Privacy policy
Privacy Policy
Your rights in relation to privacy
We understand the importance of protecting the privacy of an individual's personal information. This policy statement sets out how Rightsize Advisory aims to protect the privacy of your personal information, your rights in relation to your personal information managed by us and the way we collect, hold, use and disclose your personal information.
In handling your personal information, we are committed to preserving your privacy in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and its 13 Australian Privacy Principles. This policy statement may be updated from time to time.
This policy statement addresses the following:
1. What kinds of personal information do we collect?
2. How do we collect your personal information?
3. Why do we need your personal information?
4. To whom do we disclose your personal information?
5. Overseas disclosures
6. Direct marketing
7. Security of your personal information
8. Third party links
9. Can you access and correct the personal information that we hold about you?
10. Right to refuse access or correction
11. Web site cookies
12. Notifiable data breaches
13. Privacy complaints
14. Changes to this policy
15. How to contact us
1. What kinds of personal information do we collect?
Personal information is information or an opinion about an identified, or reasonably identifiable, individual. During the provision of our products and services, we may collect your personal information.
Generally, the kinds of personal information we collect include:
- Your contact and identification information such as your name, telephone number, address and email
- If you are prospective employee, your employment history, academic results, personal interests and other information you may provide as part of the recruitment process;
- Personal information required for our functions and activities and to enable you to deal with us.
2. How do we collect your personal information?
Generally, we collect your personal information directly from you, through the completion of a manual or online form, an interaction or exchange in person or by way of telephone, facsimile, email, post or through the use of our website, including but not limited to when you:
- Make enquiries about our services;
- Ask to be placed on our mailing lists;
- Complete a form;
- Use our website;
- Meet with any of our team;
- Become a client or debtor; or
- Apply for a job with us.
3. Why do we need your personal information?
We collect, hold, use and disclose your personal information where it is reasonably necessary for the purposes of:
- Providing our services to you including:
- Facilitating financial advice;
- Carrying out our business functions including:
- Recruitment processes for potential employment;
- Personalizing and customizing your customer experience;
- Engaging you as a client;
- Accounting, billing and other internal administrative purposes;
- Identifying and informing you of products and services that may be of interest to you;
- Managing and enhancing our services
- To assist law enforcement agencies, for example, in connection with the detection, investigation or prosecution of an offence; and
- Any other legal requirements.
Where personal information is used or disclosed, we take reasonable steps to ensure it is relevant to the purpose for which it is to be used or disclosed.
You are under no obligation to provide your personal information to us. However, without certain information from you, we may not be able to provide our services to you.
4. To whom do we disclose your personal information?
We disclose your personal information for the purpose for which we collect it. That is, generally, we will only disclose your personal information for a purpose related to the provision of our services.
This may include disclosing your personal information to third parties engaged by us to perform administrative or other services.
5. Overseas disclosures
We do not disclose personal information to overseas recipients. However, in the event we need to do so:
- We will only do so in order to provide our services and products and manage our business functions; and
- Before disclosing any personal information to an overseas recipient, we will take reasonable steps to ensure the overseas recipient complies with the Australian Privacy Principles or is bound by a substantially similar privacy scheme, unless you consent to the overseas disclosure or it is otherwise required or permitted by law.
6. Direct marketing
We may use and disclose your personal information in order to inform you of our products, services that may be of interest to you.
In order to inform you of such products, services, offers and promotions, such communications may be sent to you by email, SMS or other form of electronic communication.
In the event you do not wish to receive such communications from us or our third party service providers, you can opt-out by contacting us via the contact details set out in paragraph 19 or through any opt-out mechanism contained in a marketing communication to you.
7. Security of your personal information
We take reasonable steps to ensure that the personal information we hold is protected from misuse, interference and loss and from unauthorised access, modification or disclosure. We hold personal information in both hard copy and electronic forms in secure databases on secure premises, accessible only by those who have a legitimate business purpose and reason for accessing it. The secure databases are operated either by us or by our external service providers and we have implemented a range of security measures, including strict confidentiality agreements, passwords, firewalls and encryption to restrict access.
We will destroy or de-identify personal information in circumstances where it is no longer required, unless we are otherwise required or authorised by law to retain the personal information.
