We (us or our) are committed to managing personal information lawfully, fairly and transparently. Where the Privacy Act 1988 (Cth) applies to us, we will handle personal information in accordance with that Act and the Australian Privacy Principles (APPs). We will also comply with any other privacy, data protection, direct marketing or sector-specific requirements that apply to our activities.
This Privacy Policy describes the kinds of personal information we collect and hold, how we collect and hold that information, the purposes for which we collect, hold, use and disclose it, how an individual may access or correct personal information, how privacy complaints may be made and handled, and whether personal information is likely to be disclosed to overseas recipients.
Your use of the website does not, by itself, amount to consent to every handling practice described in this Policy. Where consent is required by law, we will seek consent separately. This Policy should be read with any collection notice, terms of use or service terms provided at the relevant time.
The personal information we collect depends on how you interact with us. It may include:
We may also automatically collect technical and usage information, including:
We will not adopt a government-related identifier as our own identifier, or use or disclose a government-related identifier, except where permitted by law. Examples include Medicare numbers, tax file numbers and driver licence numbers.
We may collect personal information when you:
We may collect information directly from you, automatically through cookies, analytics, server logs and security systems, or from third parties where it is unreasonable or impracticable to collect it directly from you, or where collection from a third party is otherwise permitted by law.
At or before collection, or as soon as practicable afterwards, we will take reasonable steps to notify you of the matters required by applicable law. A collection notice displayed on a form or at another collection point may provide more specific information and should be read with this Privacy Policy.
If we receive personal information that we did not solicit, we will determine within a reasonable period whether we could have collected it under applicable law. If we could not have collected it and it is not contained in a Commonwealth record, we will destroy or de-identify it as soon as practicable where lawful and reasonable to do so.
Where practical, you may interact with us anonymously or using a pseudonym. We may require identification where it is impracticable to deal with you anonymously, where identification is required or authorised by law, or where it is needed to provide products, services, support or other functionality.
We may collect, hold, use and disclose personal information to:
We may disclose personal information where reasonably necessary for the purposes described in this Policy, including to:
We will not use or disclose personal information for a secondary purpose unless the use or disclosure is permitted by law, including where consent has been obtained or an applicable exception applies. We do not sell personal information unless that practice is expressly disclosed and lawful.
We may use third-party service providers located in Australia and overseas. These may include hosting, cloud software, email, analytics, security and payment providers.
Personal information may therefore be stored, accessed or processed outside Australia. Our main providers include WP Engine (website hosting), Google (Analytics, Search Console, reCAPTCHA, YouTube and Fonts), SMTP2GO (email delivery) and Wordfence (security). Overseas recipients are likely to be located in the United States, New Zealand and the European Union.
Before disclosing personal information to an overseas recipient, we will take such steps as are reasonable in the circumstances to require the recipient to handle the information consistently with the APPs, unless an exception under the Privacy Act applies. Where applicable, we may remain accountable under the Privacy Act for acts or practices of the overseas recipient.
Our website may use cookies and similar technologies to operate the website, improve functionality and security, remember preferences, maintain sessions, perform analytics and measure how the website is used.
You can control cookies through browser settings, although disabling some cookies may affect functionality. Where consent or privacy preference controls are implemented, you may be able to manage non-essential cookies and similar technologies.
We use third-party analytics and measurement services, including Google Analytics and Google Search Console (through Google Site Kit). We do not currently use advertising pixels. These providers may collect information about website activity and use cookies or similar technologies under their own privacy policies. Where required, relevant consent or preference controls will be provided.
Our website may include third-party videos, images, articles, maps, social media feeds, forms, booking engines, payment gateways or applications. Embedded content may behave as if you visited the third-party website directly. The provider may collect information, use cookies, add tracking and monitor interactions, including where you are logged in to that provider. Review the provider’s privacy policy.
Information submitted through forms and other interactions may be processed by automated systems or service providers for spam detection, malware protection, fraud prevention, abuse prevention, security monitoring and website protection. Our forms use Google reCAPTCHA, which is subject to the Google Privacy Policy and Terms of Service.
We will take reasonable steps to make sure that personal information we collect is accurate, up to date and complete, and that personal information we use or disclose is accurate, up to date, complete and relevant, having regard to the purpose of the use or disclosure.
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Measures may include secure hosting, access controls, authentication, encryption where appropriate, backups, monitoring, patching, malware protection and staff or contractor controls.
No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we will respond to identified risks and incidents under applicable obligations.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, business and transaction records, legal obligations, disputes and security.
Retention periods vary by information type, website configuration, operational need and legal requirement. When information is no longer required, we will take reasonable steps to destroy or de-identify it unless retention is required or authorised by law.
You may request access to personal information we hold about you and correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading. If the Privacy Act applies, we will respond within the periods and in the manner required by APP 12 and APP 13. You may also request deletion of your personal information, subject to applicable law.
Access, correction, export and deletion requests are subject to applicable law. We may refuse or limit a request where a lawful ground permits us to do so, and may retain information for legal, accounting, administrative, dispute-resolution or security purposes. We may require reasonable proof of identity. If we refuse access or correction, we will provide written notice and reasons where required by law, together with available complaint mechanisms.
We may use or disclose personal information for direct marketing only where permitted by applicable law. Commercial electronic messages will be sent in accordance with the Spam Act 2003 (Cth), including applicable consent, sender-identification and unsubscribe requirements.
You may request that we stop sending direct marketing communications by using the unsubscribe facility in the message, updating your preferences or contacting us. We will action an opt-out request within the period required by law. We may continue to send service, account, transaction, safety or legal notices that are not direct marketing.
If we have reasonable grounds to suspect that an eligible data breach may have occurred, we will carry out the assessment required by applicable law. If we have reasonable grounds to believe that an eligible data breach has occurred, we will prepare any required statement and notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme, subject to any lawful exception.
If you believe we have not handled your personal information appropriately, contact us using the details below. Complaints should be made in writing where possible and include enough information for investigation.
We will acknowledge the complaint, investigate it fairly and provide a written response within a reasonable period. We aim to provide a substantive response within 30 days where reasonably practicable. If additional time is required, we will advise you of the reason and the expected response date.
If you are not satisfied with our response and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner: https://www.oaic.gov.au/ . Other regulators or external dispute-resolution bodies may apply depending on the circumstances.
We may update this Privacy Policy to reflect changes to our practices, website, services or legal obligations. The updated version will be published on our website and take effect from the published date shown above. Review this Policy periodically.
BioResources Pty Ltd
Trading as: BioResources
ABN: 12 078 989 081
Privacy Officer or Privacy Contact
Address: D’Aguilar QLD 4514
Phone: 07 2115 6831
Enquiries: Contact page
Website: bioresources.com.au