The privacy of your personal information is afforded the highest level of importance by Spiral Data Group Pty Ltd (ACN 614 264 149) (SpiralData, we or us).
If you have any questions about how we process your personal data, please contact SpiralData Privacy Officer at firstname.lastname@example.org
What kinds of personal information do we collect?
The kinds of personal information that we collect and hold include:
- your contact information, including postal and residential addresses, telephone and facsimile numbers, and email addresses;
- your order details;
- invoicing and payment details; and
- for job applicants or staff, employment history, educational qualifications, health information (ie. medical reports) and payroll details.
How do we collect personal information?
We will only collect personal information where it is reasonably necessary to do so for the conduct of our business. Any collection of personal information by us will be fair and lawful and will not be intrusive.
We will collect personal information about you in a variety of ways, including:
- if you provide your information by telephone, email or post;
- if you provide services to us or on our behalf;
- if you provide your information to us within an application developed by us; and/or
- if you contact us via email or submit your information through a customer order form or our website.
If it is reasonable and practical do so, we will collect personal information about you only from you. In the course of operating our business, however, we may collect personal information from third parties such as suppliers, recruitment agencies, contractors, our clients and business partners.
If we collect personal information about you from a third party we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.
When we collect personal information from you, we will take reasonable steps to notify you or ensure you are aware of:
- the entity which is collecting your personal information, and their contact details;
- that we have collected your personal information, and whether that collection is required or authorised by law;
- the purposes of collection;
- the consequences if personal information is not collected (such as if this will affect our ability to provide products or services to you);
- our usual disclosures of personal information of the kind collected;
- whether we are likely to disclose personal information to overseas recipients, and if practicable, the relevant countries in which they are located.
How do we hold personal information?
We will hold personal information as either secure physical records, electronically on our intranet system, in our customer relationship management software, in cloud storage, and in some cases, records on third party servers, which may be located overseas.
We take active steps to hold all hard copy and electronic records of personal information in a secure manner to ensure that they are protected from misuse, interference and loss, and unauthorised access, modification or disclosure.
We will destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law.
Purposes for which we collect, hold, use and disclose personal information
In general, SpiralData will collect, hold, use and disclose personal information for the purposes of providing or offering our products and services to you or engaging you to provide services to us or on our behalf.
By providing us with your personal information, you consent to us using and disclosing your personal information for the following purposes:
- offering and providing products and services to you;
- providing you with news and information about our business;
- sending you marketing and promotional material that we believe you may be interested in either from us or a third party business which we consider may be of interest to you;
- personalising your experience with our products and services, for example, via connectivity with social media services;
- assessing your eligibility for employment within SpiralData;
- engaging you to provide services to us or on our behalf;
- managing your employment or contractor relationship with SpiralData;
- investigating and assessing insurance claims; and
- administrating and facilitating workcover claims.
You may opt out of receiving marketing and promotional material from SpiralData at any time by contacting our Privacy Officer.
There may also be circumstances in which we are authorised or required by law to use or disclose your personal information.
We may disclose personal information between the members of SpiralData or to third parties such as our suppliers, organisations that provide us with technical and support services, or our professional advisors, where permitted by the Privacy Act. If we disclose information to a third party, we generally require that the third party protect your information to the same extent that we do.
How can you access and correct your personal information?
You have a right to request access to your personal information and to request its correction if it is out of date or incorrect.
You may request access or correction at any time by sending a written request to our Privacy Officer.
You do not need to provide a reason for your request for access to your personal information. We may charge a small reasonable fee for providing access to your personal information if the request is manifestly unfounded, excessive or if it requires a significant amount of time to locate or collect your information, to present it in an appropriate form or if further copies of data is required following an initial request.
We will respond to all requests for access to or correction of personal information within a reasonable time.
Please note there may be circumstances in which we are not able to provide you with access to your information, such as where the requested access will have an unreasonable impact upon the privacy of others or where we are required by law to withhold the information. If we are unable to provide you with access to your information, or make the amendments which you have requested, we will provide you with reasons for this decision.
We take all complaints seriously, and will respond to your complaint within a reasonable period.
If you are dissatisfied with the handling of your complaint, you may contact the Office of the Australian Information Commissioner:
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Telephone: 1300 363 992
Cross border disclosures of information
From time to time we may engage an overseas recipient to provide services to us, such as cloud-based storage solutions. Please note that the use of overseas service providers to store personal information will not always involve a disclosure of personal information to that overseas provider. However, by providing us with your personal information, you consent to the storage of such information on overseas servers and acknowledge that APP 8.1 will not apply to such disclosures. For the avoidance of doubt, in the event that an overseas recipient breaches the APPs, that entity will not be bound by, and you will not be able seek redress under, the Privacy Act.
If you do not want us to disclose your information to overseas recipients, please let us know.
Our Privacy Officer can be contacted as follows:
Spiral Data Group Pty Ltd
eNVIsion, New Venture Institute
1284 South Rd
Clovelly Park SA 5042
Email Privacy Officer