Privacy, Terms & Conditions
Policy Formation Date: 09/01/08
Collection of Personal Information
Boat O’Craigo will not collect personal information unless the information is necessary for one or more business functions or activities. Boat O’Craigo will collect personal information only by lawful and fair means and not in an unreasonably intrusive way. At or before the time (or, if that is not practicable, as soon as practicable after) Boat O’Craigo collects personal information about a person from that person, Boat O’Craigo will take reasonable steps to ensure that the person is aware of:
- the identity of Boat O’Craigo and how to contact us;
- the fact that he or she is able to gain access to the information;
- the purposes for which the information is collected;
- the fact that Boat O’Craigo does not disclose information of that kind to other organisations.
If it is reasonable and practicable to do so, Boat O’Craigo will collect personal information about a person only from that person. If Boat O’Craigo collects personal information about a person from someone else, Boat O’Craigo will take reasonable steps to ensure that the person is or has been made aware of the matters listed above.
Use and Disclosure of Personal Information
Boat O’Craigo will only use personal information for the purposes outlined at the time of the collection of the information. Boat O’Craigo will not use or disclose a person's information without their consent. Direct marketing communications will include a prominently displayed notice providing the customer with a clear and easy means to express their wish not to receive any further direct marketing communications. Boat O’Craigo will remove personal information from the mailing list within 7 days of a request to do so.
Boat O’Craigo will take reasonable steps to make sure that the personal information it collects, uses or discloses is accurate, complete and up to date.
Boat O’Craigo will take reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure. Information will be stored on secure servers that are protected in controlled facilities. Boat O’Craigo will take reasonable steps to destroy or permanently deidentify personal information if it is no longer needed for any purpose to which the customer has consented. All Boat O’Craigo staff will be trained in their obligations under the Information Privacy Act 2000. All former employees of Boat O’Craigo will be removed from the system which will automatically remove their access to the database system. Data containing personal information will not be held in any open or accessible location overnight.
Access and Correction
Boat O’Craigo will provide a person's information to that person upon request within 7 days of that request. Boat O’Craigo will not provide a person's information to anyone other than that person, or when the information may relate to an existing or anticipated legal proceedings. When personal information about a person is established to be inaccurate, incomplete and not uptodate, Boat O’Craigo will take reasonable steps to correct the information so that it is accurate, complete and up to date.
Boat O’Craigo will not require persons to identify themselves when entering transactions with the organisation, unless lawfully required to do so.
Boat O’Craigo will not collect sensitive information about a person unless the person has consented.