Privacy Statement
The following Privacy Statement outlines how We collect, use, disclose and manage Your Personal Information in accordance with the Privacy 1988 (including but not limited to, EU Data Privacy Laws (including the General Data Protection Regulation “GDPR”) (collectively, “EU Data Privacy Laws”) and the Australian Privacy Policy Act 1988 (including the Privacy Amendment (Notifiable Data Breaches) Act 2017) or any other applicable laws.

Definitions “We”, “Us”, “Our or “Ourselves”” means Grays Bendigo Pty Ltd, its successors and assigns or any person acting on behalf of and with the authority of Grays Bendigo Pty Ltd.
“You”, “Your” or “Yourself”” means any person/s (end user) being of the legal age of eighteen (18) years.
“Website” means a location which is accessible on the Internet through the World Wide Web and which provides multimedia content via a graphical User Interface.
"Personal Information" means any information that identifies or can be used to identify You, directly or indirectly. Examples of Personal Information include, but are not limited to, first and last name, date of birth, email address, gender, occupation, or other demographic information.
"Confidential Information” means information of a confidential nature whether oral, written or in electronic form including, but not limited to, this Agreement, a party’s Intellectual Property, operational information, know-how, trade secrets, financial and commercial affairs, contracts, supplier information and pricing details.

Privacy Policy
We are committed to protecting Your Privacy in accordance with Australian Privacy Principles. We also recognise that when You choose to provide Us information about Yourself that You trust Us to act responsibly and in Your best interests therefore We have the following policies in place to protect Your personal information.

Storing Your Information
We will take all reasonable steps to ensure that Your information held by Us is accurate up-to date, complete, applicable, is not misleading and will only be used for the purposes stated in this document and/or Our Privacy Policy. We will maintain security safeguards to protect Your information and will take all reasonable steps to ensure that Your information is not disclosed to any unauthorised person or entity.

Securing Your Information
When making a transaction through this Website Your information will pass through a secure server using SSL (secure sockets layer) encryption technology. The encryption process ensures that Your information can not be read by or altered by outside influences.

Information We Collect
When You request goods or services We may collect Personal Information supplied by You when You complete an online form in order to facilitate the purchase of goods and/or services. Such information will enable Us to process Your transactions efficiently, analyse our Website services and enable Us to provide a higher level of customer service (which may include informative or promotional activities). We may also collect the following information/tracking data for statistical purposes and to help Us understand how to make Our Website more available and user friendly for You and to measure the success of any advertising activities We may, as listed below, take:
(a) Your IP address.
(b) The date and time of Your visits to Our Website.
(c) Your clicks and activity on this Website.
(d) The referring Website if any through which You clicked through to this Website.
(e) Technical information on Your browser, device and operating systems.

Information We Release
We will only release information about You as authorised by Yourself, required by law or where required in order for Us to provide goods or services to Yourself e.g to third party suppliers, or delivery companies. Where supplied to such third parties the information provided will only be sufficient for the third party to perform their services and may not be used by them for any other purpose.

We will not release Your information for any purpose which You could reasonably expect us not to release the information.

Except as detailed above We do not share, give, sell, rent, or lease information to third parties and Your Personal Information will only be disclosed to those employees within Our organisation who have a need to know in order to ensure You are provided with information about Our goods and services or to request goods and services through this Website.

Under the Privacy Act legislation, You can ask to see any information We may hold about You and You also have the right to have any inaccuracies in the same corrected by Us. We will comply with any such requests to the extent required by the Privacy Act legislation within fourteen (14) days of the receipt of Your request. We may ask you to verify your identity in order to help us respond efficiently to your request.


Other Data Protection Rights
You may have the following data protection rights:

(a) To access, correct, update or request deletion of Personal Information. We will take all reasonable steps to ensure that the data We collect is reliable for its intended use, accurate, complete and up to date.
(b) In addition, individuals who are residents of the European Economic Area “EEA” can object to processing of their Personal Information, ask to restrict processing of their Personal Information or request portability of their Personal Information. You can exercise these rights by contacting Us using the contact details provided in the "Questions and Concerns" section below.
(c) Similarly, if Personal Information is collected or processed on the basis of consent, the data subject can withdraw their consent at any time. Withdrawing Your consent will not affect the lawfulness of any processing We conducted prior to Your withdrawal, nor will it affect processing of Your Personal Information conducted in reliance on lawful processing grounds other than consent.
(d) The right to complain to a data protection authority about the collection and use of Personal Information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are available at http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

Questions & Concerns
If You have any questions or comments, or if You have a concern about the way in which We have handled any privacy matter, please contact Us via email, post or the contact section of this website.
Attention: Privacy Officer
info@graysbendigo.com.au
Postal Address: PO Box 65, Eaglehawk VIC 3556

Cookies
We and Our partners may use various technologies to collect and store information when You use this Website, and this may include using cookies and similar tracking technologies, such as pixels and web beacons. These web beacons track certain behavior such as whether the email sent through the Website was delivered and opened and whether links within the email were clicked. They also allow Us to collect information such as the recipient’s:

• IP address, browser, email client type and other similar details;
• Tracking of Website usage and traffic;
• Reports are available to Us when We send an email to You, so We may collect and review that information.

These cookies do not read Your hard drive but may be stored on Your hard drive to enable Our Website to recognise You when You return to the same. General
This Website (excluding any linked third-party sites) is controlled by Us from Our principal business premises in Australia. Our servers are located in Australia, so Your information may be transferred to, stored, or processed in Victoria. It can be accessed from countries around the world to the extent permitted by the Website. As each country has laws that may differ from Australia, by accessing this Website, You agree that the laws and statutes of Australia shall apply to any dealings, actions or claims arising out of, or in relation to, this Agreement, or Your use of this Website, irrespective of any conflict with any laws and statutes applicable to Your country of domicile.

In addition, We or Our subcontractors may use cloud technology to store or process Personal Information, which may result in storage of data outside Australia. It is not practicable for Us to specify in advance which country will have jurisdiction over this type of offshore activity. All of Our subcontractors, however, are required to comply with the Australian Privacy Act in relation to the transfer or storage of Personal Information overseas.