Privacy Policy - Moss Wood Pty Ltd

1. Overview

Moss Wood Pty Ltd (Moss Wood) believes privacy is an important right of individuals.  Moss Wood takes steps to protect your personal information from misuse and to use your information only in the ways described in this privacy policy and in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the General Data Protection Regulation (GDPR).

This privacy policy does not apply to personal information collected, or otherwise obtained, by Moss Wood in relation to current and former employees and which relates directly to the employment relationship that exists, or existed, between Moss Wood and its current and former employees.

Terms used in this privacy policy have the same meaning as those in the Privacy Act and the GDPR.

2. Open and transparent management of personal information

We make our privacy policy available on our website located at: https://www.mosswood.com.au/privacy/  and we can also provide a hard copy version upon request.  If you would like more information or a hard copy of this privacy policy, please contact us by:

3. Personal information

Personal information means information or an opinion about an individual whose identity is apparent or can reasonably be ascertained from the information or opinion.  The personal information which we collect, store, use and disclose may include, in the case of customers of Moss Wood:

  • your name;
  • your contact details;
  • your banking details and/or credit card details;
  • your age or date of birth; and
  • any other personal information provided by you in any correspondence with Moss Wood; and

in the case of job applicants, in addition to the personal information described above:

  • your employment history;
  • your tax file number and superannuation information;
  • educational qualifications;
  • your date of birth, gender and current occupation;
  • passport number;
  • whether you own a vehicle; and
  • any other person information provided by you during the course of your application.

4. Some personal information is considered 'sensitive information' for the purposes of the Privacy Act. Moss Wood does not collect sensitive information. Anonymity and pseudonymity

In most circumstances, it is impractical for people to communicate with us anonymously. We need to identify you to assist you effectively.  However, in circumstances where it is lawful and practicable to do so, we will provide you with the option of not identifying yourself, or using a pseudonym, when entering into communications with us.

We may use personal information in aggregate form to improve our services and make them more responsive to the needs of our subscribers and customers. This statistical compilation may also be used by us or third parties as a summary report for marketing, advertising or research purposes.

5. Collection of solicited personal information

We only collect personal information by lawful and fair means where reasonably necessary for our functions or activities as winemakers, viticulturalists and retailers of wine.

We collect personal information which:

  • you provide in the course of applying for employment positions at Moss Wood;
  • is provided to us by you for the purposes of ordering goods via our website or office or for shipping an order;
  • you provide to us in order to subscribe to our mailing list;
  • is provided to us by third parties who have disclosed that information to us with your consent (and only if it would be unreasonable or impracticable to collect the information directly from you);
  • you provide to us in the course of updating or changing your details;
  • is contained in documents or correspondence you provide to us;
  • you provide to us in person, by phone, by post, via our website or via other forms of electronic communication (including via social media); or
  • you provide during the course of Moss Wood events such as tastings and dinners.

:

We also utilise 'cookies' which enable us to monitor traffic patterns and to serve you more efficiently if you revisit our website.  A cookie does not identify you personally but it does identify your computer.  You can set your browser to notify you when you receive a cookie and this will provide you with an opportunity to either accept or reject it in each instance.  If you reject a cookie, some of the parts or features of the website may not function properly. Please see our Cookie Policy for details.

6. Collection of unsolicited personal information

From time to time, we may receive unsolicited personal information about you. Unsolicited personal information is information we may receive from you which is not in response to a request by us for that information.

Where we receive unsolicited personal information about you (either directly from you or from a third party), we will consider, within a reasonable period, whether we could have collected that personal information from you had the personal information been solicited.

Where we determine that we could have collected the unsolicited personal information had it been solicited, we will store, use and disclose that personal information in the manner set out in this privacy policy.

Where we determine that we could not have collected the unsolicited personal information had it been solicited, we will destroy or de-identify that unsolicited personal information as soon as practicable, provided it is lawful and reasonable to do so.

7. Use or disclosure of personal information and lawful basis of processing

We may collect, store (in hard copy or electronic form), use or disclose and otherwise process your personal information for the primary purpose of conducting and supporting our business activities as winemakers and viticulturalists.  Depending on the lawful basis for which we are able to process your personal information, we may also collect, store, use or disclose your personal information:

  • to send you updates and newsletters;
  • to contact you should we need to;
  • to address any enquiries, complaints or feedback from you; or
  • to do anything Moss Wood is required or authorised by law to do.

Further, we may disclose your personal information to:

  • third parties where you have given your consent (express or implied);
  • government agencies or other similar entities as required or permitted by law; and
  • our professional advisors, contractors or other service providers whom Moss Wood may engage from time to time to carry out, advise or assist with the carrying out of the business activities of Moss Wood.

Moss Wood will not use your personal information for a secondary purpose unless:

  • you consent to the use or disclosure or you would reasonably expect us to use it for a secondary purpose which is related to the primary purpose;
  • the use or disclosure is required or authorised by law; or
  • the use or disclosure is otherwise permitted by the Privacy Act (for example, as a necessary part of an investigation of suspected unlawful activity).

