The types of personal information we collect and hold
The types of personal information we may collect and hold includes (but is not limited to) personal information about:
Personal information that we collect and may hold include:
You are not obliged to provide personal information to CJA. However in many cases, if you do not provide your personal information to us, we may not be able to supply the relevant product or service that you have requested from us.
If it is necessary to provide specific services to you, we may collect sensitive information about you. Under the Privacy Act, “sensitive information” includes but is not limited to information or an opinion about an individual’s racial or ethnic origin, religious belief, or criminal record and also includes health information about an individual. However, we will only collect sensitive information from you if you agree to provide it to us, you authorise us to obtain it from a third party or where the collection of the information is required or authorised by or under an Australian law or a Court/Tribunal order or otherwise where the collection is not prohibited under the Privacy Act. We will only use sensitive information in accordance with the Privacy Act and for the purpose for which it is provided.
How personal information is collected and held by us
We collect personal information in the following ways:
We may also collect information about you from third party suppliers and government database services.
We store personal information in computer storage facilities and paper-based files. We take steps to protect your personal information against loss, unauthorised access, use modification or disclosure. Some examples of the steps we take to protect your personal information include:
Collection of personal information through website activity
Information that may identify you as a user may be gathered during your access with our website.
Our website includes pages that use ‘cookies’. A cookie is a unique identification number that allows the server to identify and interact more effectively with your computer. The cookie assists us in identifying what our users find interesting on our website.
A cookie will be allocated each time you use our website. The cookie does not identify you as an individual in our data collection process, however it does identify your Internet Service Provider.
Adoption, use and disclosure of government related identifiers
CJA, or its related body corporates in the CJA Group, may collect some personal information that is a government related identifier.
Personal information from identity documents may be provided to the document issuer or official record holder via third party systems for the purpose of confirming your identity, for example, the Australian Government’s Document Verification Service (DVS). Where CJA does collect government related identifiers, they are maintained on a separate database for audit and compliance purposes.
CJA may use or disclose a government related identifier where:
The purposes for which we collect, use and disclose personal information
We collect, hold, use and disclose personal information for a variety of business purposes including:
We also collect, hold, use and disclose your personal information to:
If you do not wish to disclose your personal information for the purpose of direct marketing or you would like to opt-out of receiving direct marketing communications, you can do so by contacting the CJA Privacy Officer using the contact details set out below, or by following the instructions to unsubscribe which are contained in a communication that you receive from us.
Who do we disclose personal information to?
The CJA Group and Related Companies
The CJA Group includes our parent company Castlegate James Australasia Pty Ltd, Mi-Feed Pty Ltd and James & Son (NZ) Pty Ltd
Third Party Service Providers
We may disclose your personal information to third party service providers who assist us in providing the services you request, including public authorities and providers of information services.
We may also disclose your personal information to third parties who work with us in our business to promote, market or improve the services that we provide, including:
We may also combine your personal information with information available from other sources, including the entities mentioned above, to help us provide better services to you.
Where we do share information with third parties, we require that there are contracts in place that only allow use and disclosure of personal information to provide the service and that protect your personal information in accordance with the Privacy Act. Otherwise, we will disclose personal information to others if you’ve given us permission, or if the disclosure relates to the main purpose for which we collected the information and you would reasonably expect us to do so.
Disclosure of consumer credit information
As a credit reporting agency, we may share your credit information in accordance with industry consumer credit reporting standards including:
These standards ensure that your personal information in relation to your consumer credit is managed regarding:
Disclosure of personal information to overseas recipients
We do not presently disclose personal information to any organisations located overseas; however, we do disclose information in Australia, for the purposes described above, to some multinational organisations that are located both in Australia and overseas, including the United Kingdom, the United States and New Zealand.
European Union – General Data Protection Regulation (GDPR)
If you are a resident of the European Union for the purposes of the GDPR, then in addition to what is set out above, the following applies to you.
In providing services to you, CJA may make use of a number of automated processes using your Personal Information and your activity on our site as tracked by us, in order to provide more tailored and relevant services to you.
In addition to your rights set out above, you may update or rectify any of your Personal Information that we hold about you, in the manner described in the “How you can access your personal information” paragraph above.
How we handle requests to access your personal information
You have a right to request access to your personal information which we hold about you and to request its correction. You can make such a request by contacting the CJA Privacy Officer using the contact details set out in this policy.
We will respond to any such request for access as soon as reasonably practicable. Where access is to be given, we will provide you with a copy or details of your personal information in the manner requested by you where it is reasonable and practicable to do so.
We will not charge you a fee for making a request to access your personal information. However, we may charge you a reasonable fee for giving you access to your personal information.
In some cases, we may refuse to give you access to the information you have requested or only give you access to certain information. If we do this, we will provide you with a written statement setting out our reasons for refusal, except where it would be unreasonable to do so.
How we handle requests to correct your personal information
We will take such steps (if any) as are reasonable in the circumstances to make sure that the personal information we collect, use or disclose is accurate, complete, up to date and relevant.
If you believe the personal information we hold about you is inaccurate, irrelevant, out of date or incomplete, you can ask us to update or correct it. To do so, please contact us using the contact details listed below.
If we refuse your request to correct your personal information, we will let you know why. You also have the right to request that a statement be associated with your personal information that says you believe it is inaccurate, incomplete, irrelevant, misleading or out of date.
How to contact us or make a complaint
CJA Privacy Officer
PO Box 1261 Robinson VIC 3019
We will acknowledge and investigate any complaint about the way we manage personal information as soon as practicable. We will take reasonable steps to remedy any failure to comply with our privacy obligations. If you are unhappy with our handling of the complaint, you may contact the Australian Information Commissioner.
Last update: 30 August 2019