Privacy Policy
About our privacy policy
CarCram Pty Ltd ABN 69 615 032 249 trading as ‘CarCram’ (herein referred to as ‘CARCRAM, ‘we’, ‘us’ or ‘our’) are committed to protecting the privacy of your personal information in accordance with Australian privacy laws.
The CARCRAM privacy policy outlines what contact information we may gather from you, how we use, manage, disclose and protect this information and the choices you have to update this information or opt out from our company, marketing and sales communications. By using our website, engaging us to provide you with any goods or services, communicating with us through email, in writing, participating in any of our promotional activities or sharing your contact information with us, you are consenting and accepting to the practises described in this privacy policy and you agree to the use and disclosure of your personal information in the manner described in this privacy policy. We respect your privacy and recognise your need for reliable information with regard to your information’s intended use. We may make changes to this policy so please stay up to date by revisiting this page frequently. All personal information collected and held by us will be governed by the most recently updated Privacy Policy.
Our Privacy Policy complies with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth) as amended from time to time (‘Privacy Act’).
How we gather your personal information
Contact information is requested and collected when you purchase or order a product from the CARCRAM website, subscribe to a service, chat with us on the phone, create an online account, communicate with us through third-party social media sites, register to receive marketing communications or participate in contests, sweepstakes, surveys or promotions etc. We also use ‘cookies’ to assist in providing our customers with the best shopping experience. Providing your personal information is voluntary. If you choose not to provide all of the information we request, we may not be able to provide outstanding services, assistance or supply CARCRAM products.
What information we gather
The kinds of personal information we may collect from you will depend on what type of interaction you have with us. Personal information we may collect from you includes, among other things:
- name;
- postal code;
- shipping and billing address;
- telephone number;
- email address;
- your bank, credit or debit account details when you make a purchase;
- personal information we collect from you when assessing , processing and managing a trading application by you;
- birth date;
- a record of your product purchases;
- demographic information;
- your records of communication with us; and
- if you visit our website, your website usage information such as your IP address.
The purpose for collecting your personal information
We will generally only collect and use your personal information for the primary purposes of:
- our general business operations;
- effectively providing you with our goods and services;
- where applicable, assessing and processing your trade application;
- communicating with you;
- responding to your inquires or complaints;
- meeting our legal and regulatory obligations;
- conducting, improving and developing a relationship with you;
- direct marketing (such as providing you with information about our products and promotional notices and offers); and
- improving our websites.
Your personal information is only collected by lawful and fair means and where practicable, only from you or from a person acting or authorised to act on your behalf.
We will take reasonable steps to ensure that you are aware of:
- the likely use of the information;
- the right of access to the information;
- the identity and contact details of our employee/representative collecting your personal information;
- any law requiring collection of the information; and
- the main consequences of failure to provide your personal information.
Using your information
With the information you have correctly provided we are able to process transactions, confirm and track your order, send receipts and administrative messages. We are able to reply directly to customer service requests, manage your online account, subscription or registration plus analyse preferences, website usage trends and statistics. We can process and deliver contest, promotion and sweepstakes entries and rewards. If you have consented to receive marketing communications via your email address, which you provided, we will inform you of new products, brand happenings, about us, events and services and promotional offers. We utilise your contact information to enhance and personalise your positive shopping experience with us online. We can use the information to improve our products and services.
How we disclose your personal information
We may disclose personal information we collect from you:
- to our related companies, suppliers, consultants, contractors or agents for the primary proposes for which it was collected or for other purposes directly related to the purpose for which the personal information is collected. For example, your name and telephone number may be disclosed to our supplier to enable that supplier to respond to your request for information about a particular product;
- for direct marketing by, but giving you the opportunity to opt out of such direct marketing (we will include our contact details in any direct marketing);
- to relevant Federal, State, Territory medical, health and safety authorities (as required);
- where the law requires or authorises us to do so;
- to others that you have been informed of at the time any personal information is collected from you;
- with your consent (express or implied), to others.
We do not disclose your personal information for any secondary purposes unless your consent has been given or as required by law, and we will not sell or license any personal information that we collect from you.
How we use cookies
We also use “cookies”. A cookie is a small file that stays on your computer until, depending on whether it is a sessional or persistent cookie, you turn your computer off or it expires. Cookies may collect and store your personal information. You may adjust your internet browser to disable cookies. If cookies are disabled you may still use our website, but the website may be limited in the use of some of the features.
When you visit and interact with our website or emails, we use cookies to gather information about you and your browsing and purchasing behaviour. This information allows us to improve our service, make your online shopping experience better, understand which pages of our site and the most popular (web page traffic), understand campaign effectiveness, track emails and their success rate, links clicked and their conversion. We also use cookies to tailor our products, services and advertising to suit the personal interests of you. A cookie does not allow us access to your computer or any information about you, other than the details you choose to supply willing with us. Your web browser may be set to automatically accept cookies by default. You can choose to remove or reject cookies, however, this could affect the functionality of our website and your online experience. We recommend that you keep cookies enabled. By not disabling your cookies you accept the collection and storage of any personal information cookies contain. For information about disabling flash cookies, see www.adobe.com/products/flashplayer/security.
Security
We maintain reasonable safeguards to help protect the confidentiality and security of the information that you provide to use from loss, theft, misuse and unauthorised access. Providing any information to us is done so at your own risk. We protect your information to the extent permitted by applicable Australian law. We recommend that you keep your passwords in a secure place and always log out of your account and close your browser window when no longer in use.
If a substantial data breach has or may have occurred (for example, your personal information was shared with unauthorised persons) we will notify you as soon as is practicable.
