The Mill Castlemaine (“We”) guarantee to our subscribers that we will never give names, addresses or other personal information to anyone wishing to contact our subscriber database. The Mill Castlemaine will only permit special offers or invitations from third parties to be made to our subscribers through us, where such an offer is judged by us to be of some interest or benefit to our subscribers. Usually such offers will be limited to reduced price or priority booking, or special offers.
Any customer who wishes to be removed from our subscription list should email us at The Mill Castlemaine news@millcastlemaine.com.au
We wrote this Privacy Policy to give you a better understanding of how we collect, use, disclose and store your personal information. Please read it carefully as it gives you an understanding of our privacy practices.
By accessing, using, signing up to or submitting applications to The Mill Castlemaine, you agree to be bound by this Privacy Policy.
2. INTRODUCTION
In this Privacy Policy, “our” “we” “us” or “The Mill” means The Mill Castlemaine (ABN 23 183 820 637).
We are committed to protecting your privacy through compliance with the Privacy Act 1988 (Cth) (“Privacy Act”), the Australian Privacy Principles (“APP”), the General Data Protection Regulation (“GDPR”) and any other privacy laws applicable to our platform.
Where our platform (which terms includes The Mill Castlemaine websites and applications) contains links to third-party websites, these sites are not governed by this Policy. We are not responsible for their operation and their privacy practices so please check those.
If you link your social media accounts from other third-party services to our platform, we may also get information from those accounts. The information we get from those services depends on your settings and their privacy policies, so please check what those are.
3. TYPES OF INFORMATION WE COLLECT
3.1 Personal information
We collect personal information to provide you with a personalised, insightful and rewarding experience.
‘Personal information’ when used in this Privacy Policy has the meaning given to it in the Privacy Act but it generally means any information that can be used to personally identify you. When you sign up for, register, or use The Mill Castlemaine products or services (including our platform), or attend any event hosted by The Mill Castlemaine (excludes individual businesses based at The Mill Castlemaine), the type of personal information we collect may include your name, address, contact details (including phone number and email address), and gender.
Your personal information will only be used and stored for the primary purpose for which it was collected and not for any other purpose, unless you would reasonably expect us to use or disclose the information for a secondary purpose or your consent has been obtained to use the information for additional purposes under clause 4 of this Policy.
3.2 Log data
When you use our platform, our servers record information including information that your browser automatically sends whenever you visit a website, or that your mobile app automatically sends when you’re using it (“log data”). This log data includes device identifiers, device type, geo-location information, connection information, statistics on page views, traffic to and from our platform, mobile network information, time, date, referring URL, the type of operating system and browser, ad data, IP address, server address, date and time of your visit to our platform, information of documents you download, pages visited, search terms, cookie information, and standard web log data.
The log data may be processed for the purposes of operating our platform, providing our services, ensuring our security, maintaining back-ups of our databases and communicating with you.
3.3 Cookies and other similar technologies
To capture log data, we may use cookies and similar technologies like pixels, web beacons and local storage to collect and store personal and non-personal information about how you use it.
Cookies are files that store information on the device on which you are using or accessing our platform. Cookies also retain your details and preferences, so you can easily continue your browsing session upon return to our platform. If you do not want to activate cookies, you can opt-out of receiving them by amending the settings of your internet browser, although you may find that some parts of our platform will consequently have limited functionality and personalisation if you do so!
We try our best to handle any information collected by cookies in the same way that we handle other personal information described in this Policy.
3.4 Third-party analytics tools
Third-party analytics tools collect non-personal information such as how often you visit our platform, the web pages you visit, add-ons, and other analytics data that assists us in improving our services. These tools might include Google Analytics, Google AdWords conversion tracking, Google Tag Manager, or Facebook Ads conversion tracking. Third-party cookies may be placed on your computer by a service provider to us, for example, to help us understand how our platform is being used. Third-party cookies may also be placed on your device by our business partners to advertise the service to you elsewhere on the Internet. We reserve our rights to modify, add or remove any third-party analytics tools. By using our platform, you consent to the processing of any non-personal data these tools will collect in the way and for the purposes described above.
4. WHY WE COLLECT YOUR DATA
(Legal basis of our data processing)
We reserve our rights to modify, add or remove any third-party analytics tools. By using our platform, you consent to the processing of any non-personal data these tools will collect in the way and for the purposes described above.
We collect, store, use and disclose your personal information through lawful and fair means, so we can perform our business activities. The legal basis for our processing of your personal information and other data is based on:
- your consent through your voluntary submission of the information and agreeing to these terms or ticking “I agree” button on our platform;
- the information being necessary for the performance of a contract to which you are a party (primary purpose);
- for carrying out pre-contractual measures; and/or
- any other legitimate interests as detailed in this Privacy Policy.
By using The Mill Castlemaine products or services (including our platform), or attending any event hosted by The Mill Castlemaine, you provide your consent to us processing your personal information for secondary purposes including (without limitation):
- for internal operations such as record keeping, database management, data analytics or training
- sending you marketing and promotional messages and other information that may be of interest to you
- verifying your identity, investigating any complaints related to you
- managing, researching and developing our products and services.
We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate:
- under applicable law, which may include laws outside your country of residence
- to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence
- to protect our rights, privacy, safety, property, or those of other persons.
