Mt Franklin Estate protects the privacy of individuals’ personal information.

In accordance with the Privacy Act 1988 (Cth) (Privacy Act) this Privacy Policy sets out the ways we may collect, store, use, disclose, manage and protect your personal information.

Personal information is information or an opinion about an identified person, or information from which a person could reasonably be identified. That is regardless of whether the information or opinion is true, and whether or not it is stored in a material or intangible/electronic form.

We do not collect sensitive information about you.

We may collect your personal information:

· directly from you (for example, this may occur when we contact you, enter into contracts or arrangements with you, when you post about us on social media

· from publicly available sources and databases (for example, this may occur if it is unreasonable or impractical for us to collect information directly from you that is reasonably necessary for our activities)

· through statutory, regulatory and other governmental processes

· from third parties who you have authorised to provide us with personal information

We may collect the following personal information from you:

· if you contact us we may collect details which include your name, street/postal address, email address or telephone number

· when you purchase goods and services from us, whether in person or through our website, we may collect your contact details, demographic, credit card details and items purchased

If we receive unsolicited personal information, we will assess whether we would have been entitled to collect that personal information. If we would not have been entitled to collect that personal information, we will destroy or de-identify it as soon as practicable (provided that it is lawful and reasonable to do so).

Website

When you access our website, we may receive information about you via a ‘cookie’. The cookie is stored on your device, but does not identify you or give us any information about your device. A cookie recognises when your device re-visits the website, and helps us to optimise that experience. We may use this information to evaluate the performance and effectiveness of our website.

This Privacy Policy does not apply in relation to any other websites linked to, from or associated with, our company owned and operated website. We are not responsible for the privacy practices or the content of such other websites. The operators of

those other websites should be contacted directly for information regarding their information handling practices.

Storage and security

We take all reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. We maintain physical, electronic, and procedural security measures to safeguard personal information including using appropriate computer system and network security;

Personal information may be stored in the Cloud and it that may be with third parties who are situated or store content offshore. Your personal information may be transmitted, disclosed, stored or accessed to or from overseas jurisdictions.

If you proceed to submit your personal information to us, you are consenting to the transmission, disclosure, storage and access of your personal information by third parties in overseas jurisdictions.

Australian Privacy Principle 8 ordinarily obliges us to take reasonable steps to ensure that overseas recipients of your information do not breach the Australian Privacy Principles (except Principle 1) but this does not apply in this situation.

If any of those offshore recipients handle your personal information in a manner which is inconsistent or does not comply with the Australian Privacy Principles:

· to the maximum extent permitted by law, we will not be accountable under the Privacy Act for any resulting loss or damage that you may suffer

· to the maximum extent permitted by law, you will not be able to seek redress against us under the Privacy Act 1988 (Cth)

· the overseas recipient may not be subject to any privacy obligations at all, or to any principles similar to the Australian Privacy Principles

· you may not be able to seek redress against the overseas recipient in their jurisdiction; and

· in holding access to your personal information, the overseas recipient may be subject to foreign laws which compel their disclosure of your personal information to other parties, such as overseas government authorities

Disclosure

We disclose personal information in limited circumstances. This can include:

· our third party service providers, such as payment processors, data entry service providers, mailing houses, electronic network administrators, cloud service providers, debt collectors, and, where necessary, to professional advisers, such as solicitors and accountants

· government authorities or other statutory bodies where it is expressly permitted under the Privacy Act, for example, where it is with your consent or where we are legally required to do so, such as pursuant to a court order or warrant

Use of personal information

We may use your personal information to provide our goods and administer our services, including verifying your identity, contacting you about your orders, processing deposits and payments, training our staff and testing our systems; to develop and inform you about events, offers, promotions and our products and services; to distribute our newsletters and other communications, either ourselves or with the assistance of third party services providers.

We will also maintain records to comply with our legal obligations. For example, we use information regarding a person’s age to ensure we do not supply alcohol to minors.

You can opt-out of receiving marketing communications at any time. Once we receive your opt-out request, we will remove you from our direct marketing programs as soon as reasonably practicable. We do not trade in, rent or sell your personal information to other parties under any circumstances.

Access to personal information

You may request access to your personal information in writing. We do reserve the right to refuse access to personal information if we cannot verify your identity to our reasonable satisfaction.

We will take reasonable steps to ensure personal information we collect and use is accurate, up-to-date and complete. Where personal information is out-of-date or incorrect, you may inform us of this and we will correct it accordingly.

Changes to this Privacy Policy

We may amend this Privacy Policy from time to time in order to ensure that it remains accurate in view of any alterations to our information handling practices or changed business circumstances. Any updated policy will be published on our website. Changes come into effect from the time when they are brought to your attention, or when you next logon to our website, whichever is earlier.

If you have any concerns or complaints regarding how we handle personal information, please contact us by email at office@mafic.net.au, telephone 0430 196272 or in writing to PO Box 46, Guildford, Victoria, 3451.

We take all complaints seriously and will respond to you within a reasonable period of time, unless we consider your complaint to be frivolous or vexatious.

If a privacy concern or complaint is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner.

Last update: 21 April 2020.