Privacy policy

General

This Privacy Policy applies to all Personal Information collected by Annature Pty Ltd ACN 642 595 015 (Annature). Annature is committed to complying with its obligations under the Act in respect of that information. In this Privacy Policy, we explain how and why we collect your information, how we use it, and what controls you have over our use of it.

Please read this Privacy Policy carefully. Your use of any part of our Website or Services will constitute your consent to the collection, transfer, processing, storage, disclosure and other uses of your Personal Information in accordance with this Privacy Policy. If you do not agree with the terms and conditions of this Privacy Policy, please do not use our Website or Services.

This Privacy Policy is subject to change at our discretion. The current version will always be available on our website at www.annature.com.au.

Definitions

In this Privacy Policy:

• Act means the Privacy Act 1988 (Cth);
• Annature, we or us means Annature Pty Ltd ACN 642 595 015, a proprietary limited company incorporated in Australia and its associated entities as appropriate
• OAIC means the Office of the Australian Information Commissioner;
• Personal Information means information about you which personally identifies you or may reasonably be used to personally identify you and otherwise has the meaning given to that term in the Act;
• Sensitive Information has the meaning given to that term in the Act;
• Services means the services that are to be provided by Annature, including without limitation through our Website or third parties, from time to time;
• Website means www.annature.com.au, www.dashboard.annature.com.au or any other website from time to time from which the Services are promoted and/or delivered, including without limitation any third party websites; and
• you means you and anyone acting on your behalf or with your implied authority

Types of Personal Information we collect

We collect and hold various types of Personal Information, including:

• personal details, including your name and, if applicable, your electronic signature and identity verification information and related documents;
• contact details, including your email address, telephone number, postal address and any other contact details that you provide to us as part of the Services;
• information necessary for or incidental to the provision of the Services including information about the party requesting the provision of the Services by us to you (if applicable) and any documents or other information shared with us in connection with the Services;
• information arising from or in connection with your use of the Services including without limitation your IP address, unique device identifiers, information about your information and other transactional data; and
• any other Personal Information that may be required in order to facilitate your dealings with us.

How we collect Personal Information

We may collect Personal Information about you when:

• you access, use or otherwise interact with our Website or Services;
• a person who accesses, uses or otherwise interacts with our Website or Services and provides your Personal Information to us for the purpose of us performing our Services at their request;
• you communicate, or a person requesting provision of the Services to you communicates, with our staff or representatives during the course of us providing you the Services;
• we solicit it from, or it is provided to us by, any person connected with our provision of the Services to you; or
• you otherwise deal with us in the course of our business.

Where we solicit Personal Information, we only collect:

• non-Sensitive Information, if it is reasonably necessary for the Services we provide; and
• Sensitive Information, if it is reasonably necessary for or directly related to Services we provide and you have consented to its collection, or its collection is permitted or authorised by law.

If we solicit Personal Information, we will either solicit it:

• from a third party with your consent or directly from you, unless it is unreasonable or impracticable for us to do so; or
• from a third party that is requesting the Services for the purposes of delivering the Services to you.

Where we collect Personal Information about you from a third party without your prior consent, we will take reasonable steps to inform you that we have collected Personal Information, unless the information is solely for the purpose of delivering the Services to you as requested by a third person utilising our Services. Such information is limited to your name, postal address, email address and telephone number.

How we store and protect Personal Information

We prioritise the security of your Personal Information whilst it is in our possession.

We may hold Personal Information in various forms, including without limitations physical documents or electronic records. Physical files are kept securely inside our access-controlled premises. Electronic files are stored securely on protected information systems and are only accessible through our secure network.

We take reasonable steps to:

• ensure that Personal Information we collect is accurate, up-to-date, complete and relevant, other than where it is only collected to provide advice in respect of a particular point in time, in which case we will seek to ensure it is accurate, complete and relevant as at that particular point in time;
• ensure that Personal Information we use or disclose is accurate, up-to-date, complete and relevant, having regard to the purposes for which Personal Information is used or disclosed;
• protect Personal Information from misuse, interference and loss, and from unauthorised access, modification or disclosure; and
• destroy or de-identify Personal Information which we no longer need for the purposes for which it was collected, except where it is necessary to retain it in order to maintain ongoing records for our clients.

We cannot guarantee the security of information transmitted via the internet. As such, transmission of Personal Information via the internet is at your own risk and we cannot be held responsible for the security of such information. This includes transmission of your Personal Information to us from third parties via the internet.

Your use of, or the supply of your information to, third parties who supply us with information, or who we are required to supply information to, in connection with the Services is entirely at your own risk and we make no representations or warranties regarding third parties’ privacy practices.

Why we collect, hold, use and disclose Personal Information

We collect, hold, use and disclose Personal Information for the following purposes:

• for the purpose(s) for which it was disclosed to or collected by us;
• for secondary purposes where it would be reasonable to expect us to do so, and that secondary purpose is related (or directly related in the case of Sensitive Information) to the primary purpose for which it was collected; and
• for any other purposes for which you have consented from time to time.

The above purposes include using and disclosing your Personal Information:

• to supply the Services to you or the third party requesting we provide the Services to you;
• to facilitate other interactions with you or the third party requesting we provide the Services to you in the course of operating our business;
• to share your Personal Information to employees, contractors, subcontractors or other third party service providers of Annature to assist us with providing the Services;
• to share your Personal Information with third parties requesting that we provide the Services to you who require the information to complete the provision of the Services;
• to run analytics on the use of our Website or Services and otherwise to improve our Website or Services on an anonymised and de-identified basis;
• to respond to your enquiries and provide you with relevant information;
• to update your Personal Information;
• to collect information required for reporting to relevant regulatory bodies (if required);
• as permitted or required by law; and
• for any other uses identified at the time of collecting your Personal Information.

