DyFlex Solutions Privacy Policy

This Privacy Policy applies to DyFlex Pty Ltd (ACN 099 622063) and its related bodies corporate operating in Australia (including Bluetree Solutions Pty Ltd and its subsidiaries) (collectively DyFlex Group, we, our or us). The DyFlex Group is committed to protecting the privacy of individuals and is bound by the Australian Privacy Principles set out in the Privacy Act 1988 (Cth) (Privacy Act). We will onlycollect, use or disclose personal information in accordance with the Privacy Act and this Privacy Policy.

Personal Information We Collect

The types of personal information we collect from you will depend on how you engage with us, including whether you are applying for employment with us, procuring our services, providing services to us, registering for events, engaging in marketing campaigns, visiting or submitting a form on https://www.dyflex.com.au/ (the Site) or otherwise contacting or corresponding with us.

The personal information we collect about you may include (but may not be limited to) your:

  • Personal and contact details, including yourname, email, phone number, address, date of birth and (if applicable) companyposition;
  • Identification details, such as your passport ordrivers licence details; and
  • Occupation, education, qualifications, workhistory details, professional references, remuneration details and expectationsand, where required, security clearances, licences and visa documentation.

When you visit and browse the Site, we automatically collect certain information directly from you about:

  • Your device (including, information about your web browser, IP address, time zone, and some of the cookies that are installed on your device);
  • Your geo-location;
  • The individual web pages or products that you view;
  • What websites or search terms referred you tothe Site; and
  • Information about how you interact with the Site,

(collectively, Device Information).

Finally, we may also collect sensitive information in theform of criminal history through background checks. We may collect thisinformation from you or, where appropriate, from third parties such as refereesor recruitment providers. Sensitive information will be collected by us onlywith your consent and will only be used and disclosed as strictly necessary for the purposes of recruiting potential employees and engaging and working with contractors.

Collection of Personal Information

We may collect personal information from you in several different ways. We may collect personal information directly from you or in the course of our dealings with you, such as when you:

  • provide personal information to us;
  • apply for a position of employment with us;
  • purchase or enquire about our products and services;
  • use our Site, including via cookies, log files, web beacons, tags and pixels (see below); and
  • contact and correspond with us, such as when asking for information or submitting forms through our Site.

We may also, where permitted by law, collect personal information about you from another DyFlex Group entity or person, publicly available sources (e.g. public registers and social media), third party recruitment agencies, employers, government departments and third-party service providers which provide criminal, bankruptcy, and other checks.

Cookies and Tracking Technologies

As you navigate through the Site, Device Information will be passively collected (that is, gathered without you actively providing the information) using the following technologies:  

  • “Cookies”. These are data files that are placedon your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org; 
  •  “Log files”. These track actions occurring onthe Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps; and
  •  “Web beacons,” “tags,” and “pixels”. These are electronic files used to record information about how you browse the Site.

This Site may use and combine such passively collected anonymous information to provide better services to Site visitors, customise the Site based on your preferences, compile and analyse statistics and trends and otherwise administer and improve the Site for your use.  Such information is not combined with personal information collected elsewhere on the Site unless you have provided your consent.

If you prefer not to receive cookies, you may be able to adjust your browser or device settings to block or disable cookies.

How Do We Use Your Personal Information?

We may use or disclose your personal information for the purpose for which it was collected, including to:

  • provide and administer our products and services, including to manage our relationship with you or your business;
  • communicate with, or contact, you or your representatives;
  • when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services or events held by us;
  • verify your identity;
  • facilitate our business activities and manage our operations;
  • consider your application, or future suitability, for employment with us;
  • manage, develop, and improve our products and services and obtain feedback;
  • provide customer support, including to handle queries, complaints and claims;
  • comply with our legal and regulatory obligations; and• manage security, risk and crime prevention.

We may also use your personal information for purposes related to those described above which would reasonably be expected by you. We will not use your information for purposes other than those described above unless we have your consent or as permitted by law (including for law enforcement or public health and safety reasons).

As described above, we may use your personal information to contact you via email, SMS or other means in order to provide you with updated information about our Site and information about our offers or events. We may also use your personal information to provide you with marketing communications about our services and, where required by law, we will ask for your consent at the time we collect your data to conduct any of these types of marketing.  We will provide an option to unsubscribe or opt-out of further communication on any electronic marketing communication sent to you. If you do not or no longer wish to receive such information, you may also contact us as set out below.

