This BODYBYFINCH website is owned by Finch entertainment Pty Ltd ABN: 41141867469 and is linked to a website owned and operated by an entity or organization (associate) with which Finch entertainment Pty Ltd has an agreement giving the associate access to our web platform and services. All references to “we”, “us” and “our” include the associate.
What is Personal Information?
What types of Personal Information do we collect?
Personal Information we collect from you will depend on how you use the Platform Services, and whether you are a registered user or just a visitor to the website. In general though, the types of Personal Information we may collect from you include your name, email address, postal address, telephone number(s), your country of residence, your age and gender, the organisation for whom you work, and information necessary for us to provide the Platform Services to you.
We collect Personal Information you provide directly to us when you contact us, register to use the Platform Services, pay for any Platform Services, participate in surveys and questionnaires, self-assessment exercises, and from other information you upload via the website from time to time.
If you wish to become a registered user of the website, we may collect from you information about you or relating to you when you use the Platform Services, such as when:
- you sign-up to receive our newsletter or other email notification services,
- you communicate with us via telephone, SMS, email or via social media (including by submitting a query through our website via our “Contact” webpages),
- you visit web pages associated with the Platform Services, and
- you conduct activities connected with your use of the Platform Services.
We may ask you to provide Personal Information including your name, email address, age and gender, questions and answers to security questions and other information that enables us to provide you with an online profile and to verify your identity when using the Platform Services.
To facilitate payment for any of the Platform Services, we may also require Personal Information, including a credit card number and expiry date, debit card number and expiry date, verification number(s) and billing information.
What happens if you wish to be anonymous or use a pseudonym?
You may be able to visit the website and deal with us anonymously or by using a pseudonym. However, we need certain Personal Information to be able to provide you with the services, products or information you seek. If you do not provide us with certain required information, we may not be able to give you access to those services or products or provide you with information you are seeking. For example, we may not be able to respond to your enquiry, assess your application, enter you in a promotion or send you requested information.
How do we use your Personal Information?
We use your Personal Information to provide you with the Platform Services.
We may use your Personal Information:
- to register you to use the Platform Services,
- to provide you with any other information or services you request and that we offer or provide,
- to manage the Platform Services (including your account) and provide you with support, as required,
- to process and obtain payment for any Platform Services,
- to understand your needs and usage of the Platform Services both to improve the Platform Services and our marketing, as well as the way we do business with you,
- to contact you for direct marketing and promotional purposes, and
- to answer queries or resolve complaints.
We may send you electronic messages updating you about products, services, events and special offers. We will only send electronic messages of this type if you have consented to receive them or it can be inferred from your existing relationship with us that there is a reasonable expectation of receiving those electronic messages. All electronic messages will identify us, and you can opt-out by unsubscribing to any of the emails we send.
Do we disclose Personal Information to third parties?
We treat all information we collect from you as strictly confidential.
We may disclose your Personal Information without notice or your consent:
- to our related companies,
- to our professional advisors,
- if we sell or merge our business (or part of it) with another organization or enter into a joint venture in connection with our business (or any part of it),
- to law enforcement authorities, if we suspect that an unlawful act is being committed or that such disclosure will prevent that unlawful act, or
- as otherwise required or authorised by law.
Apart from those disclosures, we will not give, sell, rent, loan or otherwise disclose any Personal Information to any third party, unless:
- you have authorised us to do so,
- we are legally required to do so, for example, in response to a subpoena, court order or other legal process, and/or
- it is necessary to do so in order to protect and defend the rights or property of this website. For example, with your consent, we may disclose your Personal Information to a third party vendor that we engage to mail survey results to you.
We may however share aggregated, non-personal information about website usage with unaffiliated third parties. This aggregated information does not contain any Personal Information about users of the website or the Platform Services.
Our relationships with third party service providers are governed by our contracts with them. If any third party service provider to whom we disclose your Personal Information is located outside Australia, we will use our reasonable endeavours to negotiate service contracts with those providers that contain privacy and confidentiality provisions consistent with our obligations under the Act. How do we collect and use information that is not Personal Information?
- We operate statistics gathering software on the website to collect information about the number of visitors coming to the site. Usage data will be collected and correlated between your logged in and logged out sessions. No identifying information is collected by this software. We use this information to improve our own technical structure and performance and to determine which areas of the website are most popular.
- From time to time, we may sell or disclose information you provide to us that is not Personal Information (and does not disclose your identity) to any person for any purpose at our sole discretion, including to people or companies located outside Australia. For example, we may sell, disclose or use information you provide to us that is not Personal Information to:
- determine what advertising, promotional materials, products or services are likely to be of most interest to you or other website users and visitors; and
- assist third parties to monitor general consumer trends in various areas.
- We may also modify your Personal Information (through encryption or other de-identifying techniques) so that it is in a form from which you cannot be identified and sell or disclose such modified information to any person for any purpose, including to people or companies located outside Australia.
‘Cookies’ are small data files sent by a website and stored on your computer’s hard drive when you visit a website. A cookie can contain certain information that the website uses to track the pages you have visited. The only Personal Information a cookie can contain is information you personally supply. A cookie cannot read data off your hard disk or read cookie files created by other websites.
