The Gili Gambay Project Privacy Policy
This website ("Site") and the Gili Gambay Project ("Project") are operated by Retail Apparel Group Pty Ltd (ACN 110 176 077) (“RAG”, we or us). This policy applies to information we collect, use, disclose and hold in connection with the Project.
Protecting any personal information you provide to us is very important. We are committed to protecting your privacy in all your dealings with us. In Australia, we are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) and any other relevant privacy legislation.
This Policy outlines how we will treat your personal information, including sensitive information, and explains:
- what information we collect;
- how we collect your information;
- how we use your information;
- how and with whom we share your information;
- how long we keep your information and how it is stored and secured; and
- the rights you may have in relation to your personal information.
1 WHAT INFORMATION WE MAY COLLECT ABOUT YOU
The personal and sensitive information we collect may include:
- your biographical details, such as your name, date of birth, gender, occupation, personal history, upbringing, and racial or ethnic identification (including what town, community, First Nations Country and First Nations Nation you are from);
- your contact details, including email address, street address, postal address and phone number;
- information regarding your participation in, or connection to, First Nations communities, businesses and other organisations;
- your financial information, including bank account details;
- photos, videos or other material you provide to us (including in connection with your application or any funding that is provided); and
- other personal information you might supply to us from time to time, including when you engage with us through any social media channels or by email or telephone.
2 HOW DO WE COLLECT INFORMATION ABOUT YOU?
We may collect personal information, including sensitive information, from you when you:
- submit an application for funding in connection with the Project;
- provide further information or material in support of your application or any funding that is provided to you;
- agree to your information being included in a third party's application for funding in connection with the Project;
- contact us via the "Contact Us" form or contact details on the Site, or otherwise correspond with us in connection with the Project, including by telephone, email or via social media; or
- attend meetings, consultations or events with us.
You expressly consent to our collection of sensitive information about you in connection with the Project, and agree to our use and disclosure of such sensitive information in accordance with this policy. Sensitive information includes information or an opinion about your racial or ethnic origin, political opinions, religious beliefs, sexual orientation, health information, criminal records, membership of professional or trade associations, or trade unions.
We may also collect certain information automatically when you visit our Site. In particular:
- when you access our Site, we use “cookies” to make it easier for you to use our Site. These cookies record data about the pages you browse and the activities you carried out during your visit. Further details about our use of cookies are set out in our Cookie Policy.
- we may record details relating to your access to our Site (for example, URL addresses, traffic data, website clicks etc); and
- we may record information about the type of device you have used to visit our Site, your device settings and the cause of any system errors. Your device manufacturer or operating system provider will have further details on what information your device makes available.
We will generally collect your personal information directly from you, unless it is impracticable or unreasonable to do so. From time to time we may collect personal information about you from third parties, for example from publicly available sources.
If you do not supply personal or sensitive information we request from you, you may not satisfy the eligibility criteria for the grant and you may be deemed ineligible for this grant opportunity or you may be asked to provide alternative information.
If you provide us with personal information, including sensitive information, about a third party, including as part of the application you submit for funding in connection with the Project, you must ensure that you have obtained that person’s consent for us to collect, use, disclose and handle their personal information, including sensitive information, in accordance with this privacy policy.
3 HOW WE USE YOUR INFORMATION
We will use and disclose your personal information for the purposes for which we collected it, for other related purposes that you would reasonably expect and where otherwise permitted by law. Generally, we may use your information in the following ways:
- to review and assess any application for funding in connection with the Project;
- to administer the grants provided by the Project;
- to publish certain information about grant recipients (including on the Site or our social media), including details of the recipients, the amount and duration and details of the grants awarded and how the grants will be used by the recipients;
- for the purpose of outcome reporting and promoting the Project;
- to contact you to obtain your feedback regarding the Project;
- to respond to any queries;
- to protect and defend our legal rights and interests; and
- to administer and monitor our Site, including to ensure that content is presented in the most effective manner for you and for your device, to allow you to participate in interactive features when you choose to, to troubleshoot and improve user experience, and for fraud analysis and protection.
We might use your information for these purposes regardless of whether the information was collected online, via email, on the phone or in person.