Automated decision making

We do not use any automated decision-making (ADM) tools to make, or assist in making, decisions that could significantly affectindividuals.

Disclosing your personal information

We may disclose your personal information with thirdparties to help us use your personal information, as described above, including:

  • to Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your personal informationhere: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout;
  • to our third party service providers (including, without limitation, providers of information technology, data storage, web-hosting and cloud services, mailing houses, marketing, analytics, human resources, finance, audit, legal and other professional services);
  • to our related bodies corporate;
  • to distributors and suppliers for business purposes; and
  • to customers and contractors with whom DyFlex Group does business, if the information is relevant to a particular arrangement or project.

We may also disclose your personal information to third parties:

  • where required or authorised by law or otherwise permitted by the Privacy Act;
  • if required to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, orto otherwise protect our rights; or
  • if youhave consented to us doing so.

Overseas disclosure of personal information

Some of the third parties to whom we disclose your personal information may be located outside of Australia. For example, we may disclose your personal information to external national or overseas facilities in the course of conducting information and data processing, back up and scanning or for the purposes of obtaining services from third parties.

The countries in which these third parties are located will depend on the circumstances. However, in the course of ordinary business operations, we commonly disclose personal information to third parties located in the following countries:

  • New Zealand;
  • Canada;
  • the United States of America;
  • the United Kingdom; and
  • selected countries in the European Union.

We take reasonable steps to ensure that any overseas recipients handle personal information in a way that is consistent with the Privacy Act, for example by putting in place appropriate contractual arrangements and conducting due diligence on their privacy and security practices, where required.

Your Rights

You may request access to, or correction of, any of the personal information we hold about you by contacting us using the details inthe Contact Us section below.

‍(a)  Access: We reserve the right to charge a reasonable fee for the cost of retrieval and supply of any requests. If we do not provide you with access to your personal information, we will provide you with reasons for denying access and mechanisms for how you may complain if you are not satisfied with this decision.

(b)   Correction: If you believe that the information we hold about you is incorrect or not up-to-date, you can contact us to request correction. We will take all reasonable steps to ensure that the personal information we collect, use ordisclose is accurate, complete and up to date.

We will:

  • amend your personal information if it is possible and reasonable for us to do so; or
  • if the record cannot be altered, provide a written reason and mechanisms for how you may complain if you are not satisfied with this decision.

We may also require proof of identity before granting access to or correcting any personal information. We will endeavour to respond to requests for access or correction within a reasonable time from receiving the request.

Storage and security

We will take reasonable steps to keep any personal information we hold about you secure and safe from loss, misuse, unauthorised access, modification, disclosure or destruction. We implement a range of technical and organisational measures to protect the personal information that we hold, including role-based access controls, multi-factor authentication for administrative access, encryption in transit and at rest where applicable, vulnerability management and monitoring and incident response processes.

Data Retention

Unless we are required to retain your personal informationto comply with a court order or an applicable law or regulation, we will take reasonable steps to destroy or permanently de-identify your personal information once it is no longer needed for the purpose for which it was collected.

Changes

We may update this privacy policy from time to time inorder to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. The current version will be posted onour Site at https://www.dyflex.com.au/privacy-policy. All amended terms will automatically take effect immediately on posting.

Contact Us

If you would like to exercise any of your rights relating to your personal information set out above, have questions or concerns about our collection, use or disclosure of your personal information, or would like to make a complaint, please contact us:

  • by email at privacy@dyflex.com.au
  • by mail at Level 39, 88 Walker Street, NorthSydney, NSW 2060, Australia; or
  • by phone at 1800 851 792.

When contacting us, please provide as much detail as possible in relation to the query, issue or complaint. We will acknowledge receipt of your query, request or complaint and will investigate the matter.

We will take any privacy complaint seriously. We will aim to respond to you in writing within a reasonable period and resolve any such complaint in a timely and efficient manner. We request that you cooperate with us during this process and provide us with relevant information we may require.

We expect our procedures will deal fairly and promptly with your complaint. However, if you are not satisfied with our response to your complaint, you can also make a formal complaint with the Office of the Australian Information Commissioner:

  • by mail at GPO Box 5218 Sydney NSW 2001;
  • by phone on 1300 363 992;
  • by email at enquiries@oaic.gov.au; and
  • by website athttps://www.oaic.gov.au/contact-us.