Your privacy, handled the Australian way

The Privacy Act 1988 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

• whether the information or opinion is true or not; and
• whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “Personal Information” and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive Information will be used by us only:

• for the primary purpose for which it was obtained;
• for a secondary purpose that is directly related to the primary purpose; and
• with your consent or where required or authorised by law.

• We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to us in any other way.
• We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
• We categorise cookies as essential (required for Website functionality), analytics (to understand usage patterns), and marketing (for targeted communications). Essential cookies operate automatically, while analytics and marketing cookies require your explicit consent via our cookie banner, which you may withdraw at any time through your browser settings or your preference centre.
• We generally don't collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
• Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.

• We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.
• We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.
• We disclose Personal Information to service providers in the following categories: cloud hosting providers, payment processors, analytics providers, customer relationship management systems, and technical support personnel. All service providers are contractually obligated to comply with the Australian Privacy Principles, maintain strict confidentiality, and handle Personal Information only as directed by us. You may request details about specific service providers by contacting us.
• By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe link.

• We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. When we no longer require your Personal Information for the purpose for which we obtained it, we will take reasonable steps to destroy and anonymise or de-identify it. Most of the Personal Information that is stored in our client files and records will be kept for a maximum of 5 years to fulfil our record keeping obligations.
• For client data processed through our web applications and digital platforms, we implement secure deletion protocols including database purging, backup removal, and cryptographic erasure. Destruction activities are documented and verified annually, with records maintained for audit purposes in accordance with Victorian and Commonwealth regulatory requirements.

The Australian Privacy Principles:

• permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and
• allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).

Where you would like to obtain such access, please contact us in writing.

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us. All complaints will be considered by Flipside Productions Pty Ltd and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

Your Personal Information will not be disclosed to recipients outside Australia unless you expressly request us to do so. If you request us to transfer your Personal Information to an overseas recipient, the overseas recipient must comply with the Australian Privacy Principles and we will not be liable for any mishandling of your information in such circumstances.

We will acknowledge your complaint within 14 business days of receipt and conduct a thorough investigation within 30 days. You will receive a written response detailing our findings, explanation of any privacy breach, and proposed remedies or corrective actions. If you remain dissatisfied after our response, you may escalate the matter to our Privacy Officer or contact the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can get in touch through our contact page or email us at support@flipsidedigital.com.au.