In this Privacy Policy, “we” and “us” refers to Health Equipment & Consumable Supplies Australia Pty Ltd ACN 632 755 670 (HECSA) and “you” refers to any individual about whom we collect personal information.
This Privacy Policy represents how we manage your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act). This Privacy Policy will set out how we collect, hold, use and disclose your personal information and demonstrates our commitment to protecting your privacy and the personal information in our care. We seek to safeguard the privacy of your personal information in accordance with the Australian Privacy Principles (APP) contained within the Privacy Act.
What does “personal information” mean?
Personal information is any information about you that identifies you or by which your identity may be reasonably determined.
What personal information do we collect?
HECSA may collect personal information and sensitive information about you. The kind of personal information we collect and hold is that in which you tell us when completing an application or otherwise when you specifically provide us with it. The types of information include:
- name;
- mailing or street address;
- email address;
- telephone number and other contact details;
- details of the goods we have provided to you or that you have enquired about, including any additional information necessary to deliver those goods and respond to your enquiries;
- any additional information relating to you that you provide to us directly through our website or indirectly through your use of our website or online presence or through other websites or accounts from which you permit us to collect information;
- information you provide to us through customer surveys; or
- any other personal information that may be required to facilitate our dealings with you or your dealings with us.
What does “sensitive information” mean?
Certain information which may be collected by HECSA will be regarded as sensitive information. Sensitive information includes information or an opinion about an individual’s race, religion, political or trade association, among others. The disclosure of sensitive information can only be made by HECSA with your direct consent, where it is required by law to be disclosed or if the information is reasonably necessary for us to provide our services.
How does HECSA collect your personal information?
We will always collect your personal information directly from you where possible. Where we are unable to obtain personal information directly from you we will obtain your consent before information is obtained from another party.
Collection of your personal information may occur in a number of ways including:
- forms;
- website interactions;
- credit reporting agencies;
- emails;
- telephone conversations; and
- in person.
We also collect cookies from your computer which enable us to tell when you use the website and also to help customise your website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
How does HECSA hold your personal information
We hold personal information:
- physically on our premises; and
- electronically:
- on internal servers; and
- where you utilise certain services from our website hecsa.com.au, with a third party data storage provider in United State of America (currently Amazon AWS Servers).
The purpose of collecting and using your personal information
Personal information is used only for the purpose for which it is submitted or for such other secondary purposes that are related to that purpose, unless we disclose other uses in this privacy policy or at the time of collection.
We collect your personal information for purposes including:
- supplying to you the goods in which you have requested;
- sending you statements and invoices and collecting payments from you;
- enabling access to website services;
- conducting feedback surveys;
- sending to you marketing communications.
Who does HECSA disclose your personal information to?
We may disclose your personal information to a person outside of HECSA:
- where necessary in connection with the purpose for which it was collected;
- if required by law;
- if you consent to the disclosure; or
- otherwise as permitted by the Privacy Act 1988 (Cth).
Does HECSA transfer any of your data overseas?
Your personal information will not be disclosed to recipients outside Australia unless you expressly request us to do so. If you request us to transfer your personal information to an overseas recipient, the overseas recipient will not be required to comply with the APPs and we will not be liable for any mishandling of your information in such circumstances.
Accessing your personal information
APP 12 permits you to obtain access to the personal information we hold about you in certain circumstances, and APP 13 allows you to correct inaccurate personal information subject to certain exceptions. If you would like to obtain such access, please contact HECSA by:
- phone on 1300 087 786;
- email on info@hecsa.com.au; or
- in writing at PO Box 894, Oxenford QLD 4210.
Direct marketing
HECSA may from time to time use your personal information, such as your address or contact details, to provide you with information about other goods that we offer.
If at any time you do not wish to receive any information about these goods or services, please feel free to contact us on 1300 087 786 or at info@hecsa.com.au and we will not send you any further material.
Changes to this privacy policy
This Privacy Policy may be amended by HECSA or revised at any time. The revised Privacy Policy will take effect when it is uploaded on our website.
Complaints about breaches of privacy
If at any time you believe that HECSA has wrongfully disclosed your personal information or has breached this privacy policy, then you may lodge a complaint with us by:
- emailing 1300 087 786;
- phoning info@hecsa.com.au; or
- posting to PO Box 894, Oxenford QLD 4210.
HECSA will, within 30 days, respond to you and attempt to resolve with you your issues as they pertain to your personal information.
If you are not satisfied with the response you receive from HECSA, you may contact the Australian Information Commissioner and Privacy Commissioner by:
- sending a letter to the Director of Privacy Case Management, Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001;
- using the online Privacy Complaint Form located at www.oaic.gov.au;
- emailing your complaint to enquiries@oaic.gov.au; or
- faxing your complaint to 02 9284 9666.