Privacy Policy - ishopEZY For individuals whose personal information may be collected by this organisation. ishopEZY is covered by 10 National Privacy Principles, the NPP, as set out in the Privacy Act 1988 (amended by the Privacy Amendment (Private Sector) Act 2000). To comply with our obligations under the NPPs, we have a Privacy Policy which sets out how we manage privacy in our organisation. You are welcome to receive more information about the Policy. Purpose of the Policy ishopEZY takes its obligations under the Privacy Act seriously and would like to take all reasonable steps in order to comply with the Act and protect the privacy of the personal information that we hold. This policy sets out how we intend to do so. The personal information that the Organisation collects are as follows: • Login details: email address; time and date of login; passwords • Click through rates • Geographic location of login Why we collect it? ishopEZY collects, uses and discloses the information in accordance with the collection statement. We collect the information for the purpose of: • Improvement of the functionality of the website • Generation of data for marketing purposes to promote advertising on the site • Retrieval of lost passwords Access to your personal information IshopEZY provides access to the personal information that we hold about you. Access will be provided in accordance with our Access Policy. If you require access to your personal information please email ishopEZY. Complaints If you have any complaints about our privacy practice or wish to make a complaint about how your personal information is managed please email ishopEZY. Storage ishopEZY takes all reasonable steps to protect the security of the personal information that we hold. This includes the storage of personal information on a computer not linked to the internet, and appropriate measures to protect electronic materials and materials stored and generated in hard copy. Contract ishopEZY maintains the storage and collection of all data. No data storage or processing functions are contracted out. What happens if you choose not to provide the information? You are not obligated to give us your personal information. However, if you choose not to provide ishopEZY with the personal detail (email address and password) we may not be able to provide you with the full range of our services. You can gain access to the personal information that the organisation holds about you, simply by emailing your request to ishopEZY.com COLLECTION STATEMENT The personal information collected is collected by ishopEZY. The information is collected for the purpose of: • Improvement of the functionality of the website • Generation of data for marketing purposes to promote advertising on the site • Retrieval of lost passwords ishopEZY will only disclose this information to: • Businesses that wish to advertise on the ishopEZY site We collect this information in order to show potential customers of ishopEZY the amount of traffic on our website. What happens if you choose not to provide the information? You are not obligated to give us your personal information. However, if you choose not to provide ishopEZY with the personal detail (email address and password) we may not be able to provide you with the full range of our services. You can gain access to the personal information that the organisation holds about you by simply emailing your request to ishopEZY.com Sources of information Where possible ishopEZY will collect the information directly from the customer. If the personal information was collected not from the customer but from another party, the Organisation must take reasonable steps to inform that individual of the Collection and provide the above Collection Statement. ACCESS POLICY This policy is directed to those individuals whose personal information is held by our Organisation. Purpose The purpose of this Policy is to set out how ishopEZY will provide access to your personal information. The Policy is part of our Privacy Policy and our desire to provide for, maintain and give effect to your right to privacy. Overriding Principles At all times the conduct under this policy will be governed by the following principles: • All requests for access will be treated seriously • All requests will be dealt with promptly • All requests will be dealt with in a confidential manner • Your request to access your personal information will not effect your right to use the ishopEZY site Form of Access ishopEZY will provide access by allowing you to inspect, take notes of or receive copies of print outs of the personal information that ishopEZY holds about you. You can make your request by emailing us at ishopEZY.com To obtain access you will have to provide proof of your identity. This is necessary to ensure that personal information is provided only to the correct individuals and that the privacy of others is not undermined. When will Access be denied? Access will be denied if: • the request does not relate to the personal information of the person making the request; • providing access would pose a serious and imminent threat to life or health of a person; • providing access would create an unreasonable impact on the privacy of others; • the request is frivolous and vexatious; • the request relates to existing or anticipated legal proceedings; • providing access would prejudice negotiations with the individual making the request; • access would be unlawful; • denial of access if authorised or required by law; • access would prejudice law enforcement activities; • access discloses a 'commercially sensitive' decision making process or information; or • any other reason that is provided for in the National Privacy Principles (NPPs) set-out under the Privacy Act. Where possible ishopEZY will favour providing access. It may do so by providing access to the appropriate parts of the record or by using an appropriate 'intermediary'. Time We will take all reasonable steps to provide access within 10 days of your request. Costs and charges ishopEZY will impose the following charges: • Photocopying - $1.50 per page • Delivery cost of information stored off-site - where information if stored off-site, the cost of obtaining access to the information is $35.00 • Access to electronic databases - $35.00 PRIVACY COMPLAINTS: HOW WE HANDLE PRIVACY COMPLAINTS Introduction ishopEZY sees the importance of privacy to the organisation, its customers and other stakeholders. As such, ishopEZY is committed to protecting the privacy of the personal information that we hold. This is part of our organisation's: a. Legal obligations under the Privacy Act 1988 b. Ethical and business obligations c. Service to you ishopEZY places high priority on effectively dealing with any complaints dealing about privacy that you may have. Overriding principles At all times the conduct under this policy will be governed by the following principles: a. All complaints will be treated seriously b. All complaints will be dealt with promptly c. All complaints will be dealt with in a confidential manner d. The privacy complaint will not effect your existing right to use the ishopEZY site Who may complain under this policy? If you have provided us with personal information you have a right to make a complaint, have it investigated and dealt with under this policy. What is a privacy complaint? A privacy complaint relates to any concern or dispute that you have with our privacy practices as it relates to your personal information. This could include matters such as: a. How personal information is collected b. How personal information is stored c. How this information is used or disclosed d. How access is provided What do I do if I have a complaint about privacy practices? ishopEZY resolves grievances at the local level if possible. All complaints will be logged on a database/complaints register. To lodge a complaint, simply email us at ishopEZY.com Grievance Procedure The goal of this policy is to achieve an effective resolution of your complaint within a reasonable set time frame of 14 days. 1. Request further information: Your initial contact may request further information from you. You should be prepared to give as many details as possible including details of any relevant dates and documentation. This will enable the contact to investigate the complaint and determine an appropriate and useful solution. All details provided will be kept confidential. 2. Discuss options: We will discuss options for resolution and if you have suggestions about how the matter might be resolved you should discuss these with your contact. The contact could also suggest other solutions or give examples of how the personal information can be revised or stored in a different way. 3. Investigation: The complaint may be investigated. The organisation will try to do so within [48 hours]. It may be necessary to contact others in order to proceed with the investigation. This may be necessary in order to progress your complaint. 4. If the complaint cannot be resolved to your satisfaction, we will discuss with you the reasons for our decision. 5. If there is still disagreement your complaint will be dealt with by a mutually agreed independent intermediary. 6. If after all the above steps have been followed you complaint is unresolved you are free to take your complaint formally to the Federal Office of the Privacy Commissioner. Records The organisation will keep a record of your complaint and the outcome. Anonymous complaints ishopEZY is unable to deal with anonymous complaints as we are unable to investigate properly and follow-up such complaints. However, in the event that an anonymous complaint is received, ishopEZY will note the issues raised and try and resolve them appropriately. Information For any further information about this policy please contact ishopEZY.com