1. THE PERSONAL INFORMATION THAT WE COLLECT
- The types of personal information that we collect and hold about you could include:
- your ID and contact information, such as your name, postal or email address, telephone numbers and date of birth
- your social media handles;
- billing information, such as your credit card number and bank account details;
- information about your communications and interactions with us, including about the products and services that you have purchased from us, orders you have placed on the RATIONALE website or any purchases you have made in one of our Flagship Clinics;
- information relevant to your skin care, including skin type, images of your face and skin, skin sensitivity, the colour of your skin, eyes and hair, lifestyle information (e.g. smoking and use of solariums) and family history; and
- other information that we consider is reasonably necessary to perform our business functions or activities.
Sometimes we also collect sensitive information about you in order to provide certain products and services. This information includes information about your ethnic heritage and health information such as information about your health conditions, DNA cheek swab tests and the results of such tests, skin treatments and medications. Unless we are otherwise authorised by law, we only collect sensitive information with your consent, such as when you are completing a treatment consent form in one of our Flagship Clinics.
2. HOW WE COLLECT YOUR PERSONAL INFORMATION
We collect personal information about you via a variety of ways, this includes when you fill out a form with us, when you visit or submit information through our website, when you purchase a product or service from us or one of our stockists, if you apply for a job with us, including any information that you may provide during the recruitment process and from publicly available sources (such as social media channels).
If you provide incomplete or inaccurate information or do not want to provide your personal information to us, we may not be able to provide you with the product or service that you want, or, personalise your experience with us.
3. WHY WE HANDLE YOUR PERSONAL INFORMATION
We collect, store, use and disclose personal information for purposes including to provide, review and improve our products and services, understand your preferences and needs, communicate with you, customise your experience with us (including on our website and social media channels), maintain and update our records and facilitate our business operations (including any sale or potential sale of our business) and if you have applied for a job with us, to consider your employment application and manage the recruitment process.
The types of third parties with which we share personal information include our agents, related companies, business partners, suppliers and third party service providers such as providers of website services, delivery, payment, data management, legal, accounting and insurance services.
Subject to first obtaining your consent, we also exchange sensitive information, in particular relating to DNA cheek swab tests, with our third party service provider SkinDNA as part of providing the DNArray Two-Phase Skin Consultation in our Flagship Clinics.
Some of the third parties we disclose personal information to may be located in Denmark and other countries.
4. QUALITY OF YOUR PERSONAL INFORMATION
We are committed to ensuring that your personal information is accurate, complete and up-to-date. If you believe that the information we have about you is not accurate, complete or up-to-date, please contact us at the details below and we will use all reasonable efforts to correct the information.
5. HOW WE KEEP YOUR INFORMATION SECURE
We take the protection of the information that you provide to us seriously and have implemented a range of measures designed to protect your personal information from loss, misuse and interference and from unauthorised access, modification or disclosure. Depending on the circumstances, those measures include electronic access controls, premises security and network firewalls.
We hold personal information electronically and in hard copy form, both at our own premises and with the assistance of our service providers.
6. VISITING OUR WEBSITE
When you visit RATIONALE’s website, we may collect information such as your IP address, the date and time of your visit, the number of pages that you viewed, navigation patterns, what country you visited from, what system you used to access the website, and, when entering our website from an external website, the address of that website through the use of 'cookies'. This information on its own does not identify an individual but it does provide RATIONALE with statistics that we can use to analyse and improve our website.
A 'cookie' is a packet of information that allows the server (the computer that houses the website) to identify and interact more effectively with your computer. When you use our website, we send you a temporary cookie that gives you a unique identification number. A different identification number is sent each time you use our website. Cookies do not identify individual users, although they do identify a user's browser type and your Internet Service Provider (ISP).
You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Please refer to your browser instructions or help screens to learn more about these functions. Our order entry system does require cookies during the order entry process; however, it does not use the information once the order is complete. At the end of your interaction with our website, you can have your computer ensure that the cookie is deleted. This means it no longer exists on your computer and can’t be used for further identification or access to your computer.
Online service providers
7. HOW WE MARKET OUR PRODUCT AND SERVICES TO YOU
You may be a subscriber to our newsletters and we may send you information on promotions, product updates and general RATIONALE news. If you decide you no longer wish to receive communication from us, you can opt-out of receiving them by following the instructions included in every newsletter or communication, or by contacting customer service at firstname.lastname@example.org or writing to us at the address below:
PO Box 188
Clifton Hill 3068
8. ADDITIONAL INFORMATION FOR EMPLOYEES AND JOB APPLICANTS
If you apply for a position with us, we may also collect the information necessary to manage and consider your application including your resume, employment history, qualifications, experience, screening checks (including references and police or other background checks) and interview notes.
We collect, use and disclose your personal information to assess your job application, conduct screening checks and consider and contact you regarding other positions. We may exchange your personal information with academic institutions, recruiters, screening check providers, professional and trade associations, law enforcement agencies, referees and your current and previous employers. Without your personal information we may not be able to progress considering you for positions with us.
This section applies to our current and former employees and contractors in addition to the job applicants section above.
We may collect information relating to your current or former employment or engagement including information about your training, disciplining, resignation, termination, terms and conditions, emergency contact details, performance, conduct, use of our IT resources, payroll matters, union or professional/trade association membership, recreation, leave and taxation, banking or superannuation affairs. We are required or authorised to collect your personal information under various laws including the Fair Work Act, Superannuation Guarantee (Administration) Act and Taxation Administration Act.
We collect, use and disclose your personal information for purposes relating to your employment or engagement with us including engagement, training, disciplining, payroll, superannuation, health and safety, administration, insurance and staff management purposes. We may exchange your personal information with your representatives (including unions) and our service providers including providers of payroll, banking, staff benefits, surveillance and training services. Without your personal information we may not be able to effectively manage your employment or engagement.
10. HOW CAN YOU ACCESS AND CORRECT YOUR PERSONAL INFORMATION?
At your request, we will provide you with access to your personal information that we hold, and the ability to update it, unless there is a legal basis not to, in which case we will let you know. Such requests can be made by contacting us at the details provided below. Please provide as much detail as you can about the particular information you are enquiring about, in order to help us locate it. We may need to verify your identity.
11. RESOLVING YOUR PRIVACY REQUESTS AND COMPLAINTS
Att: Digital Manager
PO Box 188
Clifton Hill 3068
03 9421 1535
12. MORE INFORMATION ABOUT PRIVACY
If you would like further information regarding privacy issues generally, visit the Office of the Australian Information Commissioner’s website at www.oaic.gov.au.