You can set up your browser so that it does not accept our cookies. You can also manually delete our cookies from your browser. However, these actions may stop you from accessing the full benefit of the Platform Services.
How do we protect your Personal Information?
We will take commercially reasonable and appropriate steps to ensure your Personal Information is protected from risks such as loss, unauthorized access or use, destruction, modification or disclosure.
All the information you provide to us is handled through the use of the Secure Socket Layer (“SSL”) protocol. SSL is a leading Web technology that encrypts your account information. If you register online, we use 128-bit encryption when we ask for or you provide Personal Information or other confidential information. Also, some personal data, such as your membership id and/or password, will be stored in encrypted form.
You should never reveal your password to third parties. If you lose control of your password, you may lose control over your Personal Information and may be liable for actions taken in your name by third parties using your password and/or Personal Information. We take no responsibility for loss caused in this way.
You always need to exercise caution when sending information via e-mail or the internet. E-mail messages and the internet do not have the security features that are built into our website.
We cannot accept responsibility for the security of information you send to or receive from us via e-mail or over the internet or for any unauthorized access, use or modification of that information.
We also have procedures that limit our employees and contractors having access to Personal Information. Apart from the disclosure or transfer of Personal Information to our Hosting Service Provider, only those employees and contractors with a business reason to know have access to Personal Information. We educate our employees about the importance of privacy and confidentiality through standard operating procedures, mandatory training programs and internal policies on data privacy and corporate integrity. We take appropriate disciplinary measures to enforce employee privacy responsibilities.
Links to other websites
Payment card information
We engage secure third party payment service providers identified on the website from time to time to process payments for Platform Services offered through the website. Payments may be made by credit or debit cards as permitted by the website from time to time. We will not keep a record of your credit or debit card number for payments for Platform Services made via the secure third party payment service providers used by the website.
Where is your Personal Information stored?
Personal Information we collect from you is stored securely on servers in Australia. We also engage a third party data hosting service provider (Hosting Service Provider) to provide data hosting services and store data.
Servers in which your information (including your Personal Information) is stored by our Hosting Service Provider are currently located in Australia, although additional or other locations may be used in the future. In particular, our Hosting Service Provider will also likely store your Personal Information on servers located in the United States or elewhere. The Hosting Service Provider may be subject to foreign laws in those locations that do not have privacy obligations similar to the Act and/or that compel disclosure of personal information to third parties, such as governmental authorities.
If our Hosting Service Provider stores your Personal Information outside Australia, the Act requires us to ensure that the Hosting Service Provider complies with applicable Australian privacy laws, unless you agree otherwise. By providing us with information (including Personal Information), registering to use the Platform Services, using the Platform Services, uploading any materials or information via the website, obtaining products or services provided via the website or undertaking the HoA Test or other surveys and questionnaires, you:
- consent to us disclosing and transferring your information (including Personal Information) to our Hosting Service Provider;
- consent to our Hosting Service Provider storing your information (including Personal Information) on servers located outside Australia, particularly in the United States; and
- agree that the requirement under the Act for us to ensure that our Hosting Service Provider complies with applicable Australian privacy laws in respect of your information (including Personal Information) does not apply if our Hosting Service Provider stores personal information outside Australia, including in the United States.
How can you access your Personal Information?
You are entitled to know what Personal Information we hold about you. You are also entitled to update or correct your Personal Information.
If you request access to your Personal Information, our Privacy Officer will verify your identity. Your request will then be forwarded to our information systems manager who will acknowledge receipt of your request within 14 days and arrange for access to be provided to you in an appropriate manner within a reasonable time, usually within 30 days of receipt of your request. We may charge a reasonable fee for providing access if a significant amount of time is required to locate your Personal Information or to collate or present it in an appropriate form. We will notify you in advance of any likely charges (or the basis for their calculation) for providing access to your Personal Information.
In rare circumstances, and only where it is permitted under the Act, we may not be able to provide you with access to your Personal Information. If we are unable to provide you with the requested access, we will state why this is so and consider whether the use of an intermediary would be appropriate to provide you with an explanation of our position.
If you would like to contact us in relation to your Personal Information, please do so by emailing: firstname.lastname@example.org
If you are not satisfied with how we handle your Personal Information, you are entitled to lodge a complaint with the Federal Privacy Commissioner. Information regarding how to lodge a complaint is available from the Commissioner's website at www.privacy.gov.au or by ringing the Commissioner's information line on 1300 363 992. However, before investigating a complaint, the Commissioner is legally required to be satisfied that you have first expressed your concern to us to afford us an opportunity to resolve the complaint directly, unless it is inappropriate for you to do so. You may lodge a complaint with our Privacy Officer using the contact details on our “Contact” webpage. We will inform you who will handle your complaint and you may contact our Privacy Officer to enquire about the progress of the complaint at any time.
How do you contact us?
If you contact us by phone, you will need to answer security questions before any Personal Information is revealed or amended.
We may retain records of your communications with us for the purposes of contacting you and for our internal purposes.