Updated as at 10/09/2019
- General Information
If you are dissatisfied with our handling of a complaint or do not agree with the resolution proposed by us, you may make a complaint to the Office of the Australian Information Commissioner (“OAIC”) by contacting the OAIC using the methods listed on their website at http://www.oaic.gov.au. Alternatively, you may request that we pass on the details of your complaint to the OAIC directly.
- New Zealand
Similar to the APPs, New Zealand law sets out certain Information Privacy Principles (“IPPs”) for the proper handling of personal information of New Zealand citizens, and these principles can be found at http://privacy.org.nz/information-privacy-principles. The New Zealand Privacy Act and IPPs presume that trans-border data flows are permissible provided the IPPs are preserved, which are the case with myCaseCovers.
- Collection of your personal information
At all times we try to only collect the information we need for the particular function or activity we are carrying out.
The main way we collect personal information about you is when you give it to us, for example, we may collect personal information including your name, email address, postal address, telephone number when you create an account or make a purchase as a guest on our website; your bank, credit or debit accounts details when you make a purchase; and your email address when you email us or use the ‘Contact Form’ on our website.
- How we use your personal information
We may use the personal information that we collect about you for such purposes including to:
- Deliver the products and services that you have requested;
- Manage your account with us;
- Provide you with customer support;
- Perform research and analysis about your use of, or interest in our products and services;
- Communicate with you by email about our products and services;
- Manage our financial information and payment processing;
- Improve our website;
- Comply with legal and regulatory requirements and obligations; and/or
- Operate our business.
- Sharing of your personal information
We may occasionally hire or engage other organisations or individuals to provide services on our behalf, including to process financial transactions or freight shipping. Those organisations or individuals will be permitted to obtain only the personal information they need to deliver the relevant service. myCaseCovers takes reasonable steps to ensure that these organisations and individuals are bound by confidentiality and privacy obligations in relation to the protection of your personal information.
- Cross border disclosure
Your personal information may also be processed by, or disclosed to third-parties operating outside of Australia or New Zealand who are engaged by us in other countries, including, but not limited to the United States of America. For example, third-parties such as PayPal may use a server hosted overseas to store data, which may include your personal information.
We will take reasonable steps, in the circumstances, before your personal information is disclosed to an overseas recipient, to ensure that the overseas recipient does not breach privacy laws in relation to your personal information.
The reasonable steps may not apply if you consent to the disclosure of your personal information to an overseas recipient and we reasonably believe that the overseas recipient is subject to laws that are suitability similar to privacy laws in Australia or New Zealand.
If you consent to the disclosure of your personal information to an overseas recipient, the overseas recipient may not be accountable under the Act or the NZ Act (as the case may be), and you will not be able to seek redress for breaches under such legislation.
- Dealing with unsolicited information
We take all reasonable steps to ensure that all unsolicited information is destroyed or de-identified immediately.
- Anonymity when dealing with us
Only where it practicable to do so, we may allow you the option not to identify yourself when dealing with us.
- Collecting sensitive information
- Government identifiers
We do not use government identifiers (e.g. tax file numbers or Medicare numbers) to identify individuals.
- Website Information
For each visitor to reach our website, we expressively collect the following non-personally identifiable information, including browser type, version and language, operating system, pages viewed while browsing our website, page access times and referring website address. This collected information is used solely internally for the purpose of gauging visitor traffic, trends and delivering personalised content to you while you access our website, as well as to improve the content of our website and the quality of our service.
- How we protect your personal information
We take appropriate security measures (including physical, electronic and procedural measure) to help safeguard your personal information from unauthorised access and disclosure. For example, only authorised employees are permitted to access personal information, and they may do so only for permitted business functions. We also offer the use of a secure server. All supplied credit information is transmitted via Secure Socket Layer technology and then encrypted into our Payment gateway provider’s database only to be accessible by those authorised with special access rights to such systems, whom are required to keep the information confidential. After a transaction, your private information (credit card, financials, etc.) will not be kept on file. They may be processed by a third-party payment gateway (i.e. PayPal) for recurring payment.
No system can be completely secure however, and while we take all reasonable steps to secure your personal information, we do not promise, and you should not expect that your personal information or communication with us will always remain secure. If there is a notifiable data breach, we will take all reasonable steps to notify you if your personal information is involved in an eligible data breach that is likely to result in serious harm.
We encourage you to take care with how you handle and disclose personal information and avoid sending personal information through insecure email.
We only keep your personal information for as long as it is required for the purpose for which it was collected or as otherwise required by law. We will take appropriate measures to destroy or permanently de-identity your personal information if we no longer need to retain it. These measures may vary depending on the type of information concerned, the way it was collected and how it was stored.
- Data Storage
myCaseCovers uses third-party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run the myCaseCovers website. Although myCaseCovers owns the code, databases, and all rights to the myCaseCovers website, you retain all rights to your data.
- Direct Marketing
We may send you direct marketing communications and information about products and services offered by us via email, SMS or regular mail. If you have indicated a preference for a method of communication, we will endeavour to use that method wherever practical to do so.
You may opt out of receiving marketing communications at any time by responding via the channel in which you receive the marketing communication, or by contacting us (see contact information below). You can unsubscribe from such marketing emails by clicking the unsubscribe link on the footer of the email communication you have received.
- How you can access your personal information
You have the right to request access to personal information that we hold about you, and that we correct that personal information. You can ask for access or correction by contacting us and we must respond within a reasonable period following your request. If you ask, we must give you access to your personal information, and take reasonable steps to correct it if we consider it is incorrect, unless there is a law that allows or requires us not to.
We will ask you to verify your identity before we give you access to your information or correct it, and we will try to make the process as simple as possible. If we refuse to give you access to, or correct, your personal information, we must notify you in writing setting out the reasons.
If we make a correction and we have disclosed the incorrect information to others, you can ask us to tell them about the correction. We must do so unless there is a valid reason not to.
If we refuse to correct your personal information, you can ask us to associate with it (for example, attach or link) a statement that you believe the information is incorrect and why.
We reserve the right to charge a fee for searching for, and providing access to, your information on a per request basis.
If you are no longer a customer of ours, we may still retain certain information associated with your account for record keeping integrity, and to comply with legal requirements.
- How to make a complaint
If you wish to complain to us about how we have handled your personal information, you should complain in writing. If you need help lodging a complaint, you can contact us.
If we receive a complaint from you about how we have handled your personal information, we will determine what action (if any) we should take to resolve the complaint.
We will tell you promptly that we have received your complaint and then respond to the complaint within a reasonable period.
- Contacting us
Lexine Pty. Ltd.
Attention: Privacy Officer
Unit 10 / 13-17 Crawford St,
Braeside, Victoria 3195, Australia