Privacy Act 1988 (Cth)
We may amend or update this policy from time to time. Any changes will be effective from the date of publication on our Website.
2. MEANING OF ‘PERSONAL INFORMATION’
Personal information means information or an opinion we hold about you from which we can determine your identity or where you identity can be reasonably established. For example, we will collect your name, address and other pertinent details when we take instructions from you in relation to a particular matter.
3. TYPES OF PERSONAL INFORMATION COLLECTED
We may with your consent collect personal information from you or from publicly available sources of information. The type of personal information that we collect will depend on the nature of your dealings with us. For example, when you:
• provide us with instructions or make purchase orders;
• provide personal information to us;
• apply for a position of employment with us;
• use the Website;
• contact us, for example, to ask for information.
The type of personal information we collect from you generally comprises your name, address (home, business and email), occupation, Internet Protocol (IP) address, gender, contact details (telephone, mobile, facsimile) and information which is relevant to the service you require from us. Castle & Kite will not ask to collect sensitive information about you (such as details of your racial or ethnic origin, political affiliation, religious or philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences, criminal convictions or health information) unless it is needed for the purposes of providing services to you.
Castle & Kite uses its own identifiers and does not use any government related identifiers such as drivers licence numbers, Medicare numbers, Australian passport numbers or Centrelink reference numbers.
4. PURPOSES FOR WHICH PERSONAL INFORMATION IS COLLECTED
Castle & Kite collects personal information from you so that we can verify your identity and provide our services to you. We may also collect personal information about you from third parties with whom we are dealing on your behalf. We know you may be concerned about what we do with your personal information. You have our assurance that we will not disclose the information, and will use reasonable endeavours to prevent the disclosure of the information, except to the extent:
• indicated at the time of supply of the personal information to us;
• expressly permitted under any agreement with you;
• required for performance by us of services to you;
• required for the ordinary operation of our Website or our business (e.g. to send you information about our services);
• required under compulsion of law or provided in co-operation with any governmental authority; or
• where it is already publicly available or disclosed by us in a manner that does not readily permit personal information identifying you.
5. USE AND DISCLOSURE OF PERSONAL INFORMATION
Castle & Kite may use or disclose your personal information for the purpose for which it was collected including where you would reasonably expect us to use or disclose your personal information. We may also subject to confidentiality provisions disclose your personal information to third parties, including our advisers, third party service providers and consultants. We will only disclose your personal information overseas with your express or implied consent.
6. FUTURE CONTACT AND YOUR PRIVACY
We may use the personal information we collect from you to contact you and provide you with updated information about Castle & Kite in relation to events or to provide you with other information about our services and offerings. If you do not wish to receive such information, please notify us at the contact details below.
7. ACCESS AND SEEKING CORRECTION OF YOUR PERSONAL INFORMATION
Castle & Kite takes reasonable steps to ensure the personal information it collects is accurate, up to date and complete. You also have the right to request access to your personal information and to request its correction or update. You may contact us via our Website or Facebook page or the contact email on our Website.
In certain circumstances, the law permits us to refuse your request to provide you with access to your personal information where:
• access would pose a serious threat to the life, safety or health of any individual or to public health or public safety;
• access would have an unreasonable impact on the privacy of others;
• the request is frivolous or vexatious;
• the information relates to existing or anticipated legal proceedings and would not be accessible by the process of discovery in those proceedings;
• access would reveal the intentions of a party in relation to negotiations or prejudice those negotiations;
• access would be unlawful; or
• access may prejudice enforcement activities or a security function
If we refuse to give you access to your information, we will give you a written notice that sets out the reasons for the refusal, the mechanisms available to complain about the refusal and any other matter prescribed by regulations made pursuant to the Privacy Act.
8. DATA SECURITY
Castle & Kite takes reasonable steps to ensure the security of your personal information. We employ appropriate technical, administrative and physical procedures to protect personal information from misuse, interference and loss, unauthorised disclosure or alteration.
9. WEBSITE PRIVACY
When you visit the Website or download information from it, our Internet Service Provider (ISP) makes a record of your visit and records the following information:
• your Internet Address;
• your domain name (if applicable);
• the date and time of your visit to the website;
• previous site visited; and
• browser type.
This information is anonymous and does not identify individual users. You can also configure your Internet browser to accept all cookies, reject all cookies or notify you when a cookie is sent.
You are entitled to make a complaint if you believe that we have breached any of the Australian Privacy Principles.
Any complaints should be made in writing to the Directors via the Website (including the contact email address on it) or Facebook page.
Complaints will be reviewed by our Privacy Officer and a response will be provided within 30 days of receipt of the complaint by us. If you believe that your complaint has not been satisfactorily addressed by us, you can take your complaint to the Office of the Australian Information Commissioner at http://www.oaic.gov.au/.