We may also use or disclose your personal information:
- for our general business operations (e.g. maintaining business records, complying with our legal and insurance obligations and statistical purposes);
- to comply with legal requirements and law enforcement requests;
- to investigate or prevent conduct that may be fraudulent or criminal; and
- to resolve disputes.
5 DISCLOSURE OF YOUR INFORMATION
5.1 Service providers
We may share your personal information, including sensitive information, with third parties as required to review and assess any application for funding from the Project, to administer the grants provided by the Project and to provide core business services to us. These may include:
- third parties we engage with for the purpose of reviewing and assessing any application for funding from the Project that you submit to us;
- third parties we engage with for the purpose of administering the grants provided by the Project that you have applied for;
- third parties we engage with for the purpose of promoting the Project;
- third parties we engage to provide IT systems support, including website and IT service providers in order to maintain the functionality of our website and database;
- third parties we engage to provide marketing and social media services;
- any entity to which we are required or authorised by law to disclose information (including but not limited to the courts, Federal or State government bodies, agencies or departments, government investigative or enforcement agencies);
- our professional advisers; and
- any person to the extent necessary, in our view in order to carry out any instruction you give to us.
5.2 Overseas disclosure of personal information
We do not intend to transfer any personal information we collect in connection with the Project overseas. However, some of our service providers and the third parties described above may have servers, or are located in countries other than Australia, including in Asia, USA, UK and Europe, and your personal information may be disclosed in those countries.
Every external company we work with has a contract with us which clearly sets out our expectations and requirements in handling personal information and obligates them to meet the appropriate privacy legislation requirements.
6 HOW LONG WE KEEP YOUR INFORMATION
We retain the information you provide only for a period of time that is reasonable in the circumstances, for example:
- for as long as we need the information for the purposes of the Project; or
- for as long as we are otherwise required to retain it by law.
In any case, we will only retain your personal information until it is no longer required for the use for which it is collected (unless we are required to retain it by law, in which case we will not use it for any purpose other than what is legally required).
7 HOW WE STORE AND SECURE YOUR INFORMATION
We will take reasonable steps to store and hold your personal information in a secure and restricted manner and to protect your personal information from misuse, loss and unauthorised access, modification or disclosure. We have the necessary technical and organisational security measures in place, as are appropriate, and these security measures ensure a level of security appropriate to the risk that may arise in the processing of your personal information.
We store and hold personal information electronically and/or in hard copy. Electronic information is kept on secure servers.
Access to your personal information is limited to those individuals who require such access in order to perform their duties and responsibilities.
Any personal information held by a third party storage provider is done so under strict contractual obligations of confidentiality and non-disclosure.
8 ACCESSING AND CORRECTING YOUR INFORMATION
We will take reasonable steps to keep your personal information up-to-date, complete and accurate and may, from time to time, ask you to update your details.
You may lodge a request to correct personal information that we hold about you if you believe it is inaccurate, incomplete, out-of-date, irrelevant or misleading, in which case please contact our Privacy Officer at Information@thegiligambayproject.com.au.
You may request that we provide you with access to the personal information we hold about you. Generally, we will provide you with access, except in limited circumstances where the law permits us to deny access. Any such requests must be made in writing to our Privacy Officer at Information@thegiligambayproject.com.au.
9 CHANGES TO THIS POLICY
We may change this Policy from time to time. If we make changes, we will publish the updated version on our Site with a revised publication date. If the changes are significant, we may add a statement to the homepage of the Site or send you an email with the update.
Please check this Policy regularly to stay informed about our information practices and the ways you can help protect your privacy.
10 CONTACTING US AND COMPLAINTS
If you have any questions about this Policy or how we collect, use and disclose your personal information, or if you have any queries or complaints about the way that we have handled your personal information, please contact our Privacy Officer at Information@thegiligambayproject.com.au.
All complaints are reviewed and considered by our Privacy Officer. We will generally respond to complaints within 30 days.
If you are not satisfied with the result of your complaint, you can refer your complaint to the relevant Privacy Commissioner.
The Office of the Australian Information Commissioner can be contacted by:
Emailing enquiries@oaic.gov.au
Telephone – 1300 363 992
Post to:
Office of the Australian Information Commissioner
Sydney Offices
GPO Box 5218
Sydney NSW 2001