in our direct marketing communications.
10. Accessing or correcting personal information
In most cases you can gain access to your personal information held by us. You are encouraged to contact us to access, correct, or update your personal information.
We will respond to your access or correction request within 30 days. An administrative fee may be charged to cover our costs in providing you with access to your personal information. This fee will be explained to you before it is incurred.
If we deny your access or correction request, we will provide you with reasons.
If we refuse to correct your personal information, you can ask us to attach a statement to it stating that you believe the information is incorrect and why.
11. Questions or Complaints
If you have a question or complaint about how we have handled your personal information, you can raise it with us at any time by:
Email
Phone
Post: 41 Mirage Road Direk, SA, 5110
We take all questions and complaints seriously and will acknowledge receipt of your question or complaint, in writing, within 5 working days and will investigate and respond to you within 30 days.
12. Review and changes to this policy
This policy is current as at the Approval Date shown below. It may be amended in light of new laws and technology, changes to our operations and practices, and changes in the business environment. The most up to date version of this policy is always posted on our website.
This policy shall be reviewed every three (3) years, or earlier in the event of legislative changes.
