‘Personal information’ means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not. In essence, it is any information that can be used to personally identify you.
What information we collect
The type of information that we collect from you will depend on how you use our website and how you interact with us. The personal information that we collect and hold about you may include your full name, address, email address, job title, place of employment, phone number, details of your enquiry or order including payment information, as well as website usage information such as the date and time of your visit, IP address and pages you have requested.
How we collect your information
We may collect your personal information directly from you during the course of our relationship with you, including by way of telephone and email correspondence, and via our website.
Most web browsers automatically accept cookies but you can choose to disable cookies through your internet browser settings. However, our website may not operate as intended for you if you do so.
Purpose of collection
We collect, hold, use and disclose your personal information to:
- operate, protect, improve and optimise our business and your website experience;
- facilitate the processing of enquiries and orders placed;
- fulfil administrative functions associated with our services such as billing and entering into contracts with you;
- provide information about you to our contractors, consultants, partners or other third parties only for the purpose of providing services to you;
- maintain contact with parties interested in our business, and keep them informed of new developments, services and opportunities available; and
- comply with our legal obligations.
By opting-in to join our mailing list, you consent to the receipt of direct marketing material. We will only use your personal information for this purpose if we have collected such information directly from you, and if it is material of a type which you would reasonably expect to receive from us.
We do not use sensitive personal information in direct marketing activity. Our direct marketing material will include a simple means by which you can opt-out of receiving further communications of this nature at any time. If you opt-out of receiving direct marketing material from us, Leighton O’Brien may still contact you in relation to our ongoing relationship with you.
Storage of information
Leighton O’Brien stores personal information in hard copy form and/or electronically in secure databases (including trusted third-party storage providers based in Australia and overseas). Personal information may be collected in paper-based documents and converted to electronic form for use or storage (with the original paper-based documents either archived or securely destroyed).
We take reasonable precautions to safeguard your personal information from loss, misuse, unauthorised access, theft, modification or disclosure. Such precautions include:
- using encryption on certain electronic data;
- using Secure Sockets Layer (SSL) encryption technology whenever you provide personal information to us through our website;
- maintaining physical security over paper and electronic data stores, such as through locks and security systems at our premises; and
- limiting access to personal information to our personnel on a need to know basis.
We will store your personal information for as long as a subscription to our mailing list is active or as long as needed to continue to provide our services.
We take reasonable steps to securely destroy or de-identify all personal information where it is no longer necessary to retain the information for the purposes for which it was requested or as required by law.
Third party disclosure and overseas transfer of information
We do not disclose, sell to, or otherwise trade with unrelated third parties the personal information that we collect at any point or under any circumstance unless we receive your consent to do so.
On occasion, we may share your personal information with our local or overseas business partners to ensure that we are consistently and appropriately providing services to you. Our overseas business partners operate in over 30 countries, including in America, Africa, Europe and the Middle East. We may also share your personal information with government bodies or other agencies, as required by law. When we share such personal information, we take reasonable steps to ensure that the third party recipients have policies and controls in place that are at least as stringent as our own.
In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in the European Union. However, the fact that you may be located in the European Union does not on its own entitle you to protection under the GDPR.
Nonetheless, if we collect personal information from you by your use of our website, there may be additional rights and remedies available to you under the GDPR if your personal information is handled in a manner inconsistent with the law. If you have any questions, please contact us at firstname.lastname@example.org.
If you wish to confirm that Leighton O’Brien is processing your personal information, or to gain access to the personal information that may be stored about you, please contact us at email@example.com. If you wish to correct inaccurate personal information subject to certain exceptions, deactivate your subscription, or withdraw your consent at any time, please contact us at firstname.lastname@example.org.
If you wish to make a complaint concerning the manner in which we maintain the privacy of your personal information, please contact us at email@example.com. If we agree that your complaint is well-founded, we will endeavour to rectify the problem. However, should you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.