1. Introduction
1.
This website (www.rebelled.com.au), the application and website development products and services and the digital marketing and content marketing products or services (collectively, products and services) are created, operated and controlled by REBELVED PTY LTD (ACN 664 566 036) (Rebelled, we, us or our).
2.
We are committed to ensuring your personal information is protected. We manage your personal information in accordance with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth) (Privacy Act) and the General Data Protection Regulation (EU 2016/679) (GDPR), which applies across the European Union (collectively, Privacy Laws).
3.
By accessing and using and continuing to our website, products or services you agree to this Privacy Policy.
4.
This Privacy Policy outlines how and when we collect, process, use, share, store, disclose, retrieve, alter and destroy your personal information or personal data (as defined in the Privacy Laws) (collectively, Personal Information) and how you may make a privacy complaint.
2. The information we collect about you
2.1 Personal Information
1.
We will only collect and hold Personal Information about you that is reasonably necessary to undertake our business activities and functions, make our website available to you, deliver our products and services to you, or as otherwise permitted by law.
2.
The type of Personal Information that we collect and use depends on the type of dealings that you have with us and includes the following:
1.
contact details (for example, full name, address, mobile and telephone numbers and email address);
2.
business details (for example, business name, business address, work mobile and office telephone numbers and work email address);
3.
information relating to your dealings, or enquiries you have made, with us, including information about the products or services you have ordered;
4.
payment and billing information;
5.
information regarding your access and use of our website, including location information, IP address, [unique device identifier, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken on your website, dates and times of visits to your website and other usage statistics;
6.
other information that you provide to us or that we may collect in the course of our relationship with you; and
7.
information provided by or on behalf of applicants for employment.
2.2 Sensitive Information
1.
We do not collect your sensitive information or sensitive personal data (as defined by the Privacy Laws) (collectively,Sensitive Information). However, some of our services are automated and we may not recognise that you have accidentally provided us with Sensitive Information. If you have accidentally sent us Sensitive Information, please contact us using the contact details set out in section 15 below.
3. How we collect Personal Information
3.1 Direct collection from you
1.
We will collect Personal Information about you in a number of different ways. We may collect Personal Information directly from you or in the course of our dealings with you. For example, when you:
1.
contact and correspond with us (for example, when you participate in a promotion, competition, or survey, or when you complete online forms for our products or services or subscribe to our publications, alerts and newsletters, or information you provide to us when you send us an email);
2.
when use or order our products or services;
3.
visit our website (including via cookies), contact us online or via telephone with a query or request or make a comment on our social media sites;
4.
provide your Personal Information to third parties (including to our related bodies corporate, business partners and service providers, credit reporting bodies, credit providers, government agencies, public registries, search agencies, regulatory and licensing bodies, parties to whom you refer us (for example, previous employers and referees), recruitment agencies and from publicly available sources of information (for example, online databases and social media));
5.
when apply for a position of employment with us; or
6.
when otherwise legally authorised or required to do so.
2.
When we collect Personal Information directly from you, we will take reasonable steps to notify you (using a collection notice) at, before, or as soon as practicable after, the time of collection. As a collection notice is specific to a particular collection of Personal Information, it will provide more specific information about our information-handling practices than this Privacy Policy.
3.2 Collection from third parties
1.
We may also collect Personal Information about you from publicly available sources and third parties, including:
1.
from third parties (including our related bodies corporate, business partners and service providers, credit reporting bodies and credit providers, government agencies);
2.
if you use:
1.
our social media sites or applications, pages or plugins; or
2.
third party products or services that interact with our products, services or website.
2.
When we collect Personal Information directly from you, we will take reasonable steps to notify you (using a collection notice) at, before, or as soon as practicable after, the time of collection. As a collection notice is specific to a particular collection of Personal Information, it will provide more specific information about our information-handling practices than this Privacy Policy.
3.
If you provide us with Personal Information about another individual (as their authorised representative), we rely on you to:
1.
inform them that you are providing their Personal Information to us; and
2.
advise them that they can contact us for further information.
4.
You must take reasonable steps to ensure the individual is aware of, and consents to, the matters outlined in this policy, including that their Personal Information is being collected, the purposes for which that information is being collected, the intended recipients of that information, the individual’s right to access that information, and who we are and how to contact us.
5.
Upon our request, you must also assist us with any requests by the individual to access or update the Personal Information you have collected from them and provided to us.
3.3 GDPR (European Union only)
1.
For the purposes of the GDPR, you appoint us as your Processor (as defined in the GDPR), and/or to the extent that we are a Controller (as defined in the GDPR), to collect, process, use, share, store, disclose, retrieve, alter and destroy your Personal Information in accordance with this Privacy Policy.
2.
We must establish a lawful basis for processing your Personal Information. The legal basis for which we collect your Personal Information depends on the data that we collect and how we use it.
3.
We must establish a lawful basis for collecting, processing, storing, using and disclosing the Personal Information of individuals residing in the European Union (EU). The legal basis for which we collect your Personal Information depends on the data that we collect and how we use it, such as:
1.
where you have freely and expressly consented to the collection, use, storage, processing and disclosure of your Personal Information for a specific purpose. The provision of Personal Information to us is voluntary. However, if you do not provide your Personal Information to us, we may not be able to provide you with access to, and use of, our products, services or the website. You may withdraw your consent at any time by contacting us using the details below;
2.
where the collection, use, storage, processing and disclosure of your Personal Information is necessary for the performance of a contract to which you are a party. For example, when collection and use is necessary to fulfil our obligations to provide you with access to, and use of, our products, services or the website;
3.
for our legitimate business interests, including, but not limited to:
1.
providing, operating and improving our products, services or website;
2.
marketing new promotions, deals, competitions, products, services or features of the website provided by us or our Authorised Affiliates that we consider may interest or benefit you;
2.
managing, analysing, understanding and developing our relationship with you;
2.
responding to your queries or complaints (such as when you submit a question via email); and
4.
where there is a legal obligation to collect, use, store, process or disclose your Personal Information. For example, we may be obliged to disclose your Personal Information by reason of any applicable law, regulation or court order and/or to protect our interests and legal rights, or the public interest.
4. Legal basis for processing personal information (EU Only)
We rely on several legal bases under the GDPR to collect, process, store, use and disclose the Personal Information of individuals residing in the European Union (EU), including:
1.
where you have freely and expressly consented to the collection, use, storage, processing and disclosure of your Personal Information for a specific purpose. The provision of Personal Information to us is voluntary. However, if you do not provide your Personal Information to us, we may not be able to provide you with access to, and use of, our products, services or website. You may withdraw your consent at any time by contacting us using the details below;
2.
where the collection, use, storage, processing and disclosure of your Personal Information is necessary for the performance of a contract to which you are a party. For example, when collection and use is necessary to fulfil our obligations to provide you with access to, and use of, our products, services or the website;
1.
providing, operating and improving our products, services or website;
2.
marketing new promotions, deals, competitions, products, services or features of the website provided by us or our Authorised Affiliates that we consider may interest or benefit you;
2.
managing, analysing, understanding and developing our relationship with you;
2.
responding to your queries or complaints (such as when you submit a question via email); and
4.
where there is a legal obligation to collect, use, store, process or disclose your Personal Information. For example, we may be obliged to disclose your Personal Information by reason of any applicable law, regulation or court order and/or to protect our interests and legal rights, or the public interest.