Effective Date 18 November 2024
1 Introduction
a) We are committed to respecting your privacy and complying with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). Our Privacy Policy sets outs out how we collect, use, store and disclose your personal information in connection with your use of our website, mobile application and other services, features, products, content or applications offered by us including, but not limited to, Swift Access, Swift Manage and the My Family My Community application (together, the Services).
b)The Privacy Policy is relevant to people whose personal information is collected by us, including:
i) our past, current and prospective clients and employees;
ii) individual participants, users and third parties in connection with our Services;
iii) visitors to our website.
c) By providing personal information to us, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy and any other arrangements that apply between us.
d) Personal information is defined under the Privacy Act to include information or an opinion about an individual that is reasonably identifiable. For example, this may include your name, age, gender, postcode and contact details. It may also include financial information, including your credit card information.
e) In this Privacy Policy, “we”, “us” and “our” refer to Swift Networks Group Limited (ACN 006 222 395) and our related bodies corporate.
2 The personal information that we collect
a) The types of personal information we may collect depends on our relationship with you, and may include:
i) Identification Data: We may process identification data include your name, email address, telephone number, location, postal address, unique identifiers and/or social media account identifiers. The source of the identification data is you and/or your employer. If you log into our Services using a social media account, we will obtain elements of the identification data from the relevant social media account provider.
ii) Account Data: We may process client and end user account data. The account data may include your account identifier, name, username, email address, date of birth, business name, account creation and modification dates, passwords, website/app settings and marketing preferences. The primary source of the account data is you and/or your employer, although some elements of the account data may be generated by our Services. If you log into our Services using a social media account, we will obtain elements of the account data from the relevant social media account provider.
iii) Transaction Data: We may process information relating to transactions, including purchases of goods and/or services, that you enter into with us and/or through our Services. The transaction data may include your name, your contact details, your payment card details (or other payment details), financial and credit information and the transaction details. The source of the transaction data is you and/or our payment services provider.
iv) Communication Data: We may process information contained in or relating to any communication that you send to us or that we send to you. The communication data may include the communication content and metadata associated with the communication. Our website and app will generate the metadata associated with communications made using the website and app contact forms.
v) Usage Data: We may process data about your use of our Services. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.
vi) User Generated Data: We may process user-generated information including audio and visual information uploaded by participants end users via the Services.
b) We may collect these types of personal information either directly from you, or from third parties. We may collect this information when you:
i) register on our website or applications;
ii) communicate with us through correspondence, chats, email, or when you share information with us from other social applications, services or websites;
iii) interact with our websites, content, advertising and Services;
iv) use the Services (including our products and applications); or
v) invest in our business or enquire as to a potential purchase in our business.
3 Purpose of collecting, using and disclosing personal information
a) The purposes for which we may collect, use and disclose your personal information will depend on the Services we are providing you. As described below, we will only use or disclose your personal information for:
i) the primary purpose for which you have provided the information;
ii) a secondary purpose related to the primary purpose of collection;
iii) a purpose you have consented to; or
iv) a purpose otherwise permitted by law.
b) In general, we may collect, hold, use and disclose your personal information for the following purposes:
i) Administration, management and operations: We may process your personal information for the purposes of operating and delivering our Services, the processing and fulfilment of orders, supplying our goods, planning, managing and evaluating our Services, generating invoices, billing and other payment-related documentation and credit control. We also collect consumption and usage data to improve the quality of our Services and optimise and personalise the end user experience.
ii) Publications: We may process account data for the purposes of publishing such data on our website, applications and elsewhere through our Services in accordance with your express instructions.
iii) Relationships and communications: We may process identification data, account data, transaction data and/or communication data for the purposes of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email, SMS, post, and/or telephone, providing support services and complaint handling.
iv) Direct marketing: We may process identification data, account data and/or transaction data for the purposes of us or our carefully selected business partners creating, targeting and sending direct marketing communications by email, SMS and/or post and making contact by telephone for marketing-related purposes. Any such communication will be in accordance with the Spam Act 2003 (Cth) and the Privacy Act. You may opt-out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (e.g., an unsubscribe link).
v) Research and analysis: We may process usage data and/or transaction data for the purposes of researching and analysing the use of our Services, as well as researching and analysing other interactions with our business. Anonymised summaries of usage data may be provided to clients and facility operators.
vi) Record keeping: We may process your personal information for the purposes of creating and maintaining our databases, back-up copies of our databases and our business records generally.
vii) Security: We may process your personal information for the purposes of security and the prevention of fraud and other criminal activity.
viii) Insurance and risk management: We may process your personal information where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks and/or obtaining professional advice.
ix) Legal claims and compliance: We may process your personal information where necessary to establish, exercise or defend a legal claim, whether in court proceedings or in an administrative or out-of-court procedure. We may also process your personal information where necessary to comply with our legal obligations or in order to protect your vital interests or the vital interests of another natural person.
