1. Privacy Statement
Creo Legal Pty Ltd ABN 86 619 924 391 (we, us, our) consider your privacy to be important and we take our responsibility to protect it seriously. We understand that you are concerned about your privacy, along with the confidentiality and security of any personal information that you provided to us.
2. Personal information collected by us
Personal information is information or an opinion of an individual whose identity is apparent or can be reasonably ascertained. As part of our business, we may collect personal information from you. Given the nature of our products and services, some of that information may be sensitive information.
We collect a variety of personal information that is reasonably necessary for the purposes of conducting and improving our business and our products and services. This information may be collected in a number of ways, including:
(a) through our website creolegal.com.au (our Site);
(b) through our services;
(c) through our account creation process at our Site;
(d) from our users;
(e) through marketing research including surveys;
(f) from competitions and surveys;
(g) through any of our other business activities or events;
(h) through a person seeking employment with us, having been employed by us or being employed by us; and/or
(i) by otherwise having some form of contact with a person, such as by personal contact, mail, telephone, email, video teleconferencing, Internet or other forms of telecommunication.
Personal information collected by us may include:
(a) your name;
(b) your title;
(c) your contact details (including street address, postal address, email address, phone number and fax number);
(d) your time zone;
(e) your gender;
(f) your date of birth;
(g) your place of birth;
(h) the languages you speak;
(i) your marital status;
(j) your occupation and employment status;
(k) location information;
(l) transactional information (including your method of payment);
(m) your reasons for using our Site or any of our products and services;
(n) your preferences and opinions relating to our Site or any of our products and services;
(o) logs, which may include information such as your Internet Protocol (IP) address, browser type, browser version, clickstream data, the pages of our Site that you visit, the features of our Site, activities or actions you do while using our Site, the time and date of your visit to our Site, the time spent on any pages of our Site, and other log related information relating to your use of our Site.
We endeavour to only collect personal information about you from you, where it is reasonable and practical to do so.
3. Use of personal information
Generally, we use personal information for providing, evaluating, improving, personalising and developing our business, our Site, our other products and services, and to protect our users. More specifically, we use personal information for:
(a) improving our Site, our other products and services, and user satisfaction;
(b) providing and delivering our Site and our other products and services to you;
(c) providing support to you (including technical support) in relation to the use of our Site and our other products and services;
(d) promoting and delivering our Site and our other products to organisations and individuals;
(e) our internal research and statistical purposes (including market segmentation and customer value analysis); and
(f) enabling us to forward to you other information or material which we believe may be of interest to you, or which you have indicated you may be interested in receiving.
We automatically gather information to monitor the use of our Site and our other products and services. Most of the data we collect is aggregated, and such aggregated information is effectively anonymous to us.
Sometimes you will be asked to confirm that you agree to a particular activity, or the collection of your personal information for a specific purpose. Though we usually collect aggregate data, we will make it clear to you if any information is being collected in a way that could personally identify you.
4. Disclosure of personal information
4.1 Disclosure generally
We do not disclose your personal information to any third party, other than those requiring this information to assist us or those that are directly related to the purposes for which the information was collected, including:
(a) to external service providers, so that they can provide products and services in connection with the operation and improvement of our business;
(b) to our affiliates, including but not limited to other organisations and businesses within our group of organisations;
(c) as permitted under the Privacy Act or any other applicable law;
(d) with your consent; and
(e) if you would reasonably expect that your personal information would be passed to the person to whom the personal information is disclosed.
4.2 Information you make public
Certain services we provide and features on our Site are open to any other account holder to view, such as our blog (if any), community forum (if any) and certain aspects of your personal user profile. Any information you create or post in these locations may be available and accessible to other users of the Site.
Our Site may also enable you to upload, post, transmit, display, perform or distribute content, information or other data, which may include your personal information. Any information that you choose to disclose by means of such features becomes public information.
We strongly urge you to exercise caution when deciding to disclose your personal information by such means. You agree to assume all responsibility for all personal information that you have made public.
5. Protecting your personal information
We take reasonable steps to protect all personal information which we hold (including your personal information) from misuse, interference, loss, unauthorised access, modification or disclosure.
The precautionary steps we take to protect personal information may include:
(a) adopting measures to protect our computer systems and networks for storing, processing and transmitting personal information;
(b) adoption of procedural and personnel measures for limiting access to personal information by our staff;
(c) regularly reviewing our information collection, storage and processing practices;
(a) secured encrypted servers, password protection for electronic files, multifactor authentication procedures, securing paper files in locked cabinets and physical access restrictions.
