LEGAL – PRIVACY POLICY
Privacy Statement and Credit Reporting Privacy Policy
How the Skyreach Group collects, holds, uses and discloses your personal and credit information, and how to contact us about it.
LEGAL – PRIVACY POLICY
How the Skyreach Group collects, holds, uses and discloses your personal and credit information, and how to contact us about it.
Last updated: 26 October 2020
The Skyreach Group [1] is committed to protecting the privacy of its customers, employees, business associates and trading partners. The Skyreach Group is bound by the Privacy Act 1988 ("the Act") and adheres to the Australian Privacy Principles ("APP"). The APP sets out 13 principles to be adhered to by APP entities in dealing with Personal Information as defined by the Act. The term "Personal Information" is defined in section 6 of the Act as follows:
"Personal Information means information or an opinion about an identifiable individual, or individual who is reasonably identifiable:
1. whether the information or opinion is true or not; and
2. whether the information or opinion is recorded in a material form or not."
To find out more about the APP you can contact the Office of the Australian Information Commissioner ("OAIC") by email at the following address: enquiries@oaic.gov.au. Specific information about the APP may be accessed via the following link: https://www.oaic.gov.au/privacy/australian-privacy-principles/
This Privacy Statement is the Privacy Policy of the Skyreach Group and sets out the way that we manage personal and other information that our customers, employees and trading partners may provide to us. It also details how you can make a complaint to the office of the OAIC if you feel that we are not adhering to our obligations under the Act.
Depending upon the circumstances, the Skyreach Group may collect and hold a range of Personal Information associated to its commercial dealings with you. This information may include the following:
The Skyreach Group collects your personal information via a range of different means including but not limited to:
The Skyreach Group also uses Google Analytics to collect information about how individuals use its website. The information obtained is used to help the Skyreach Group understand its user's needs so that we can offer a better user experience. Google Analytics uses cookies to collect information about which pages you visited, how long you were on the site, how you got there (for example from a search engine, a link, an advertisement, etc) and what you select. Information collected by the cookies (including your IP address) is transmitted to and stored by Google on servers in Australia and overseas. You can opt out of Google analytics if you disable or refuse the cookie, disable JavaScript, or use the opt-out service provided by Google. Our online services may contain links to other websites. The Skyreach Group is not responsible for the privacy practices or policies of those sites and we recommend that you review their privacy policies.
Under the APP, you have the right to anonymity and pseudonymity in your dealings with us. However, if you fail to provide us with Personal Information, we may decline to enter into business dealings with you.
The Skyreach Group may hold your Personal Information in electronic and/or hard copy format, both at our head office and branch premises and with our agents and/or service providers. We implement a range of reasonable measures to ensure the security and integrity of your Personal Information. Careful measures are also undertaken in respect of destroying personal information that is no longer required to be held or needed for any lawful purpose.
The Skyreach Group collects and holds your information for the following reasons:
The Skyreach Group will not use your personal information for marketing purposes if you expressly indicate that you do not wish it to do so.
The Skyreach Group may disclose your personal information:
The Skyreach Group may also disclose your information to your authorised representatives when you provide us with written authority to do so.
At the time that we collect personal information from you for the purpose of obtaining disclosure to a Credit Reporting Body, the Skyreach Group will notify you of the name and contact details of the body to whom your personal information is to be provided. The name and contact details of the Credit Reporting Body presently used by the Skyreach Group is VEDA Advantage Ltd
The contact details for Veda Advantage Ltd are as follows:
Phone: 1300 921 62
You may access information held by us about you by submitting a request in writing by email or hard copy using either of the following address:
Or
The Privacy Compliance Officer Skyreach Pty Ltd (PO Box 1847) CABOOLTURE QLD 4510
You will need to provide the Skyreach Group with sufficient proof of identity before we will respond to any request for access or correction.
The Skyreach Group will typically respond to your request with 30 days. The information will only be supplied:
If the Skyreach Group declines your request for access to your Personal Information, it will provide you with written reasons for doing so.
The Skyreach Group will require you to pay its administrative fees for obtaining access to its Personal Information about you including the costs of locating, retrieving, compiling, copying and delivering the requested information.
Once you have obtained access to the Personal Information held by the Skyreach Group about you, you may request that we attend to the correction of any errors and/or omissions. Any request must be put in writing and sent to either of the addresses set out above. The Skyreach Group will typically process your request within thirty (30) days and will notify you of any changes applied by us by return. If the Skyreach Group declines to make any requested changes, it will provide you with written reasons for doing so.
The third parties to whom we disclose personal information may be located in Australia and overseas. We undertake steps to ensure that all our service providers agree to protect the privacy and security of your personal information and to use the information only for the purpose for which it is disclosed.
