The ExperienceBank Pty Ltd (ACN 617 108 157)
Current as at 18 July 2017
What Personal Information does The ExperienceBank Collect?
“Personal information” is any information that can be used to personally identify you. The types of personal information that The ExperienceBank collects will depend on your dealings with us. We primarily collect and store information when you provide it to us voluntarily – this may be in the form of directly supplying the personal information to us when prompted to do so as part of registering for or using our Services, or indirectly supplying the personal information through the use of any features on our Website. Generally speaking, personal information that we may collect when you use our Services include:
- your contact details, including name, mailing or street address email address, telephone number and social media contact details, residential location, age or birth date, gender, profession, occupation or job title and other information relating to your previous work experience;
- your billing information, including bank account and credit card details;
- a record of your IP address;
- details of the Services you have used and additional information necessary to deliver our Services to you; and/or
- any additional information which identifies you and which you provide to us directly in communications with us, including through feedback or surveys.
If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.
We may collect personal information from you when you:
- subscribe to our Services, including establishing any kind of account with us;
- use our Services;
- undertake any monetary transactions with us in relation to our Services;
- join or participate in any features or functions available via our Services;
- use, access or browse our Website (including through technological tools including “Log Data” and “Cookies” which collect certain information, as explained below);
- provide feedback or customer surveys in relation to the Services;
- post any user content to our Website; and/or
- provide information to us as part of your dealings with us.
In all other cases where information we collect cannot reasonably be used to identify you or allow a holder of such information to contact you directly, that information will not be personal information (“Non-Identifying Information”). A type of Non-Identifying Information that we may collect and store is statistical, analytical and other usage information and data derived from your use of our Services (usage data includes, for example, the date and time of your visit to the Website, the features or functions of our Services that you use, some ‘cookies’ sent to us via your Internet browser, aggregated quantitative information about active users and user activities and various other content uploaded to the Services such as messages, photos and videos etc.) – to the extent such information and data does not personally identify you, it is not personal information.
Why The ExperienceBank Collects, Holds, Uses and Discloses Personal Information
We need to collect personal information (and Non-Identifying Information) so that we can provide our Services and conduct our business activities. We collect, hold, use and disclose your personal information for numerous reasons, including but not limited to the following reasons:
- to provide you with our Services and provide any support to you;
- to allow us to process and/or complete any payment and billing transactions;
- to operate any features or functions of the Services;
- to maintain the integrity and security of our Services;
- for research, analysis and profiling;
- to market, promote and advertise our business and our Services to you;
- to market, promote and advertise the goods and/or services of our associates and affiliates to you that we believe you may be interested in;
- to provide you with news, information or advice about our existing and new Services;
- to conduct competitions or promotions;
- to communicate with you including by email, mail or telephone;
- to verify your identity;
- to assist our internal administration, financial and daily operations;
- to conduct business processing functions for the operation of our Services;
- to allow us to better understand your use of our products and the Services;
- to improve, upgrade, enhance, repair, maintain, manage or monitor our Services;
- to investigate or deal with any disputes or complaints with you in connection with our Services, or that you are or have been otherwise engaged in any unlawful activity; and/or
- to comply with any other obligations that we may have under the law or otherwise.
We may combine your personal information with Non-Identifying Information and aggregate it with any other information to attempt to provide you with a better experience of our Services, to improve the quality and value of the Services and to analyse and understand how the Services are used.
In relation to our use of your personal information for any direct marketing purposes by us, we will ensure that there is a means available for you to request not to receive direct marketing communication from us; alternatively, you can contact us (see “Contact Us” section below) to advise us that you do not want to receive any direct marketing.
Will your Personal Information be Disclosed to a Third Party?
When you use our Services, we may need to disclose your personal information (and Non-Identifying Information) to third parties who require such information and/or who are the intended recipients of such information based on our understanding through your use of our Services. Generally speaking, your personal information (and Non-Identifying Information) may be disclosed to a third party for the following purposes:
a) As a feature of the Service is to allow persons to connect with one another, certain personal information of users may be disclosed to a third party, including other users of the Service, as part of the normal use and operation of the Service. For instance, the Service will provide features where you are permitted to establish a profile via the Service and you are permitted to upload and make available any personal information which may be visible and accessible by users (including unregistered users where applicable) of the Service. You are responsible for ensuring that you understand how (and to what extent) your personal information that is uploaded or made available to the Service will be visible and accessible by other users of the Service. From time to time we may offer features that allow you to adjust who may view your personal information. However, and in all cases, we are not responsible for how third parties use your information, including any unauthorised uses, nor can we guarantee that your information will not be used for an illegitimate purpose, including a use that breaches a term or condition of the Service. You SHOULD NOT upload or make available to the Service any such information that you do not want a third party to view, access or use.