4 How we store and protect your personal information
a) We are required to take reasonable steps to protect your personal information from misuse, interference and loss and from unauthorised access, modification or disclosure in accordance with the Privacy Act. We implement robust security measures, such as encryption, access controls, and regular audits, to protect your personal information. Preventative and mitigating controls include but are not limited to:
i) using systems and processes which are designed to deliver security for personal information;
ii) implementing policies and management oversight of security and targeted training for our employees and contractors in relation to data security and ongoing education;
iii) ensuing physical control and security of premises, equipment and electronic documents and secure document disposal;
iv) implementing robust technical and procedural safeguards including the use of firewalls, secure databases, secure online systems and multi-factor authentication.
b) We take reasonable steps to make sure that the personal information about you – that we collect, use and disclose – is accurate, complete, up to date and relevant.
c) We continuously monitor and update our security practices to address emerging threats.
5 Providing your personal information to others
a) We may disclose personal information for the purposes described in this Privacy Policy to:
i) our employees, contractors and related bodies corporate;
ii) third party suppliers and service providers (including providers for the operation of our business or in connection with providing any Services to you);
iii) insurers, professional advisers, dealers and agents, to the extent reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice;
iv) payment systems operators (e.g. merchants receiving card payments), only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds;
v) our existing or potential agents, business partners or partners;
vi) our sponsors or promoters of any competition that we conduct via our services;
vii) anyone to whom our assets or businesses (or any part of them) are transferred;
viii) specific third parties authorised by you to receive information held by us; and/or
ix) other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law or otherwise with your consent.
b) In addition to the specific disclosures of personal information set out in this section 5, we may disclose your personal information where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal information where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
6 Transfers of your personal information
a) Your personal information is processed in Australia and elsewhere throughout the world through us and our service providers (including third party suppliers and cloud providers), where the laws may differ from the laws where you reside. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. We confirm that all personal information collected through the use of Swift Manage and the My Family My Community application is stored in Australia (either directly by us or by trusted third party providers).
b) Your consent to this Privacy Policy followed by your submission of such personal information represents your consent to the transfer of your information outside of your country of origin, where laws regarding processing personal information may be less stringent than your country. We will, however, take reasonable steps to ensure that any overseas recipient will deal with such personal information in a way that is secure and consistent with this Privacy Policy and no transfer of your personal information will take place to an organisation or a country unless there are adequate controls in place including the security of your data and personal information. We will take reasonable steps to ensure that any overseas recipient complies with obligations substantially similar to the APPs. Transfers will only occur where adequate safeguards are in place to protect your information.
c) You acknowledge that personal information that you submit for publication through our website, app or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal information by others.
7 Third party service providers
When you use our website or applications, third parties may collect, store and/or process the information detailed in this Privacy Policy. These third parties are carefully selected to ensure that they, and their related entities who may access your personal information, provide your information with equal protection to that stated in this Privacy Policy and as required by applicable privacy laws and the applicable platform provider’s (e.g. Google and Apple) rules, policies and guidelines. We use commercially reasonable efforts to engage with these third parties that post a privacy policy governing their collection, retention, processing and use of non-personal and personal information.
8 Retaining and deleting personal information
a) We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy or as required by law. We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We will take all reasonable steps to destroy and/or de-identify the personal information once it is no longer required.
b) We will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our website and app, or we are legally obligated to retain this data for longer time periods.
9 Your rights
a) We undertake to respect the confidentiality of your personal information and to guarantee you can exercise your rights.
b) You have the following rights under this Privacy Policy, and by law if you are within the European Economic Area (EEA) or United Kingdom:
i) the right to access – you can ask for copies of your personal information;
ii) the right to rectification – you can ask us to rectify inaccurate personal information and to complete incomplete personal information;
iii) the right to erasure – you can ask us to erase your personal information;
iv) the right to restrict processing – you can ask us to restrict the processing of your personal information;
v) the right to object to processing – you can object to the processing of your personal information;
vi) the right to data portability – you can ask that we transfer your personal information to another organisation or to you;
vii) the right to complain to a supervisory authority – you can complain about our processing of your personal information; and
viii) the right to withdraw consent – to the extent that the legal basis of our processing of your personal information is consent, you can withdraw that consent.
c) These rights are subject to certain limitations and exceptions. You can learn more about the rights of data subjects by visiting https://edpb.europa.eu/our-work-tools/general-guidance/gdpr-guidelines-recommendations-best-practices_en and https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
You may exercise any of your rights in relation to your personal information by written notice to us, using the contact details set out below. If you are located in the EEA, you have the right to complain to a data protection authority. For more information, please contact your local data protection authority in the EEA.
cookies.
