Privacy Policy
YOUR PRIVACY IS IMPORTANT
Your privacy is important to us and Indirecotry Pty Ltd (“Indirectory”) is dedicated to protecting your personal information across all areas of its business. Personal information is information or an opinion about you.
This Privacy Policy explains Indirectory’s personal information handling practices across the organisation including information about how we collect, use, disclose and store your personal information.
It also contains information about how you can access the personal information Indirectory holds about you, how you can ask Indirectory to correct your personal information and how you can make a complaint if you have concerns about how Indirectory managed your personal information.
You can find more information by contacting Indirectory (please refer to the “How to Contact Indirectory” section of this policy).
COLLECTION OF PERSONAL INFORMATION
Indirectory collects your personal information so that we can perform our functions or activities and offer our services to you. Indirectory’s functions, activities and services are many and varied and include the application, the websites, events, exhibitions and marketing activities.
Personal information includes things such as your name, image, date of birth, phone number(s), postal address and email address. The type of personal information we collect from you depends on your interaction with us.
Depending on the transaction, if Indirectory does not collect your personal information, we may not be able to provide you an offer or service.
Collection from you
It is Indirectory’s usual practice to collect your personal information directly from you. For example, you provide us your personal information when you create an account within the app, enter a competition, write to us, join a mailing list or attend an event.
Collection from public sources or third parties
Where relevant, Indirectory will collect personal information about you from a publicly available source (such as other websites) or from third parties, for example:
• credit reporting bodies (if we request information about your credit history);
• other applications; and
• Indirectory’s related entities.
Collecting sensitive personal information
Sensitive personal information is information or an opinion about an individual’s racial or ethnic origin, political opinions or memberships, religious beliefs or affiliations, philosophical beliefs, sexual preferences, criminal record, health information, genetic information or membership of a trade union.
Indirectory’s general approach is not to collect, use or disclose sensitive information. However in limited circumstances, Indirectory will collect sensitive information where it is necessary for one of Indirectory’s functions or activities and you have consented to the collection of that information. For example, Indirectory will collect business information from you before allowing access to the Indirectory Application.
USING AND DISCLOSING YOUR PERSONAL INFORMATION
Indirectory operates a range of businesses that handle personal information. We use and disclose your personal information that we collect (and share it with related companies) for a number of different purposes, including:
• to identify and contact you and manage our relationship with you;
• to tell you about things at Indirectory that you may be interested in;
• to manage and administer our services to you;
• to conduct and improve our businesses and improve the customer experience;
• to prevent or investigate any actual or suspected misconduct, fraud or unlawful activity;
• in relation to your credit worthiness, including to obtain a credit report about you;
• to consider any concerns or complaints you may raise against Indirectory;
• to comply with our legal obligations as required by relevant laws, regulations and codes of practice.
Disclosing your personal information
We understand how important it is to keep your personal information private. We will use and disclose your personal information for the purposes we collected it as well as purposes that are related, where you would reasonably expect us to. We will also disclose your personal information when:
• you agree to the disclosure; or
• the disclosure is required or authorised by law.
To the extent permitted by law, we may also disclose information about you to:
• Indirectory’s related companies;
• third parties who provide services to Indirectory from time to time such as mail-house providers, customer research agencies, debt collectors, advertising agencies and our advisers; and
• government agencies as part of our statutory obligations
Disclosing your personal information overseas
For international customers, Indirectory may share your personal information with overseas recipients located in countries where Indirectory or an associated entity, has staff or a business, including without limitation, the United Kingdom, America and Hong Kong.
Marketing
Where applicable Indirectory will use your personal information to contact you via mail, SMS, email, telephone or online to tell you about news, special offers, products and services that you might be interested in. We do this where you have consented to receiving such information or it is related to the purpose for which we collected your personal information. You can contact us to update your marketing preferences at any time.
SECURITY OF PERSONAL INFORMATION
Indirectory takes steps to protect the personal information it holds against loss, interference, unauthorised access, use, modification or disclosure and against other misuse.
Your personal information is held on Indirectory premises and systems or offsite using trusted third party providers. Our employees and service providers are required to maintain the confidentiality of any personal information held by Indirectory.
Our security safeguards include:
• staff training on their obligations with regard to your information;
• ensuring appropriate data handling and security arrangements are in place when we disclose information overseas or use third parties to handle or store data;
• system security such as encryption, firewalls and intrusion detection systems and surveillance; and
• destroying personal information when no longer required.