8. Cross-border disclosure of personal information

We are based in Australia, so your personal information will be processed in Australia. However, we may send your personal information to organisations or persons located overseas. For example, indirect overseas disclosure of your personal information to third parties overseas may occur as we use various third party service and storage entities located overseas including, amongst others, Campaign Monitor, WordPress, Google Analytics, and WP Engine. The third party service and storage entities we use are generally located in the United States of America. If we disclose personal information to a third party in a country which does not have equivalent privacy laws to Australia, we will take reasonable steps in the circumstances to ensure that the overseas recipient does not breach the Privacy Act. In particular, we will not send your personal information overseas unless either:

  • we reasonably believe that the recipient of the information is subject to a law or binding scheme that has the effect of protecting information in a way that, overall, is at least substantially similar to the way in which the Privacy Act protects personal information and there are mechanisms that you can access to take action to enforce that protection of the law or binding scheme; or
  • you have consented to the transfer.

9. Direct marketing

Unless you request otherwise, we may also use your personal information for marketing purposes to send you news, information about our activities and general promotional material which we believe may be useful or of interest to you.  If you do not want us to use your personal information in this manner, please contact us using the contact details provided above in "Section 1 - Open and transparent management of personal information" and we will give effect to your request as soon as possible.

10. Security of personal information

We take reasonable steps to protect your data from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Moss Wood also takes reasonable steps to destroy or permanently de-identify personal information which is no longer needed for the purposes described in this privacy policy.

11. Access to personal information

Subject to any exceptions in the Privacy Act, if you have provided us with personal information, you have a right to request access to it.  If you are of the belief that Moss Wood holds personal information relating to you and you wish to obtain access to this information, please contact us on the details provided above.  We may ask you to provide proof of your identity if you request access to or correction of your personal information.

In the event that a request for access is made, we will review our records to determine what personal information relating to you we hold and endeavour to respond to your request within a reasonable period after the request is made, but in any event, within 30 days.

Once we have notified you of the nature of the personal information relating to you which we hold, we will give you access to your personal information in the manner requested by you, if it is reasonable and practicable to do so.

We do not levy a charge in respect of the making of a request for access to personal information held by us.  However, we may charge you for the reasonable costs incurred by us in providing you with access to the personal information held by us.

The Privacy Act provides instances where a holder of personal information may refuse to provide an individual with access to their personal information.  If we refuse to give you access to your personal information, we will give you a written notice that sets out our reasons for the refusal and the mechanisms available to complain about our refusal.

12. Correction of personal information

Moss Wood takes reasonable steps to keep your personal information as accurate, complete and up-to-date as possible.  We make an effort to ensure this data is of high quality, but this relies on the accuracy and frequency of data provided by you.

You can assist us by notifying us if your circumstances change, such as if your name changes.

If we hold personal information about you and you request that we correct the information, we will take reasonable steps to rectify the situation free of charge if we are satisfied that the information is inaccurate, out-of-date, incomplete, irrelevant or misleading.  If we refuse to correct your personal information, we will give you a written notice setting out our reasons for the refusal and the mechanisms available to complain about the refusal.

13. Specific rights for EU residents only

In many cases, the control and processing of the personal information of EU residents is subject to the requirements of the GDPR.

If you are a resident of the European Union, then you may have additional rights under the GDPR, including the right to:

  • withdraw your consent, where we rely upon it for processing your personal information, at any time;
  • ask us to confirm if we are using your personal information;
  • ask us to delete your personal information;
  • ask us to stop or restrict how we process your personal information;
  • subject to certain conditions, ask us to help you move your personal information to other companies; and
  • be informed and know about any protections that we have put in place when we are transferring your data overseas.

Some of these rights will apply in very limited circumstances. For example, the right to request the deletion of your personal information, or to stop or restrict its use, is not usually available where it remains necessary for us to retain and use your personal information for the purposes for which it was collected, or where we have a legal obligation to retain or use the information.

14. Complaints, questions or further information

If you wish to make a complaint about a breach of your privacy by Moss Wood, you may contact us using the contact details provided above.  All complaints will be investigated by an appropriately qualified representative of Moss Wood.  We will endeavour to resolve your complaint as quickly as possible and, in any event, within 30 days.  We will notify you of the outcome of the investigation, including how we propose to resolve your complaint and what, if any, corrective measures we will implement.

If you are not satisfied with our handling of your complaint, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).  For more information about doing so, visit http://www.oaic.gov.au/privacy/making-a-privacy-complaint

15. Changes to privacy policy

Moss Wood reserves the right to amend this privacy policy from time to time.  If we do so, the amended privacy policy will be posted as soon as practicable following that amendment on our webpage https://www.mosswood.com.au/privacy/.