We may disclose your Personal Information to such persons as is necessary to achieve the above purposes. This will often include disclosure to our related bodies corporate, third parties connection with our provision of the Services to you, contractors, subcontractors or other third party service providers.

We may use or disclose Personal Information for secondary purposes where it would be reasonable to expect us to do so, and that secondary purpose is related (or directly related in the case of Sensitive Information) to the primary purpose.

Unless you inform us that you opt out, we may use your Personal Information for the purposes of sending you direct marketing publications, including via telephone, mail, email, SMS or social media. You may opt-out of receiving marking communications from us by contacting us at the details below or by using the opt-out facilities provided in our communications. However, we will not disclose your Personal Information for the purposes of third-party direct marketing without your consent.

Overseas disclosure

It is unlikely that we will need to disclose your Personal Information to an overseas recipient or otherwise store your Personal Information overseas. If we do need to do so, this will generally be limited to third party providers of services such as website hosting, data storage, electronic communications and data analysis. Any such disclosure will be done in accordance with the Act.

We will attempt to ensure that persons to whom the disclosed Personal Information relates have comparable rights in relation to that information once disclosed overseas.

Using our website and cookies

To improve your experience on our website, we may use ‘cookies’, being small data files that are served by our Website and stored on your device. These are used by us or third parties for a variety of purposes including to operate and personalise the Website. Cookies may be used for recording preferences, conducting internal analytics, conducting research to improve our offering, assisting with marketing and delivering certain Website functionality.

You may refuse to accept cookies by selecting the appropriate setting on your internet browser. However, please note that if you do this, you may not be able to use the full functionality of our Website.

Third parties requesting the Services

Without limiting any other provision of this Privacy Policy, you acknowledge that it is likely that we will receive your information from third parties who have requested that we provide the Services to you. While we take reasonable steps to ensure the integrity of your information in connection with the Services, Annature makes no representations or warranties regarding the use of any information used by the third party in connection with the Services.

Annature is not responsible for such third parties or any associated websites or resources that are connected with them. If you access such websites or resources, you do so at your own risk and we make no representations or warranties regarding third parties’ privacy practices. We encourage you to read the privacy policies of every such third party, associated website or resource that you use or that your information is provided to.

If our Services are linked to or integrated with a third party or their associated website or resource, this does not automatically imply that Annature endorses that associated website or resource and their contents.

How you can access or correct Personal Information

We are committed to maintaining accurate, timely, relevant and appropriate information.

Where requested, we will provide you with a copy of the Personal Information that we hold which relates to you, provided that the request is made in accordance with the APPs (contained in the Act). We will also update any inaccurate information about you if you inform us that the information is inaccurate, out of date, incomplete, irrelevant or misleading.

There are no charges for requesting access to or the correction of your Personal Information, however if the volume of information we hold is excessively large, we reserve our rights to charge you any reasonable administration fees (including fees for photocopying) associated with your request.

You may contact us to access your Personal Information or to correct inaccurate, out-of-date, incomplete, irrelevant or misleading Personal Information by:

• Email: hello@annature.com.au
• Phone: 1300 031 065

We will respond to those requests within a reasonable period in accordance with our obligations under the Act. If we refuse a request to access or correct Personal Information, where reasonable, we will provide our reasons for doing so and information about your ability to complain about such refusal.

In order to protect the confidentiality of your Personal Information, details of your information will only ever be passed on to you where we are satisfied that the information relates to you. Accordingly, we may request documentation from you which confirms your identity before passing on any Personal Information which relates to you.

Making a complaint

Complaints about our Privacy Policy or our collection, use, disposal or destruction of your Personal Information should first be directed to us at the details set out above.

We will investigate and attempt to resolve your complaint in accordance with the Act. If you are not satisfied with the outcome of this process, then you may contact the OAIC.

Information processing for data subjects in the European Economic Area (“EEA”)

European Union Regulation 2016/679 of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“EU GDPR”), requires Annature to provide additional and different information about its data processing practices to data subjects in the European Economic Area (“EEA”). If you are located in a member state of the EEA and access our Services, or otherwise provide us with your personal data this policy applies to you.

As an individual in the EEA, we collect and process Personal Information about you where we have legal bases for doing so under EU laws. We only collect and use the information when:

• we need it to supply the Services to you or the third party requesting we provide the Services to you;
• to facilitate other interactions with you or the third party requesting we provide the Services to you in the course of operating our business;
• to share your Personal Information to employees, contractors, subcontractors or other third party service providers of Annature to assist us with providing the Services;
• to share your Personal Information with third parties requesting that we provide the Services to you who require the information to complete the provision of the Services;
• to run analytics on the use of our Website or Services and otherwise to improve our Website or Services on an anonymised and de-identified basis;
• to respond to your enquiries and provide you with relevant information;
• to update your Personal Information;
• to collect information required for reporting to relevant regulatory bodies (if required);
• as permitted or required by law; and
• for any other uses identified at the time of collecting your Personal Information.

If you have given consent to our use of your Personal Information for a specific purpose, you can change your mind at any time, but this will not affect any processing that has already taken place. You have the right to object to the use of your information, but this may mean that the Services might no longer be available to you.

Information processing for data subjects in the European Economic Area (“EEA”)

If you require any further information or have any queries regarding our Privacy Policy, please contact us at the details set out above.

Should you wish to read more information on the Act, we recommend that you visit the website of the OAIC at www.oaic.gov.au.