We also take steps to ensure that the personal information we collect is accurate, up-to-date and complete. These steps may include maintaining and updating personal information when it is apparent that updating is required, or we are otherwise advised by you that your personal information has changed.
Notwithstanding that we use our best endeavours to protect all personal information, we cannot completely guarantee the security of your personal information.
When no longer required, personal information is destroyed or deleted in a complete and confidential manner.
Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s storage drive.
Like many sites, we use “cookies” to collect information. You can instruct your browser to refuse all cookies, or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some features of our Site or our other products and services.
7. Web beacons
Web beacons (also known as clear gifs, pixel tags or web bugs) are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of users or to access cookies.
Unlike cookies which are stored on the user’s computer storage drive, web beacons are embedded invisibly on web pages (or in e-mail). Web beacons may be used to deliver or communicate with cookies, to count users who have visited certain pages and to understand usage patterns.
Like many sites, we use web beacons to collect information which is done in accordance with this Policy.
8. Overseas disclosure
8.1 Overseas IT service providers
We may disclose personal information to outsourced information technology service providers, including cloud computing providers and data storage providers, based overseas primarily located in the United States of America and Europe.
We will take reasonable steps to ensure such overseas recipients do not breach the Australian Privacy Principles contained in the Privacy Act (APP’s), or are subject to laws or a scheme substantially similar to the APP’s.
8.2 Disclosure for analytics
We may use Google Analytics and other third party analytics software to track your usage of our Site. Google Analytics is a web analysis service provided by Google. Google utilises the data collected to track and examine the use of our Site, to prepare reports on its activities and share them with other Google services.
8.3 Consent to overseas disclosure
Other than as contemplated in this clause, we will only disclose your personal information to an overseas recipient if:
(a) you consent to the transfer; or
(b) the disclosure of the information is required, authorised or permitted by or under an Australian law, other applicable law or a court/tribunal order.
9. Third parties
We confirm that we have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third party sites, products or services whatsoever.
You should be aware that your ability to opt-out of a third party tool or platform will depend on the conditions governing your agreement with that third party.
10. Accessing and updating your personal information
If you have established an account with us, your personal information is open and freely available for you to access through our Site after you log in.
We will provide you with access to your personal information held by us, unless:
(a) giving access would be unlawful; or
(b) denying access is required under the Privacy Act, or any other applicable law.
If you wish to amend personal information that we hold that is not editable through our Site, please contact us at email@example.com to request amendment. Depending upon the personal information you seek to access, you may be asked:
(a) to put your request in writing with evidence to verify your identity; and/or
(b) to provide further details to assist us in responding to your request in a timely manner.
We will respond to a request for access to personal information within a reasonable period after the request is made.
If we elect not to correct your information, we will within a reasonable time notify you of the reason for our refusal, the mechanisms available for you to complain about our refusal and such other matters required by the Privacy Act.
If you wish to have your personal information deleted, please contact us at firstname.lastname@example.org and we will take all reasonable steps to delete it, unless we are required by law to keep it.
Generally, all competitions run by us are hosted on our servers and are conducted, with respect to the collection and use of personal information, in accordance with this Policy.
12. International users
If you are located outside the Australia and choose to provide your personal information to us, your personal information will be transferred to Australia and processed in accordance with this Policy.
We strive to ensure our compliance with this Policy and to regularly review our practices under it.
If at any time you have a complaint against us regarding our Policy, including a breach of the Privacy Act, we invite you to contact us at email@example.com. All complaints made will be dealt with in confidence. We endeavour to respond within 30 days of receipt of a complaint with a resolution or proposed resolution of the issue raised.
Please note that you may also make a complaint to the Office of the Australian Information Commissioner (OAIC) about the handling of your personal information. Information on making a privacy complaint can be found on the OAIC website at http://www.oaic.gov.au/individuals/how-do-i-make-a-privacy-complaint.
We reserve the right to vary this Policy from time to time without further notice to you. Any variations made will be updated on our Site. We will not reduce your rights under this Policy without using our best endeavours to first provide you with notice. It is your responsibility to check our Policy every now and again to ensure that you are aware of any changes made to it.
15. Further information
For any further information about this Policy please contact us at firstname.lastname@example.org.