This Policy recognises the obligations of the DRB Group relating to the protection of the privacy of personal information.
1. Collection of Personal Information
The types of personal information that the DRB Group may collect could include name, date of birth, contact details such as current and previous address, telephone numbers, email address, occupation, details of shareholdings, information required for recruitment purposes, information required to open or maintain a trading account with the DRB Group or otherwise do business with the DRB Group, bank account details, information obtained through credit checks, information from prior dealings with the DRB Group and statistical information on the use of the DRB Group website, such as IP addresses, dates and times of visits. The DRB Group collects personal information through various means including: via websites, social media, orders for and provision of products, services or support, employment applications, third party service providers, credit checks, credit assessments and debt recovery actions, warranty claims, feedback from clients, responses to surveys or research conducted by us, and entries into competitions or trade promotions. If the DRB Group is not provided with the information it requests, we may not be able to fulfill the applicable purpose of collection, such as to supply products or services. Where practicable, the DRB Group will collect personal information directly from the person. If we receive personal information from someone else (for example from someone who supplies goods or services to the DRB Group or clients), we will take reasonable steps to ensure the person is aware that the information has been collected and the circumstances of the collection.
2. Use and Disclosure of Personal Information
The main purpose of the DRB Group for collecting, holding, using and disclosing personal information are to: supply and obtain products or services; respond to enquiries; undertake research and surveys, and analyse statistical information; conduct trade promotions; comply with legislation and regulations; comply with the DRB Group policy requirements including in relation to occupational health and safety, diversity, workers compensation, Fair Work Act and environmental matters; to inform of any changes to our business and products; and for marketing purposes, including to assist in developing the DRB Group website. The DRB Group will generally explain at the time of the collection of personal information as to how the information is to be used or disclosed. We will only use or disclose personal information for a purpose other than for which it was collected or a related purpose if it has consent to such different use or disclosure or such use or disclosure is otherwise allowed by the Privacy Laws. In carrying out the DRB Group business, it may be necessary to share personal information with and between related bodies corporate and organisations that provide services to it.
3. Direct Marketing
The DRB Group may, from time to time, send out marketing materials. Any person is able to contact and inform us that they do not wish to receive any promotional information. They can contact us and ask to be removed from our mailing lists, or use the unsubscribe facilities included in our marketing communications.
4. The Company’s website privacy practices
5. Links to other websites
6. Accessing and Correcting the Personal Information the DRB Group holds
If at any time a person wants to know exactly what personal information the DRB Group holds on that particular person, this record can be requested by contacting the Business Manager. The file of personal information will usually be made available within 21 days. If at any time a person wishes to change the personal information that is held, because it is inaccurate or out of date we should be contacted and will amend this record. If a person wishes to have personal information deleted, this should be done in the same manner as referred to above and all reasonable steps will be taken to delete it unless the DRB Group is required to keep it for legal reasons.
7. Contacting the DRB Group
If a person has any concerns or complaints about how the DRB Group handles personal information, or if a person has any questions about this policy, the Business Manager is to be contacted. In most cases, the DRB Group will ask that the person put the request in writing, will investigate the complaint and use reasonable endeavours to respond in writing within 30 days of receiving the written complaint. If the DRB Group fails to respond to the complaint within 30 days of receiving it in writing or if the person is dissatisfied with the response, the person may have the right to make a complaint to the Office of the Information Commissioner.
8. Future Changes
9. Other Information
Policy Owner: Business Manager