10 About cookies
a) A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
b) Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
c) Cookies may not contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
11 Cookies that we use
We use cookies and/or similar technologies for the following purposes:
a) authentication and status – we use cookies to identify you when you visit our website and as you navigate our website or use our app, and to help us determine if you are logged into our website and/or app;
b) shopping cart – we use cookies to maintain the state of your shopping cart as you navigate our website and app;
c) personalisation – we use cookies to store information about your preferences and to personalise our website and app for you;
d) security – we use cookies as an element of the security measures used to protect user accounts, including preventing fraudulent use of login credentials, and to protect our website and services generally;
e) advertising – we use cookies to help us to display advertisements that will be relevant to you and to your interests. In addition, they are used to limit the number of times you see an advertisement. Often targeting or advertising cookies will be linked to site and app functionality provided by the other organisation.;
f) analysis – we use cookies to help us to analyse the use and performance of our website, app and services; and
g) cookie consent – we use cookies to store your preferences in relation to the use of cookies more generally.
12 Cookies used by our service providers
a) Our service providers use cookies and those cookies may be stored on your computer when you visit our website or use our app.
b) We use Google Analytics. Google Analytics gathers information about the use of our website and app by means of cookies. The information gathered is used to create reports about the use of our website and app. You can find out more about Google’s use of information by visiting https://www.google.com/policies/privacy/partners/ and you can review Google’s privacy policy at https://policies.google.com/privacy.
13 Managing cookies
a) Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:
i) https://support.google.com/chrome/answer/95647 (Chrome);
ii) https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop (Firefox);
iii) https://help.opera.com/en/latest/security-and-privacy/ (Opera);
iv) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
v) https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac (Safari); and
vi) https://support.microsoft.com/en-gb/help/4468242/microsoft-edge-browsing-data-and-privacy (Edge).
b) Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you may impact your ability to use all features on our website or within our applications.
14 Links
Our website and app may contain links to websites and apps operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites or apps.
15 Data breaches
A data breach occurs when there is unauthorised access to, or disclosure of personal information held by us. Data breaches are not limited to malicious actions, such as theft or ‘hacking’, but may arise from internal errors or failure to follow information handling policies that cause accidental loss or disclosure. All of our employees and contractors must notify their managers of any actual or suspected breach. When a data breach or suspected data breach has been identified, there are four main steps we will undertake when responding:
a) contain the breach and do a preliminary assessment;
b) evaluate the risks associated with the breach;
c) notify the relevant parties (including the Office of the Australian Information Commissioner (OIAC) of the nature of the breach, the information involved and recommendations for affected individuals to protect themselves; and
d) prevent future breaches.
16 Accessing or correcting your personal information
a) You are entitled to access the personal information we hold about you by contacting us (refer to the contact details provided below). Sometimes, we may not be able to provide you with access to all of your personal information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your personal information.
b) There is no charge for requesting access to your personal information, but we may charge you a reasonable amount to cover matters such as retrieving, copying and sending out information in connection with an access request. There is no charge for correcting your personal information.
c) We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate, up to date and complete.
d) However, if you consider any personal information, we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading you are entitled to request correction of the information. After receiving a request from you, we will take reasonable steps to correct your information. We may decline your request to access or correct your personal information in certain circumstances in accordance with the Privacy Act. If we do refuse your request, we will provide you with a reason for our decision and, in the case of a request for correction, we will include a statement with your personal information about the requested correction.
17 Making a complaint
If you think we have breached any applicable privacy laws, or you wish to make a complaint about the way we have handled your personal information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.
If you are not satisfied with our response to your complaint, or you consider that we may have breached the Privacy Act, a complaint can be made to the OIAC. The OAIC can be contacted by telephone on 1300 363 992 (within Australia) or by using the contact details on the OAIC website.
18 Amendments
a) We may update our Privacy Policy from time to time by publishing changes to it on our website. We encourage you to check our website periodically to keep up to date with any changes to our Privacy Policy.
b) We will notify you of any significant changes to our Privacy Policy by email and/or a prominent notice on our website and applications prior to any significant changes becoming effective.
19 Our details
a) For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:
1060 Hay Street, West Perth WA 6005
info@swiftnetworks.com.au
+61 8 6103 7595