ACCESS AND CORRECTION OF YOUR PERSONAL INFORMATION
Subject to some exemptions, you may ask Indirectory to provide you access to the personal information that we hold about you. To do so, please contact Indirectory on the details below, provide photo identification and complete Indirectory’s request for personal information form.
Once Indirectory has collected your personal information it will provide you a copy of it digitally subject to verifying your identity.
A copy of your information will generally be made available to you within 30 days unless we are not required to give you access to your personal information pursuant to an exception in the Privacy Act.
Where applicable, we will inform you in advance of any fees for Indirectory to find the information you have requested.
If you find that your personal information is inaccurate or out-of-date, please let us know. For further information about how to request access or changes to the information Indirectory holds about you or to update your marketing preferences or unsubscribe please contact us (please refer to the “How to Contact Indirectory” section of this policy).
WEBSITES, DEVICES AND COOKIES
Where applicable, Indirectory will also collect the following information from you:
• the fully qualified domain name from which you accessed our websites, or alternatively, your IP address;
• the web browser that you are using and the pages you accessed;
• device ID number (MAC address);
• the date and time you accessed each page on our websites;
• the URL of any webpage from which you accessed our websites or by using the complex Wi-Fi, and the details of any mobile Apps you have accessed from a device using the complex Wi-Fi;
• publicly accessible social media posts and any personal information you allow us to collect by linking your account on our website with a third-party social-networking site including but not limited to Facebook, Twitter, or Google+; and
• cookies which track your visits to the our web sites (see below).
Where applicable, we are collecting this information (and may use or hold this information) to provide, improve and develop our services to you and the customer experience.
Indirectory may use this anonymised data to inform our promotional and marketing strategies, as well as for research and profiling purposes including customer demographics, interests and behaviours based on personal information and other information provided to us. This research may be compiled and analysed on an aggregate basis, and we may share this aggregate data with our affiliates, agents and business partners. This aggregate information does not identify you personally. We may also disclose aggregated information in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.
Indirectory may connect information you provide to us for one purpose with other information for use for one or more of the above purposes. If you access or log-in to the complex Wi-Fi service, and we already hold other information (both personal or non-personal) that can be associated to you or the device on which you are accessing the Wi-Fi service (including, but not limited to a device ID number (MAC address)), then that information may be linked with personal information we hold about you as set out in this policy, and will be treated in the same manner as the personal information to which it has been linked.
Cookies
Indirectory also uses cookies which are a piece of information that allows the server to identify and interact more effectively with your device whenever it communicates with Indirectory melbourne.com.au. Indirectory uses cookies to identify you between multiple visits, to better understand how our websites are used, and to provide you information which may be of interest to you based on your previous visits to our websites and to provide targeted advertising to you (including through ad-servers and other third party advertisers) when you visit our websites and certain other websites where advertising is found from time to time. We may provide the information we gather from cookies to third parties for these purposes and for other purposes connected with our websites. If cookie information is linked with personal information we hold about you as set out above, this cookie information becomes personal information and will be treated in the same manner as the personal information to which it has been linked.
Most web browsers are set to accept cookies, however, if you do not wish to receive any cookies, you may set your browser to refuse them. In some instances this will mean that you will not be able to take full advantage of parts of the website that provides you with improved service.
MAKING A PRIVACY COMPLAINT
Indirectory takes its obligations pursuant to the Privacy Act (the Act) seriously. Individuals may complain about a breach of the Act by Indirectory by submitting their complaint in writing to Indirectory’s Privacy Manager (using the address in the “How to Contact Indirectory” section of this policy).
Any complaint should set out in as much detail as possible, all the relevant particulars relating to the complaint, including why the individual says that Indirectory has breached the Act.
Upon receiving a written complaint, Indirectory will acknowledge receipt of the complaint in writing within 7 days. Indirectory will investigate the matters described in the complaint and then provide a substantive written response within 28 days from the date the written complaint was received by Indirectory.
HOW TO CONTACT INDIRECTORY
Individuals can obtain further information in relation to this privacy policy, or provide any comments, by contacting:
Post
Privacy Manager
Indirectory Pty Ltd
PO Box 188
SHERWOOD QLD 4075
support @ indirectory.io