Updating information about you
If you would like to update, correct or delete your online account information, log into your “my account page” or email your change request along with your correct full name, address and contact telephone number to our Privacy Officer. To contact our Privacy Officer please see contact details at paragraph 20 below.
Access to your personal information
We acknowledge that you have a general right of access to information concerning you, and to have inaccurate information corrected. You are able to access the personal information we hold about you by contacting our Privacy Officer. If access is refused to your personal information for reasons permitted by the Privacy Act, we will give you a notice explaining our decision to the extent practicable and your options.
- To contact our Privacy Officer please see contact details below. If you make an access request, we may ask you to verify your identity and put your request in writing for security reasons. We may charge a reasonable administration fee to cover the costs of meeting your request. We will reply to your request for access within 30 days of notification by you.
Opting out of marketing
We will only send direct marketing communications to you if you have registered and/or consented to receiving such news from us. If you no longer wish to receive direct marketing from CARCRAM, please let us know. You can email us at info@CarCram.com.au with your correct full name, address and contact telephone number or click the unsubscribe link at the end of all emails to be removed from all future updates. We will miss you.
Cross border disclosure
Your personal information may also be processed by, or disclosed to employees, representatives, or other third parties operating outside of Australia who work for, or are engaged by us in other countries. For example, we may use a server hosted overseas to store data, which may include your personal information.
We will take reasonable steps, in the circumstances, before your personal information is disclosed to an overseas recipient, to ensure that the overseas recipient does not breach privacy laws in relation to your personal information (‘the reasonable steps’).
The reasonable steps may not apply if you consent to the disclosure of your personal information to an overseas recipient and we reasonably believe that the overseas receipt is subject to laws that are suitability similar to privacy laws in Australia.
If you consent to the disclosure of your personal information to an overseas recipient, the overseas recipient may not be accountable under the Privacy Act, and you will not be able to seek redress for breaches under the Privacy Act.
Specific rights of European residents
CARCRAM is committed to ensuring its compliance with the European Union General Data Protection Regulation (‘GDPR’).
Although our Privacy Policy explains how CARCRAM meets all of its obligations for Australian individuals, CARCRAM may also have some individuals who are habitually located in the European Union (‘EU Residents’) and in Korea and New Zealand that have additional rights in respect of their Personal Data.
Personal Data is defined as: “Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”. This should be considered fundamentally interchangeable with the Australian expression “Personal Information” for the purposes of this Privacy Policy.
Under the GDPR, CARCRAM is primarily a “controller” of Personal Data, as opposed to being a “processor”. As part of its GDPR compliance, CARCRAM provides its services in a way that ensures:
- Personal Data (i.e. Personal Information) is:
- processed fairly, lawfully and in a transparent manner; and
- collected and processed only for specified and lawful purposes.
- Processed Personal Data (i.e. Personal Information that is used, held or disclosed by CARCRAM) is:
- adequate, relevant and not excessive;
- accurate and, where necessary, kept up to date;
- kept secure, and not longer than necessary;
- not transferred to countries outside the European Union without adequate protection; and
- treated in accordance with individuals’ legal rights.
Whilst CARCRAM strives to provide all individuals with appropriate access and control over their data, individuals covered by the GDPR are also able to:
- prescriptively restrict, limit or otherwise provide instructions to CARCRAM regarding how we can use their Personal Data. This includes being able to object to how and why their Personal Data is used (e.g. by the removal of their consent for particular functions);
- request the erasure (i.e. deletion) of their information; and
- request CARCRAM provides all Personal Data held about them in a portable format, meaning in a way that is structured, commonly used and machine-readable. Individuals who exercise this right to data portability are also able to direct CARCRAM to transmit this data to other entities who they intend to allow to process their Personal Data.
CARCRAM will allow and assist individuals that are EU Residents to exercise these rights, unless we have compelling and legitimate legal grounds not to (e.g. a legal obligation under Australian legislation, or if the Personal Data has been fully anonymised).
Dealing with unsolicited information
We take all reasonable steps to ensure that all unsolicited information is destroyed or de-identified immediately.
Anonymity when dealing with us
Only where it practicable to do so, we may allow you the option not to identify yourself when dealing with us.
Collecting sensitive information
CARCRAM does not collect sensitive information, unless it is specifically relevant and necessary for the purpose of our business activities and functions, and your consent is first obtained. All sensitive information that is collected is used in accordance with this privacy policy.
Government identifiers
We do not use government identifiers (e.g. tax file numbers or Medicare numbers) to identify individuals.
Transfer of ownership
As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganisation, dissolution or similar event, your Personal Information may be part of the transferred assets. You acknowledge and agree that any successor to or acquirer of our business (or its assets) will continue to have the right to use your Personal Information in accordance with the terms of this Privacy Policy.
Complaints and disputes
If you have reason to believe that we have not complied with our obligations relating to your personal information under this Privacy Policy or under the Privacy Act, please refer any compliant to queries to our Privacy Officer (details below).
We will ensure your compliant is handled by our Privacy Officer in an appropriate and reasonable manner. Were necessary we may consult with our related entities and partners in order to deal with your complaint. A written notice of our decision regarding your complaint will be provided to you. If you are not satisfied with the outcome, then you may contact the Office of the Australian Privacy Commissioner:
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Who should you contact for further information?
Please refer any queries or complaints about our Privacy Policy or privacy issues to our:
Privacy Officer6/177 Salmon Street
Port Melbourne, 3201 Andrew McPherson
Phone: 1300 964 728
Email: andrewm@carcram.com
Our Privacy Officer will consider your question or complaint and respond to you in a reasonable timeframe.