If you wish to make a complaint about the way in which the Skyreach Group deals with personal information and/or its adherence to the APP and/or any registered APP Code, you may direct your complaint in writing to either of the following addresses:
Or
The Privacy Compliance Officer Skyreach Pty Ltd (PO Box 1847) CABOOLTURE QLD 4510
The Skyreach Group will typically respond to your complaint in writing within thirty (30) days unless your complaint requires us to obtain further information from you or to make its own enquiries. The Skyreach Group will endeavour to deal with your complaint as quickly as possible given the circumstances. If it is likely that a conclusive response will not be given within thirty (30) days of receipt of your complaint, the Skyreach Group will notify you of the reasons for the delay and provide you with a revised timeframe for delivery of its response.
If you are dissatisfied by our response, you may make a complaint to the Office of the Australian Information Commissioner. For detailed information on how to make a complaint to the OAIC, please visit the following web link:
https://www.oaic.gov.au/privacy/privacy-complaints/
The contact information of the OAIC is set out below:
1300 363 992
Fax 02 9284 9666
Post: Sydney Office, GPO Box 5218 Sydney NSW 2001
Eligible data breaches happen where there is an unauthorised access to or unauthorised disclosure of or loss of personal information held by us which may result in serious harm to an individual.
Pursuant to the Australian Privacy Protection Principles, the Skyreach group must take all reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure.
A data breach response plan outlines processes as to how a data breach will be contained, evaluated and managed. The plan also outlines how we decide whether it is necessary to notify an individual of a data breach.
Our data breach response plan is as follows:
When deciding whether an individual is required to be notified, the following factors will be considered:
If we reasonably believe there is a risk of serious harm to the individual due to a data breach, we will notify the Commissioner. In some situations, we may also notify other third parties.
This Statement is the Credit Reporting Privacy Policy of the Skyreach Group and sets out the way that we manage and deal with Credit Information, Credit Eligibility Information and Credit Providers (CP) Derived Information. It also details how you can make a complaint to the Office of the Australian Information Commissioner if you feel that we are not adhering to our obligations under the Privacy Act 1988.
The Skyreach Group is a 'credit provider' within the meaning of section 6G of the Privacy Act 1988 and is subject to the provisions of Part IIIA Division 3 of the Act. The Skyreach Group, in the course of its dealings with you, may provide 'credit' within the meaning of the Act associated with the goods and services it supplies. This Credit Reporting Policy is made for the purposes of section 21B of the Act.
To find out more about the Skyreach Group's Obligations under Part IIIA Division 3 of the Privacy Act 1988 and the Credit Reporting Code you can contact the office of the Australian Information Commissioner by email at the following address: enquiries@oaic.gov.au. Specific information about our obligations under Part IIIA Division 3 of the Privacy Act 1988 and the Credit Reporting Code may be accessed via the following link: https://www.oaic.gov.au/privacy/credit-reporting/
Depending upon the circumstances, the Skyreach Group may collect and hold a range of credit information associated with its commercial dealings with you. This Credit Information may include the following:
Credit Information and Credit Eligibility Information is collected and held by the Skyreach Group in the manner and circumstances described in its privacy policy under the heading "How the Skyreach Group Collects and Holds Your Personal Information".
The Skyreach Group collects, holds and uses Credit Information and Credit Eligibility Information for the purpose of assessing your creditworthiness and whether it will agree to supply you with credit. Should any Credit Information and Credit Eligibility Information prove unsatisfactory to the Skyreach Group in its absolute and sole discretion, then the Skyreach Group may decline to provide you with the credit or make the provision of credit subject to further terms and/or conditions.
You may obtain access to and correction of Credit Information and Credit Eligibility Information held by the Skyreach Group in the manner and circumstances described in its Privacy Statement under the heading "Access to and Correction of Personal Information Held by the Skyreach Group".
You may make a complaint about the Skyreach Group for an alleged breach of Part IIIA Division 3 of the Privacy Act 1988 or a registered CR Code by the same means described in its Privacy Policy under the heading 'How You May Complain about the Skyreach Group for an Alleged Breach of the Australian Privacy Principles or Registered APP Code'.
The third parties to whom we disclose personal information may be located in Australia and overseas. We undertake steps to ensure that all our service providers agree to protect the privacy and security of your personal information and to use the information only for the purpose for which it is disclosed
[1] For the purpose of this statement, the Skyreach Group includes the following entities: Skyreach Pty Ltd A.C.N. 076 542 955, Skyreach (NSW) Pty Ltd A.C.N. 142 415 638, Skyreach (Vic) Pty Ltd A.C.N. 119 453 315 and Skyreach Equipment Sales Pty Ltd A.C.N. 083 374 654.