This Policy sets out how and why Yellow Canary Holdings Pty Ltd and its related bodies corporate (Yellow Canary, we, us, our) handle personal information under the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). It also sets out how you can contact us in relation to our handling of your personal information.
What is personal information?
‘Personal information’ has the meaning given to it in the Privacy Act, but generally means any information about a person who is identified, or who is reasonably identifiable.
When does this policy apply?
The Policy applies in relation to personal information we collect in the course of our business. We may collect personal information from you when:
- you sign up for, access, or use our services, including any platforms, apps, products, and services owned or operated by us;
- you contact us or otherwise provide us with your personal information;
- you ask to be part of any mailing list we may send out; and
- when you visit our website at yellowcanary.com.au; portal.yellowcanary.com.au;and getsupersimple.com.au
What personal information do we collect and why?
The types of personal information we collect from you or about you, and how we use and disclose that information, will depend on your relationship with us. The Schedule to this Policy sets out details about the:
- types of personal information we collect;
- reason(s) for which we collect, use, hold and disclose that personal information; and
- ways in which we may collect that personal information; and,
depending on your relationship with us.
The rest of this Policy contains more general information about how we handle personal information in the course of our business.
How do we collect personal information?
We aim to collect personal information only directly from you, unless it is unreasonable or impracticable for us to do so. There are some specific cases in which we may collect personal information about you from third parties. These are set out in the Schedule.
How do we use your personal information?
We collect, hold, use and disclose personal information from you or about you for the specific purposes set out in the Schedule, and otherwise as permitted by law.
Will we use your personal information for direct marketing?
As set out in the Schedule, we may use and disclose your personal information to send you marketing material about us, our products and services and those of our partners which we believe you may be interested in. You can opt out of this at any time by contacting us below or following the opt out link in our marketing material.
How do we share your personal information when providing services?
We may share your personal information with our affiliates and with other third parties who help us conduct our business. This may include sharing your personal information with:
- our employees, contractors, affiliates and related companies in order to carry out the delivery of services to you;
- our suppliers and services providers, such as HubSpot and Zendesk, so that they can provide us with the services we need, such as payment collection, marketing, identity verification and customer services;
- in respect of the personnel of our customers, to that customer, their representatives, or their related bodies corporate in connection with the provision of our services to that customer;
- with third parties, including law enforcement and government agencies or officials where permitted or required by law;
- companies that we plan to merge with or be acquired by or who may invest in us; and
- other third parties with your consent or direction to do so.
Do we share your information overseas?
As noted above, we may disclose your information to third party service providers who help us conduct our business, including third parties that are located outside Australia, such as North America. Additionally, in respect of personnel or representatives of our customers, if a customer (or that customer’s corporate group) is based overseas, we may disclose your personal information to that relevant country. Given these disclosures occur and change from time to time, it is not practicable to list all such countries here.
Our websites and cookies
When you access our websites, we may place cookies (small data files that are used to identify a particular browser) on your device. The types of information collected by these cookies, and the reasons we use them, are set out in the Schedule.
Most browsers give you the ability to control cookies. You may decline to accept our cookies, and in some cases your browser may be configured to block some or all cookies, however, doing so may limit the functionality of our website and services.
Sometimes our websites contain links to other websites. When you access a website other than our websites, we are not responsible for the privacy practices of that site. We recommend that you review the privacy policies of each website you visit.
How we hold and protect your personal information
We take reasonable steps to hold and protect your personal information from misuse, loss, and unauthorised access, use, modification, and disclosure, including by using third-party suppliers who store data on secure data centres. This includes through physical, procedural and technical measures, including restricting access to your personal information to those individuals who need it to perform their job. However, you should be aware that no security measure is ever perfect or impenetrable and we cannot guarantee the security of your personal information.
Accessing your personal information
You can request access your personal information that we hold about you by contacting our Privacy Officer, whose details are set out below. If we refuse to give you access, we will provide you with a written notice stating our reasons for refusing access.
We may seek to recover our reasonable costs incurred for providing you with access. If so, we will get your approval in advance.
Correcting your personal information
It is important that we hold up-to-date, accurate and complete information about you. We use reasonable attempts to ensure that this is the case, however, we encourage you to reach out to our Privacy Officer, whose details are set out below, if you believe any of the personal information we hold about you is incorrect or out of date. You may ask us to correct your personal information that we hold.
In most cases, we will comply with any request you make. However, if we ever decide not to update that personal information, we will provide you with a written notice explaining our decision.
Resolving your concerns
If you have any questions, concerns or complaints about this Policy or how we handle your personal information, please contact our Privacy Officer at email@example.com.
We aim to provide an initial response within 48 hours and to resolve your query or complaint within 10 business days.
You may also lodge a complaint with the Office of the Australian Information Commissioner by phoning 1300 363 992 or by email at firstname.lastname@example.org.