1. INTRODUCTION
1.1 Melbourne River Cruises
Melbourne River Cruises from time to time gathers information from Customers and other parties with whom we deal for a variety of reasons including, in particular, to enable us to improve the nature of the services we provide. Melbourne River Cruises understands individuals’ concerns regarding confidentiality and takes seriously its obligations in respect of all information it gathers.
2. WHY MELBOURNE RIVER CRUISES COLLECTS PERSONAL INFORMATION
2.1 Nature of Information
The information Melbourne River Cruises collects in most cases relates to Customers but can relate to suppliers and other parties we deal with (for the purposes of this Privacy Policy all such people are described as “Customers”). Information is gathered for a range of purposes, including the provision of ongoing Customer support and the compiling of Customer databases to enable us to more accurately market our goods and services. The type of information we collect includes such things as contact details, buying habits, opinions, product preferences and transactional details. Melbourne River Cruises treats all such information which is collected and identifiable as relating to an individual as Personal Information. It is this information which is described as “Personal Information” for the purposes of this Privacy Policy.
2.2 Collection of Information
In accordance with the National Privacy Principles (NPPs), where practical, Customers of Melbourne River Cruises may deal with Melbourne River Cruises on an anonymous basis. However, as a provider of a wide range of services, Melbourne River Cruises frequently finds that it is necessary to collect Personal Information during the course of transactions.
Personal Information may be collected about Customers via the following means:
2.3 Information given to Customers
When Personal Information is collected from a Customer, they are advised at the time of collection or as soon as practical after its collection as to:
Where Melbourne River Cruises collects Personal Information about a Customer from a third party, and the Customer has not previously consented to that third party providing the information to Melbourne River Cruises, Melbourne River Cruises will, where reasonable and practical, provide the Customer with the following information about that third party:
2.4 ‘sensitive information’
Melbourne River Cruises will not ask a Customer for information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or details of health, disability or sexual activity or orientation, unless:
2.5 Customer consent
Wherever practical, Melbourne River Cruises will obtain the express consent of Customers to the collection of Personal Information.
In some situations, Melbourne River Cruises will interpret a Customer’s actions as indicating that a Customer consents to the collection of Personal Information. This may occur where the Customer has provided Personal Information for a particular purpose and that purpose cannot be achieved without Melbourne River Cruises making use of the Customer’s Personal Information.
2.6 What happens if Personal Information is not provided
Where relevant, Melbourne River Cruises will endeavour to make Customers aware that Melbourne River Cruises may not be able to provide a proper service to them if Personal Information is not provided upon request.
3. MAINTENANCE AND MANAGEMENT OF PERSONAL INFORMATION
3.1 Who may view Personal Information
In general, only officers, employees or contractors of Melbourne River Cruises may view Personal Information.
Melbourne River Cruises will only grant access to parties other than Melbourne River Cruises’ officers, employees and contractors to view Personal Information where Melbourne River Cruises believes that access is necessary to achieve the purpose for which the Personal Information was collected.
Melbourne River Cruises will only disclose Personal Information to parties other than Melbourne River Cruises’ officers, employees and contractors if:
3.2 Identification
Melbourne River Cruises does not use any prohibited identifiers (such as a tax file number) to identify its Customers.
3.3 Storage and Security
Personal Information may be stored in either hard copy form or on computer or both. Hard copy Personal Information is wherever practical, kept under locked security. Personal Information stored on computer is wherever practical, password protected. Where possible and practical, Melbourne River Cruises will endeavour to comply with recognised Australian and international standards relating to information security. Melbourne River Cruises regularly deletes and de-identifies Personal Information if the information is no longer needed by Melbourne River Cruises.
3.4 Updating Personal Information
Melbourne River Cruises regularly monitors the quality and accuracy of Personal Information that it maintains and where practical, updates that information on a regular basis.
4. MINORS
Melbourne River Cruises has adopted the position proposed by the Privacy Commissioner that a young person is able to give their consent when he or she has a sufficient understanding and maturity to understand what is being proposed. Where Melbourne River Cruises is aware that it is gathering information from a minor, Melbourne River Cruises will obtain consent from a legal guardian for the collection of the information. Where this is not possible, Melbourne River Cruises’ staff will make a determination as to the minor’s understanding of why the Personal Information is being collected, before deciding to collect that information.
5. COMPETITIONS
Personal information gathered during competitions run by Melbourne River Cruises will be governed by the principles set out in this Privacy Policy unless an express statement is made in relation to privacy in the conditions of entry for the competition.
6. DIRECT MARKETING
Personal Information collected for direct marketing purposes will only be collected, used or disclosed with the consent of the relevant Customer as provided for in this Privacy Policy. In circumstances where Melbourne River Cruises cannot practically obtain the consent of a Customer, then Melbourne River Cruises may still engage in direct marketing to that Customer, but will:
Customers may be taken off any mailing list by contacting Melbourne River Cruises’ head office.
7. ACCESS TO PERSONAL INFORMATION
Customers may access their Personal Information by contacting Melbourne River Cruises ‘head office. Access is generally granted within 30 days of that request. Melbourne River Cruises may impose a reasonable charge for access.
8. WHEN MELBOURNE RIVER CRUISES MAY WITHHOLD ACCESS TO PERSONAL INFORMATION
8.1 When access can be withheld
Access to Personal Information may be withheld in a number of circumstances. These include where:
Where Melbourne River Cruises does withhold Personal Information, Melbourne River Cruises may instead choose to give the Customer a summary of that information.
8.2 Written reasons
If Melbourne River Cruises does withhold Personal Information, Melbourne River Cruises will provide written reasons.
8.3 Third party intermediary
If Melbourne River Cruises withholds access to Personal Information, Melbourne River Cruises will consider whether the provision of access to an independent third party will meet Melbourne River Cruises ‘ and the relevant Customer’s needs.
9. CONTRACTORS
Melbourne River Cruises may from time to time employ subcontractors to provide services to it. In these situations, Personal Information may be collected about those subcontractors. This Privacy Policy applies equally to those subcontractors.
10. MODIFICATIONS TO THIS DOCUMENT
Melbourne River Cruises may modify this Privacy Policy and the way it handles Personal Information at any time in its sole discretion.