Privacy Policy

Published:

August 28, 2024

This Policy sets out how and why Yellow Canary Holdings Pty Ltd and its related bodies corporate (Yellow Canary, we, us, our) handle personal information under the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). It also sets out how you can contact us in relation to our handling of your personal information.

We may modify or amend this Privacy Policy from time to time. We will publish any updated version of this Privacy Policy on our website.

What is personal information?

‘Personal information’ has the meaning given to it in the Privacy Act, but generally means any information about a person who is identified, or who is reasonably identifiable.

When does this policy apply?

The Policy applies in relation to personal information we collect in the course of our business. We may collect personal information from you when:

you sign up for, access, or use our services, including any platforms, apps, products, and services owned or operated by us;
you contact us or otherwise provide us with your personal information;
you ask to be part of any mailing list we may send out; and
when you visit our website at yellowcanary.com.au; portal.yellowcanary.com.au;and getsupersimple.com.au

What personal information do we collect and why?

The types of personal information we collect from you or about you, and how we use and disclose that information, will depend on your relationship with us. The Schedule to this Policy sets out details about the:

types of personal information we collect;
reason(s) for which we collect, use, hold and disclose that personal information; and
ways in which we may collect that personal information; and,

depending on your relationship with us.

The rest of this Policy contains more general information about how we handle personal information in the course of our business.

How do we collect personal information?

We aim to collect personal information only directly from you, unless it is unreasonable or impracticable for us to do so. There are some specific cases in which we may collect personal information about you from third parties. These are set out in the Schedule.

How do we use your personal information?

We collect, hold, use and disclose personal information from you or about you for the specific purposes set out in the Schedule, and otherwise as permitted by law.

Will we use your personal information for direct marketing?

As set out in the Schedule, we may use and disclose your personal information to send you marketing material about us, our products and services and those of our partners which we believe you may be interested in. You can opt out of this at any time by contacting us below or following the opt out link in our marketing material.

How do we share your personal information when providing services?

We may share your personal information with our affiliates and with other third parties who help us conduct our business. This may include sharing your personal information with:

our employees, contractors, affiliates and related companies in order to carry out the delivery of services to you;
our suppliers and services providers, such as HubSpot and Zendesk, so that they can provide us with the services we need, such as payment collection, marketing, identity verification and customer services;
in respect of the personnel of our customers, to that customer, their representatives, or their related bodies corporate in connection with the provision of our services to that customer;
with third parties, including law enforcement and government agencies or officials where permitted or required by law;
companies that we plan to merge with or be acquired by or who may invest in us; and
other third parties with your consent or direction to do so.

Do we share your information overseas?

As noted above, we may disclose your information to third party service providers who help us conduct our business, including third parties that are located outside Australia, such as North America. Additionally, in respect of personnel or representatives of our customers, if a customer (or that customer’s corporate group) is based overseas, we may disclose your personal information to that relevant country. Given these disclosures occur and change from time to time, it is not practicable to list all such countries here.

Our websites and cookies

When you access our websites, we may place cookies (small data files that are used to identify a particular browser) on your device. The types of information collected by these cookies, and the reasons we use them, are set out in the Schedule.

Most browsers give you the ability to control cookies. You may decline to accept our cookies, and in some cases your browser may be configured to block some or all cookies, however, doing so may limit the functionality of our website and services.

Sometimes our websites contain links to other websites. When you access a website other than our websites, we are not responsible for the privacy practices of that site. We recommend that you review the privacy policies of each website you visit.

How we hold and protect your personal information

We take reasonable steps to hold and protect your personal information from misuse, loss, and unauthorised access, use, modification, and disclosure, including by using third-party suppliers who store data on secure data centres. This includes through physical, procedural and technical measures, including restricting access to your personal information to those individuals who need it to perform their job. However, you should be aware that no security measure is ever perfect or impenetrable and we cannot guarantee the security of your personal information.

