PRIVACY AMENDMENT (PRIVATE SECTOR) ACT 2000
In December 2000, the Commonwealth Government of Australia enacted a further privacy legislation, to commence on the 21st December 2001. This privacy legislation was drafted in order to amend the Privacy Act 1988 (implementing the National Privacy Principles) and to include provisions that regulate the way private sector organisations collect, use, disclose, keep secure and provide access to personal information.
All privacy legislation is available for download at the Office of the Federal Privacy Commissioner at http://www.privacy.gov.au/business.
WHAT IS PERSONAL INFORMATION?
The Privacy Act 1988 (Cth) defines personal information as information or an opinion about an individual whose identity is apparent or can reasonably be ascertained. It includes your name, age and contact details as well as your financial and health information.
Centrestone is bound to protect your personal information in accordance with the National Privacy Principles to the extent required by the Privacy Act 1988.
COLLECTION OF PERSONAL INFORMATION
The types of information we keep on record will depend on the product or service requested by you.
HOW DO WE COLLECT INFORMATION?
We collect and store information about you when you:
directly when you provide information by phone or in documents such as application forms;
from publicly available source of information;
complete any online application of other type of form;
provide us with your email address; or
access and use any of our online services
WHAT INFORMATION DO WE HOLD?
In general, Centrestone keeps a record of one or more of the following types of information:
information that identifies you, such as your name and address and other information provided by you;
if you participate or transact in any online service, all details are recorded and stored;
We also collect statistical data from all visiting traffic through our website. This data includes information regarding:
the number of visitors;
the time and duration of your visit;
the information requested during your visit;
your browser type;
your operating system type;
advertisements click throughs (i.e. if you clicked on an one of our online advertisements); or
the site you came from and exited to
All statistical information is used on aggregate to provide Centrestone with general information about our users and to help promote and better our understanding of the way you use and interact with our online services.
A “cookie” is a data collection device used on the web where small pieces of information are stored on the client.
CHOICE AND CONSENT
WHAT ARE YOUR RIGHTS?
There is no legal obligation for you to provide us with any personal information. However, without that information, we may not be able to process your application, fulfil your request or provide you with an appropriate level of service.
DO I HAVE TO PROVIDE CONSENT?
If at any stage you do not wish to receive further information from Centrestone regarding our products and/or services, you can contact us by email at firstname.lastname@example.org
PERSONAL INFORMATION SECURITY
We take all reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification or disclosure.
We have physical, electronic and procedural safeguards to protect your information which is held by us. All online information is stored in electronic database requiring appropriate user authentication for access and is physically stored in secured data-houses located in the United States. All access to information stored electronically is restricted to Centrestone staff whose job purpose requires access.
Our security measures include, but are not limited to:
restricting access to our computer systems and physical records to authorised persons and preventing users from accessing information they have no need to access;
requiring employees to use unique passwords to gain access to systems; these passwords are changed regularly;
data encryption with all online transactions;
data servers are protected by firewalls and virus scanning tools;
ARE MY ONLINE TRANSACTIONS SECURED?
We provide the maximum level of security when you use our online products and services. All sensitive transactions involving personal information are encrypted using the highest level of encryption (i.e. 128-Bit and 256-Bit Encryption using Certificates) meaning you can be assured your information is safe and secure during transit. However, “perfect security” does not exist online.
WHEN DO YOU DESTROY MY INFORMATION?
We take all reasonable steps to destroy your information in an effective, secure way when it is no longer required by the business. Usually, we keep records for at least five years.
PERSONAL INFORMATION INTEGRITY
We try to ensure that all information we hold about you that we collect, use or disclose is complete, accurate and up to date. We strongly recommend that you:
let us know if there are the information we hold is not accurate, complete or up to date;
keep us up to date with changes to the information we hold
We ask that you inform us within a reasonable period, by email at email@example.com if you require your information to be updated.
OUR DISCLOSURE OF YOUR INFORMATION
As a matter of policy, we do not sell any information about you to any third parties. We also do not believe in spamming people with unwanted information. We never disclose any health information without your written consent.
Usually we must get your consent before we tell anyone about you, your accounts or credit information. You can give us your consent expressly or it may be implied by your conduct.
The primary purpose of any personal information recorded is to provide you with a better product and/or service.
EXTERNAL SERVICE PROVIDERS
We may disclose your personal information to our external service providers (that may be located overseas) that provide services to us. This is on a confidential basis
Centrestone may lawfully disclose your information is required to do so for law enforcement or regulatory purposes. For example, we may need to give your account information to the court if we are ordered to do so under a subpoena.
ACCESS TO PERSONAL INFORMATION
You can request access to your personal information at any time. We will process your requests within a reasonable time, usually 14 days for a straightforward request. More time may be needed, depending on the nature of the request.
There is no fee for requesting access to your personal information from Centrestone; however we may charge you the reasonable cost of process your request.