The types of personal information we may collect about you include:
Information we generally collect
- Contact information: When you provide us with your contact information, whether through use of our services, a form on our Site, or an interaction with our sales or customer support team, we collect your contact information. This information may include your name and email address.
- Usage information: We collect usage data about you whenever you interact with our Services. This may include which web pages you visit, what you click on, when you performed those actions, and other activities.
- Device and browser data: We collect data from the device you use to access our services, such as your IP address and browser type. This information may also tell us your location.
- Cookies and page tags: We use third party tracking services that employ cookies and page tags (also known as web beacons) to collect aggregated and anonymous data about visitors to our Websites. This data includes usage and user statistics.
- Referral data: If you navigate to our Websites from an external source (such as a link on another website or via an email), we record information about the source that referred you to us.
- Other data you submit: We may collect your personal information or data if you submit it to us in other contexts. For example, by giving us a testimonial.
- Interacting with us on social media: We may collect personal information about you when you interact with us using social media or other channels such as LinkedIn.
- Third parties: We may collect your personal information or data from third parties if you give permission to those third parties to share your personal information with us or where you have made that information publicly available online.
Information specific to administrators
- Registration details: When you register an account or another administrator creates an account for you, we collect your name, company name, email address, password and other information.
- Billing details: If you use a credit card for billing, our credit card processor (currently Saint George’s payment gateway) may collect information such as your cardholder’s name, billing address, email address, credit card number, expiry date and credit card security code. We don’t collect this type of information.
- Account settings: You may be able to set or update various preferences and personal details on your account settings page or your profile. For example, your name, email address or default language.
Information specific to employees
- your name;
- images of you;
- your contact details, including email address, mailing address, street address and/or telephone number;
- details of performance management;
- your age and/or date of birth; and
- your sensitive information as set out below.
We may collect these types of personal information directly from you or from third parties.
Collection and use of personal information
We use your personal information for a variety of purposes. How and what information we collect about you will depend on the way that you use our services, for example, whether you are an administrator, a visitor to our Site or an employee or staff member. In each case, the information we collect and hold is reasonably necessary for our business, including providing you with the services you would expect from us.
When you use our services as an administrator we may use your personal information to:
- Create an account with us: We need to collect and use your personal information to allow you to create an account and log in to that account.
- Provide you with our services: This includes providing you with access and use of our platform and customer support, which may require us to access your personal information so that we can assist you with survey design or technical issues.
- Manage our Services: We use your personal information internally to measure and analyse user behaviour so we can provide our services and improve those services. Some of these purposes include:
- monitoring, maintaining and improving our services and features;
- enforcing our contracts and policies when we are made aware of potential breaches; or
- preventing potentially illegal, undesirable or abusive activities.
- Contact you about services or your account: At times we may need to contact you via email, mail or telephone to tell you about matters, such as changes to our services, terms or policies.
- Marketing purposes: We may also send you news and information about our products or services that you either request from us, or we believe may interest you. In most cases, we will contact you via email.
- Respond to legal requests and prevent harm: If we receive a legal request or are informed of a situation that may cause harm, or potential harm, to someone, we may need to inspect your personal information or data to respond appropriately to that request or threat.
When you visit our Site we may use your personal information to:
- Contact you for marketing purposes: If you sign up to our newsletter, we may send you news and information about our products or services.
- Manage our services: We use your personal information internally to measure and analyse user behaviour so we can provide our services and improve those services.
For employees or staff members, we use your personal information to:
- Provide our services to our clients: We collect, use and store your personal information to provide our monitoring and analytics services to our clients, to help them mitigate risk and create a safe workplace for you.
Disclosure of personal information to third parties
In most cases, the information that we disclose to our staff or service providers will be directly necessary to provide our services to you. However, there may be occasions where we need to disclose your personal information to other third parties or for other purposes, including to:
- Our staff, suppliers or professional advisors: We may need to disclose your personal information to people who work for us or for one of our suppliers.
- Prevent illegality or enforce our terms and policies: If you engage in or threaten any unlawful activity, we may reasonably believe that it is necessary to disclose your personal information to the police, a relevant authority or enforcement body, or your internet service provider, employer, supervisor or network administrator.
- Comply with legal requests: In some situations, we may be compelled to disclose your personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may disclose your personal information to third parties such as law enforcement officials or to comply with court orders, such as subpoenas or other legal processes.
- Merge or sell our business: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information.
By providing us with personal information, you acknowledge that some third parties may not be regulated by the Privacy Act and the Australian Privacy Principles in the Privacy Act and if any third party engages in any act or practice that contravenes the Australian Privacy Principles, it would not be accountable under the Privacy Act and you will not be able to seek redress under the Privacy Act.
How we treat personal information that is also sensitive information
Sensitive information is a sub-set of personal information that is given a higher level of protection under the Australian Privacy Principles. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information.
Employers may provide us with sensitive information in order for them to comply with their reporting requirements. We may receive the following information from employers:
- details of work health and safety incidents;
- existing health conditions;
- medical certificates or other health information; and
- return to work documentation (which may contain health information).
Sensitive information may be used or disclosed if required or authorised by law.
Your rights and controlling your personal information
Restrict: If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.
Access: You may request details of the personal information that we hold about you. An administrative fee may be payable for the provision of such information.
Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.
Complaints: If you wish to make a complaint about how we have handled your personal information, please contact us using the details below and provide us with full details of the complaint. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint.
Unsubscribe: To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.
Storage and security
We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
Cookies and web beacons
We may use web beacons on our Site from time to time. Web beacons (also known as Clear GIFs) are small pieces of code placed on a web page to monitor the visitor’s behaviour and collect data about the visitor’s viewing of a web page. For example, web beacons can be used to count the users who visit a web page or to deliver a cookie to the browser of a visitor viewing that page.
Links to other websites