b) We may disclose your information to a third party who is assisting us with any of the matters referred to above where we have set out why we collect, hold, use and disclose personal information, such as the processing of any payment or billing any transactions and/or recovering any payments due to us.
c) We may engage third parties to facilitate the provision of the Services, to perform related services (e.g. maintenance services, database management, web analytics, improvement of a service feature and marketing of our business) or to assist us in analysing how our Services are used. These third parties may have access to your information to perform these tasks. We will ordinarily require third parties not to use or disclose any personal information that we disclose to them for any purpose other than to provide or perform the relevant services for us.
d) We may disclose your information to third parties for the purposes of assisting us with marketing, promoting and advertising our business and Services to you.
e) We may disclose your information to our related entities, which includes an entity which we share business or other common interests with or that we share common control or ownership with, to contact you regarding marketing, advertising or promotional materials relating to our Services or the goods and services of our related entities if we believe they will be of interest to you.
f) We may disclose your information to our business associates or affiliates, as they may require such information before dealing with us. Further, those third parties to whom we disclose your information may also use your information for the purposes of marketing, promoting and advertising their business, goods and/or services to you (in such cases those third parties will be responsible for complying with all applicable laws in relation to such marketing, promotional and advertising activities).
g) We may disclose your information if this is required by law, to assist with any law enforcement activities of a government entity or agency, to take professional legal, financial or taxation advice, to deal with any disputes with you in connection with our Services or to deal with (including to pursue or defendant against) any legal claims.
What Happens if We Cannot Collect your Personal Information?
- We may not be able to provide you with the Services (for example, if you do not subscribe to our Services and/or establish an account with us, you will not be able to use and access our Services) or you may not be able to use certain features of our Services;
- We may not be able to provide you with information about Services that you may want, including information about competitions or promotions and information regarding any complaints you may have regarding the Service; and/or
- We may be unable to tailor the content of our Services to your preferences and your experience of our Services may not be as enjoyable or useful.
There are some other matters which you should be aware of regarding the use of information on our services:
1. Use by Third Parties (including other users of the Service). As a feature of the Service is to allow persons to connect with one another, third parties, such as other users of the Service, may be able to obtain access to your information as part of the normal processes and operation of the Service. Those third parties may obtain and use your information for a number reasons, including to contact and communicate with you, to assess your suitability in relation to any services which they require performing, to market and promote their services to you and/or for any other legitimate purpose as permitted and intended by the Service from time to time. As stated above, we are not responsible for how third parties use your information, including any unauthorised uses, nor can we guarantee that your information will not be used for an illegitimate purpose, including a use that breaches a term or condition of the Service. You SHOULD NOT upload or make available to the Service any personal information that you do not want a third party to view, access or use.
3. Cookies. Like many websites, we use "cookies" to collect a variety of website usage information and data. A cookie is a small data file that is transferred to your computer’s hard disk. There are session cookies and persistent cookies – we may use both so we can better understand how you interact with our Services and to monitor web traffic routing with the aim of improving or monitoring our Services. Most Internet browsers automatically accept cookies, however you can instruct your browser (via the options section) to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit, however doing so may mean you will not be able to use all or parts of our Services.
4. Changing or Deleting Your Personal Information. If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, you may review, update, correct or delete the personal information provided to us by contacting us if such capabilities are not available directly via our Services (see “Contact Us” section below). We request that you keep your information as current as possible so that we may continue to improve our Services provided to you. If you completely delete all of your personal information, then any subscription or user account that you may hold with us may become deactivated and you may lose the ability to use and access our Services. We may retain an archived copy of your records as required by law or for legitimate business purposes.