5. IF YOU CHOOSE NOT TO PROVIDE YOUR INFORMATION TO US
We respect your privacy and personal choice when it comes to your data. You can choose not to provide us with your personal information. However, this may mean that:
- we will not be able to provide you with our services, or be limited in how we can do so
- we will not be able to interact with you
- we may be unable to process and open an account for you
- we will not be able to properly investigate or resolve any complaint you submit.
6. OTHER WAYS WE COLLECT, USE AND DISCLOSE YOUR INFORMATION
Use and disclosure of your information will only be made in accordance with APP 6.
6.1 Collection from third parties
To use your information in accordance with this Policy, we may also collect your personal information from third parties including:
- service providers
- marketing companies
- referrals who may have referred you to us
- organisations with whom we have an agreement to share information for marketing purposes.
6.2 Disclosure of personal information
We take reasonable steps to ensure that personal information is only accessible by people who have a genuine “need to know” as well as “right to know”.
If we disclose your personal information it will only be for the primary purpose for which it was collected or for a related secondary purpose where you would reasonably expect us to disclose the information. We may disclose personal information, where you consent to us disclosing your personal information, to the following parties:
- our employees, related bodies corporate and employees of those entities
- our tenant businesses
- third parties and contractors who provide services to us, including customer enquiries and support services, manufacturing services, shipping and freight services, debt-recovery functions, IT service providers, marketing and advertising services
6.3 Automated individual decision-making
If you reside in the European Union or EFTA States, you shall have the right not to be subject to a decision based solely on automated processing, including profiling, as long as the decision is not necessary for entering into, or the performance of, a contract between us, or is not authorised by Union or Member State law to which we are subject, or is not based on your explicit consent. If you wish to exercise your rights please contact us.
Your personal information may be transferred overseas or stored overseas for a variety of reasons (such as to our data hosting and IT service providers based overseas). If your personal information is sent to a recipient in a country with data protection laws which are at least substantially similar to the APP, and where there are mechanisms available to you to enforce protection of your personal information under that overseas law, we will not be liable for a breach of the APP if your personal information is mishandled in that jurisdiction. If your personal information is transferred to a jurisdiction which does not have data protection laws as comprehensive as Australia’s, we will take reasonable steps to secure a contractual commitment from the recipient to handle your information in accordance with the APP.
7. DATA SECURITY
7.1 Anonymity, destruction and de-identification
We will allow our users to transact with us anonymously or by using a pseudonym wherever that is lawful and practicable.
We destroy or permanently de-identify personal information which is no longer needed in accordance with the APP 11, unless we are otherwise required or authorised by law to retain the information for a period of time.
In some circumstances, we will not attempt to match de-identified or anonymous data collected through surveys or such online devices as “cookies”, without your consent. By providing us your personal information, you consent and agree to our cookies-related activities as set out under clause 3.3 of this Policy.
7.2 Data quality and security
We take reasonable precautions to ensure that the personal information we collect, use, store and disclose is accurate, complete, relevant and up-to-date. However, the accuracy of that information depends to a large extent on the information users provide. That’s why we recommend that you:
- let us know if there are any errors in your personal information
- keep us up-to-date with changes to your personal information such as your name or address.
You may change your personal details by using the relevant facility on our platform or by contacting us (contact details provided in clause 11).
We try our best to ensure your personal information is protected from loss, misuse, unauthorised access, modification or disclosure (via measures such as firewalls, data encryption, virus detection methods, and password restricted access). However, we cannot guarantee the absolute security of your personal information (it’s the Internet after all!). In the event of a data breach, we will attend to the reporting requirements that apply to us. We cannot accept responsibility for the misuse, loss or unauthorised access to, your personal information where the security of information is not within our control.
8. CHOICES YOU HAVE ABOUT YOUR INFORMATION
You may contact us or update your settings to access, correct, delete or update your personal information. We may, in accordance with the APP, refuse to provide you with access to your personal information if, for instance, granting you such access would have a negative impact on the privacy of another person.
You can ask us to stop using your information, including when we use your information to send you marketing emails or push notifications. These communications may be sent in various forms, including mail, over the phone, via SMS or via email, in accordance with applicable marketing laws, such as the Spam Act 2004 (Cth) and the Do Not Call Register Act 2006 (Cth). We only send you marketing material if you’ve agreed to it, but if you’d rather we don’t, you can easily unsubscribe at any time.
You may have your information, where technically feasible, sent to another organisation, where we hold this information with your consent or for the performance of a contract with you.
9. ASSIGNMENT, CHANGE OF CONTROL AND TRANSFER
All of our rights and obligations under our Privacy Policy are freely assignable by us to any of our affiliates, in connection with a merger, acquisition, restructuring, or sale of assets, or by operation of law or otherwise, and we may transfer your information to any of our affiliates, successor entities, or new owner.
10. CHANGES TO OUR POLICY
We may change this Policy from time to time and if we do, we’ll post any changes on this page. If you continue to use our platform after those changes are in effect, you agree to the new Policy. If the changes are significant, we may provide a more prominent notice or get your consent, as required by law.
11. CONTACT US
If you have any feedback or questions about this Privacy Policy, any privacy-related dealings with us or a possible breach of your privacy or would like further information about our information management practices, you can contact us here: info@millcastlemaine.com.au
If you wish to raise a concern about our use of your information you have the right to do so with your local supervisory authority.
© 2024. ALL RIGHTS RESERVED.
This Privacy Policy was last updated on 15/04/2024.
