This policy outlines the way we at Humanico Pty Limited [ABN 83638764173] collect, hold, use and disclose personal information.
The personal information we collect is generally limited to:
We generally do not collect sensitive (eg membership of professional or trade associations) information about you unless relevant or necessary for the purpose of providing our services. Where we require sensitive information from you, we will seek your express consent to collect it. We may also collect information about how you use our website, via third parties.
The main way we collect information is when you give it to us, for example, via our website sign up or other forms, via phone, email, the when you respond to advertisements, when you submit content, comments or feedback or via social media. However, we also collect it from third parties, for example from your employer directly or third parties when they have sought your consent. We may also collect your personal information from public sources such as LinkedIn or government sites.
We may also collect personal information from third parties, such as Google Analytics or Facebook Pixel. These third parties may use cookies, web beacons and similar technology to collect or receive information about you from our website and elsewhere on the internet.
We need your personal information to:
We also collect personal information to analyse and enhance our business operations and improve your experience with our business. This is used as statistical information to analyse traffic to our website, and to customise content and advertising we provide.
You can opt out of the collection and use of this information by changing your privacy settings or opting out.
We will take reasonable precautions to protect your personal information, including against loss, unauthorised access, disclosure, misuse or modification. We generally will not disclose your personal information unless:
We will only disclose your sensitive information for the purpose for which you gave it to us or for directly related purposes that you would reasonably expect or if you otherwise agree.
We do also disclose your personal information where it is necessary to obtain third party services, such as analytics, data storage, payment service providers or marketing and advertising services. To protect your personal information we endeavour to ensure that our third party service providers also comply with the Australian Privacy Principles, but some third parties we use such as may collect and hold personal information overseas.
If you are a resident of the European Economic Area (“EEA”) you have certain rights and protections under the GDPR regarding the processing of your personal information. We are a controller under the GDPR as we collect, use and store your personal information to enable us to provide you with our website services and information about them.
We rely on the following lawful means of processing your personal information:
where you have given us valid express consent to use your personal information we will rely on that consent, and only use the personal or sensitive information for the specific purpose for which you have given consent.
where we need comply with the law, or act to in an emergency, we will rely on that lawful means of processing your personal information.
In some circumstances where we have a legal basis to do so we may continue to process your information after you have withdrawn consent, for example if it is necessary to comply with an independent legal obligation or if it is necessary to do so to protect our legitimate interest in keeping our services secure.
All personal information stored on our platform is treated as confidential. It is stored securely and is accessed by authorized personnel only. Our collection is limited in relation to what is necessary, for the purpose for which the personal information is processed, and kept only for so long as is necessary for the purpose for which the personal information was collected. We implement and maintain appropriate technical, security and organisational measures to protect personal information against unauthorized or unlawful processing and use, and against accidental loss, destruction, damage, theft or disclosure.
We ensure the encryption and pseudonymisation of personal information and we have adequate cyber security measures in place. By providing us with your personal information you consent to us disclosing it to third parties who reside outside the EEA countries. We will ensure that those third parties are GDPR compliant.