You should be aware that the Internet is not a secure environment. Although we will use reasonable endeavours to protect your personal information, we cannot guarantee the security of personal information that is being transferred via the Internet. If you use the Internet to send us personal information, including your email address, it is sent at your own risk. Once we have received your personal information, we will use strict processes and security measures to prevent unauthorized access.
If we engage external service providers to assist us to fulfil our functions and activities, we generally require them to implement appropriate measures to protect any personal information that is provided to them.
8. Third party links
In the event that our website contains links to websites that are operated by third parties, such links are provided as a convenience to you and should not in any way be interpreted as an endorsement of any company, content or product that may be linked. Any access to a third party website that is linked to our website is at your own risk and we have no control over and are not responsible for the accuracy, validity or ownership of any content of a linked site and the privacy practices of those linked websites.
9. Can you access and correct the personal information that we hold about you?
We take reasonable steps to ensure personal information we collect, hold, use and disclose is accurate, up-to-date and complete.
Under the Privacy Act, you have a right to access and seek correction of your personal information that is collected and held by us.
If at any time you would like to access or seek correction of the personal information that we hold about you, or you would like more information on our approach to privacy, please contact our Privacy Compliance Officer via the contact details set out in paragraph 19.
We will grant access to your personal information to the extent required or authorised by the Privacy Act or other law and take reasonable steps to correct personal information where necessary and appropriate. In the event that access to your personal information is denied, we will provide you with reasons for doing so.
To obtain access to your personal information:
- You will need to provide proof of identity. This is necessary to ensure that personal information is provided only to the correct individuals and that the privacy of others is protected;
we request that you be reasonably specific about the information you require; and
- We may charge you a reasonable administration fee, which reflects the cost to us, for providing access in accordance with your request.
In the event we correct personal information that we have previously disclosed to another entity, you may request us to notify that other entity of the correction. In these circumstances, we will take reasonable steps to notify the other entity of the correction unless it would be impracticable or unlawful to do so.
We will endeavour to respond to your request to access or correct your personal information within 30 days from your request.
10. Right to refuse access or correction
We reserve our right to refuse your request to access or correct your personal information if we consider your request to be frivolous or vexatious or if we are otherwise legally entitled to do so.
If we refuse your request to access or correct your personal information, we will provide you with written reasons for the refusal and details of complaint mechanisms. We will nevertheless take reasonable steps to provide you with access in a manner that meets both your, and our, needs.
If we refuse your request to correct your personal information that we hold and you provide us with a statement that the information is inaccurate, out-of-date, incomplete, irrelevant or misleading, we will take reasonable steps to associate the statement in such a way that will make the statement apparent to users of your personal information.
11. Web site cookies
We make limited use of ‘cookies’ technology on our website. We use cookies which can record information about your visit to our website, to improve the functionality of our website and enable us to better understand your needs.
Cookies cannot determine the identity of individual users. Cookies are a feature of your Internet browser that you can disable at any time, but this may mean that you are not able to use the full functionality of our website.
12. Notifiable data breaches
We will protect the information we hold about you and comply with the notifiable data breaches scheme set out in the Privacy Act.
Where we become aware that a suspected data breach is likely to result in serious harm to you (in the event we hold information about you), we will investigate the suspected breach and notify you and the Office of the Australian Information Commissioner of that breach.
13. Privacy complaints
Please direct all privacy complaints to our Privacy Compliance Officer.
At all times, privacy complaints:
• Will be treated seriously;
• Will be dealt with promptly;
• Will be dealt with in a confidential manner; and
• Will not affect your existing obligations to us or affect the commercial arrangements you have with us.
In the event you have a complaint with respect to privacy, the Privacy Compliance Officer will commence an investigation and inform you of the outcome of the investigation. If you are dissatisfied with the outcome of the investigation, you may refer the complaint to the Federal Office of the Australian Information Commissioner or, if you would like to participate in an external dispute resolution process, to Credit Ombudsman Services Ltd, Phone 1800 138 422 or PO Box A252, Sydney South NSW 1235.
14. Changes to this policy
If we decide to change this privacy policy, we will publish those changes on our website so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.
15. How to contact us
For further information or enquiries regarding your personal information, please contact our Privacy Compliance Officer at:
Email: alex@rightsizeadvisory.com
Address: The Privacy Officer, Rightsize Advisory, 302/3 Kennedy Avenue Richmond, Victoria 3121.
Ph: +61 438 481 710
Privacy Policy Statement updated June 2019