Accessing your personal information

You can request access your personal information that we hold about you by contacting our Privacy Officer, whose details are set out below. If we refuse to give you access, we will provide you with a written notice stating our reasons for refusing access.

We may seek to recover our reasonable costs incurred for providing you with access. If so, we will get your approval in advance.

Correcting your personal information

It is important that we hold up-to-date, accurate and complete information about you. We use reasonable attempts to ensure that this is the case, however, we encourage you to reach out to our Privacy Officer, whose details are set out below, if you believe any of the personal information we hold about you is incorrect or out of date. You may ask us to correct your personal information that we hold.

In most cases, we will comply with any request you make. However, if we ever decide not to update that personal information, we will provide you with a written notice explaining our decision.

Resolving your concerns

If you have any questions, concerns or complaints about this Policy or how we handle your personal information, please contact our Privacy Officer at info@yellowcanary.com.au.

We aim to provide an initial response within 48 hours and to resolve your query or complaint within 10 business days.

You may also lodge a complaint with the Office of the Australian Information Commissioner by phoning 1300 363 992 or by email at enquiries@oaic.gov.au.

This Privacy Policy was last updated in March 2023

Relationship To Us	Types of personal information	Reason for collection, Use, Storage and Disclosure (As applicable)	Method of collection
If you contact us
	Contact information, such as your name, address, phone number and email	To contact you in relation to our services To provide customer support and troubleshoot problems For transactional or information purposes, including to collect fees and resolve disputes To deliver marketing, service update notices, and promotional offers based on your communication preferences	From you
	Information you provide to us when you contact us		From you
	Information that is publicly or commercially available		From publicly or commercially available sources
	Your responses to surveys, registration forms, and feedback forms	To learn about your level of satisfaction, your expectations, and how we can meet them	From you
If you access our website	General data and meta data regarding your use and access to our website, including your IP address and device identifiers; your operating system; mobile network information; location; the pages you access and for how long; and standard web log data such as traffic to and from our website.	To customise, measure, and improve our Apps and services, including through data analytics To give you a better experience To target advertising that we think you may be interested in To help protect your account and test for malicious software or activity	‘Cookies’ and other web-based files on your device
If you are a customer, or a representative of our customer	Information about your transactions and activities through our website or use of our services	To confirm your identity To assess whether to provide you with our services To provide you with our services To collect fees, resolve disputes, and to enforce our contract(s) with you To comply with our legal obligations including under anti-money laundering and counter terrorism laws	From you or individuals you work with
	Your name, contact details, and position		From you or individuals you work with
	Your name, contact details and billing information including payment details such as banking, or debit/credit card details.	To process the collection of payments, fees or any other payments under our contract(s) with you	From the Stripe gateway or any other reputable financial service provider, as determined by Yellow Canary from time to time, that facilitates payment processing
Personnel of our customers	Where our customers send us information about you, as their employee, our customers are obliged to have deleted your name, address and other identifying details within that information, before providing it to us. As such this information should not be personal information, however, we do receive anonymised details about your salary, date of birth, job description, leave, location of work and payroll information.	To provide our services to our customers	From your employer
If you are one of our suppliers, or a representative of our supplier	Information about your goods and services and activities with us	To evaluate your goods or services To acquire goods or services from you To collect fees, resolve disputes, and to enforce our contract(s) with you	From you, or individuals you work with
	Your name, contact details and position		From you, or individuals you work with
If you are a prospective employee of Yellow Canary	Your name, contact details, date of birth, employment history, intended role within Yellow Canary and other information provided to us as part of your application. This may include sensitive information, with your consent, which may include information about your criminal record, health (such as information about any medical conditions and/or allergies that you have), racial or ethnic origin.	To consider you for a position for which you have applied For purposes related to your prospective recruitment, including conducting background checks and verifying details you have provided to us	From you or your recruiter or referee, or from third party searches such as background checks

‍