5. Access to Your Personal Information. You may send us a request (to contact us, see “Contact Us” section below) to access the personal information about you that we have collected; you may also send us a request to correct any personal information about you that we have collected. If you seek access to your personal information from us, we will ask you to verify your identity and we may charge a fee for providing you with your personal information, in which case we will inform you of the fee in advance of providing the information. There may be instances where we cannot grant you access to the personal information we hold. We may refuse to give you access to your personal information to the extent that:
a) we reasonably believe that giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety; or
b) giving access would have an unreasonable impact on the privacy of other individuals; or
c) the request for access is frivolous or vexatious; or
d) the information relates to existing or anticipated legal proceedings between us and you, and would not be accessible by the process of discovery in those proceedings; or
e) giving access would reveal our intentions in relation to negotiations with you in such a way as to prejudice those negotiations; or
f) giving access would be unlawful or would result in a breach of confidentiality; or
g) denying access is required or authorised by or under a law or a court/tribunal order; or
h) both of the following apply:
i. we have reason to suspect that unlawful activity, or misconduct of a serious nature, that relates to our functions or activities has been, is being or may be engaged in; and
ii. giving access would likely prejudice the taking of appropriate action in relation to the matter; or
i) giving access would likely prejudice one or more law enforcement activities of a government entity; or
j) giving access would reveal evaluative information generated by us in connection with a commercially sensitive decision-making process.
- Personal Information of a Third Party. If you provide us with personal information relating to another person, you should ensure that you have obtained the prior consent of that person. As that information may be disclosed to a third party as part of the normal processes of using our Services, we are entitled to assume that you have explained to the person how we may use their information.
- Log Data. When you use our Services, we may automatically record information regarding your use of our Services (‘Log Data’). This Log Data may include information such as the device through which you are using our Services, the features of our Services which you used, the pages or menus of our Service that you visit and the time spent, information you search for on our Service, access times and dates, and any other statistics (commonly referred to as ‘meta-data’). We use this information to monitor and analyse use of our Services and its technical administration, to increase our Service’s functionality and usability, and to better tailor our Services to our users’ needs.
- Links. Our Services may contain links to other third party websites and their services. If you choose to visit another website or online service by clicking on a link on our Services, you will be directed to that third party’s website or online service. The fact that we may link to a website or online service is not an endorsement, authorisation or representation of our affiliation with the operator of that website or online service, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites and online services. We encourage you to read the privacy policies and terms and conditions of use on those websites or online services that you visit before providing any information or using such websites or services.
- Cross-border Disclosure. From time to time, we may disclose some of your personal information to organisations located outside Australia, in countries which do not have the same or substantially similar privacy laws, but only to the extent necessary to provide you with the Service. For example, we may use third party storage services to store or keep a back-up of our data and those services may store such data on servers that are physically located overseas. Whilst we encourage all third party organisations that deal with us to respect the privacy of individuals, we cannot control their privacy practices, nor can we guarantee or ensure that they will comply with the privacy laws of Australia.
Security of Information
We will take reasonable steps to ensure the protection and security of your personal information from misuse and loss, and from unauthorised access (including by means of firewalls, password access, secure servers and encryption of credit card transactions), modifications or disclosure. We will adopt reasonable safeguards to preserve the integrity and security of personal information collected to prevent misuse or loss. However, we cannot ensure or warrant the absolute security of any such information you provide to us or guarantee that information may not be accessed, disclosed, altered, or destroyed by unauthorised persons. We do not warrant that our Services will be without error or interruption, or will be free from unauthorised or fraudulent third party access as a result of the nature of Internet transmissions. If you suspect any misuse or loss of, or unauthorised access to, your personal information, please contact us immediately (see “Contact Us” section below).
Complaints about Your Personal Information
If you are concerned about how we collect, hold, store, use or disclose your personal information, you may make enquiries or submit a formal complaint to us (see “Contact Us” section below). We will use reasonable endeavours to address your enquiry or complaint and will endeavour to respond to you within 21 days of receipt of your initial enquiry or complaint (to the extent that we feel your complaint is complex or that we require further time to provide a substantive response, we will send you a notice to that effect).
You must provide all reasonable assistance to us to allow us to address your enquiry or complaint, including providing us with all appropriate and relevant information and feedback on request.
If you feel your enquiry or complaint has not been adequately addressed by us, you may contact the Office of the Australian Information Commissioner. However, we would advise you to notify us beforehand of why you feel we have not adequately addressed your enquiry or complaint and allow us an opportunity to respond to you. If you would like any further information about your rights to privacy, please contact or visit the website of the Office of the Australian Information Commissioner at http://www.oaic.gov.au.