This privacy policy (Policy) sets out in accordance with the Privacy Act 1988 (Cth) the way in which NovaWorks Group Pty Ltd 11 614 310 673 and its associated entities (together NovaWorks, we, us, or our) may collect, store, use, manage and protect your Personal Information.

By:

• (a) using our services (Services);
• (b) accessing, requesting information on, enquiring about, using, receiving or providing feedback in relation to, NovaWorks’ operations or services (online, in writing, by telephone or in person); or
• (c) otherwise providing Personal Information to or consenting to the collection of Personal Information by NovaWorks, its officers, agents or employees, after this Policy has been brought to your attention, you acknowledge and consent to the use, collection, storage or disclosure of your Personal Information by us in accordance with this Policy and the Privacy Act.

If you do not agree to us handling your Personal Information in the manner set out in this Policy you must immediately cease to access our Services, and you should not provide us with any of your Personal Information.

1. What is Personal Information?

Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

• (a) whether the information or opinion is true or not; and
• (b) whether the information or opinion is recorded in a material form or not.

2. What kinds of Personal Information do we collect and hold?

The Personal Information we collect (and hold) about you may include your: image; location and activities; name; address and phone number; email address; demographic information; comments and feedback; messages; emails; voicemail and other correspondence; responses to surveys; interaction with websites, including our website; what computer configurations and software you use; your employment or education; your business history with us; your business or associated companies or entities; your preferences; your relationship with us; the frequency of your enquiries; your location; how and when you use our Services. We will only collect sensitive information about you with your consent (unless we are otherwise allowed or required by law to collect that information). If you provide us with Personal Information about another person please tell them about this policy so they can understand how their information will be handled.

3. How do we collect Personal Information?

We collect Personal Information:

• (a) directly from you (when we contact you, when you contact us, when you engage with us or when we engage with you);
• (b) when conducting our Services; and
• (c) from third parties such as contractors performing a service on our behalf, providers of data-collecting services that you use, and parties that you have authorised to provide us with information.

4. How do we hold and secure your Personal Information?

We store your Personal Information digitally. All digital material is password protected. Any digital transfer of Personal Information is secured using 256 AES encryption. NovaWorks uses data storage providers located inside Australia. However, on request, our clients may elect to instruct us to store data overseas if there is a specific requirement to do so (e.g. GDPR in Europe). Where appropriate, NovaWorks has agreements with its storage providers to keep all Personal Information they store secure, using reasonable and appropriate security methods. We conduct regular audits of our compliance with this Policy and the Act to ensure that our privacy framework is in line with industry best-practice.

Where possible, data will be de-sensitised and anonymised unless absolutely necessary.

5. Why do we collect, hold, use and disclose Personal Information?

NovaWorks may collect Personal Information for a number of reasons, including:

• (a) providing you or a third party with Services;
• (b) providing you with information about our Services;
• (c) providing third parties with information about you and your use of our Services;
• (d) developing or refining our Services;
• (e) internal business purposes;
• (f) providing you with marketing material;
• (g) contacting you in relation to our business activities;
• (h) better understanding our clients, customers and stakeholders;
• (i) tailoring our Services;
• (j) publishing testimonials you provide us; and
• (k) corporate governance, auditing and record keeping.

Our use of Personal Information may extend beyond these uses, but will be restricted to purposes that we consider to be related to our functions and activities.

6. What do we do with your Personal Information?

If we collect Personal Information from you, we may:

• (a) use that information for any of the purposes in clause ‎5 of this Policy;
• (b) store that information in accordance with this Policy;
• (c) pass that information amongst entities we work with;
• (d) pass that information to third parties who provide products or services to us (including our accountants, auditors, lawyers, IT contractors, and other service providers);
• (e) provide personalised services to the individual where related to delivering a service provided by NovaWorks;
• (f) provide that information to third parties as notified by us from time to time ; or
• (g) provide that information to third parties as required by law.

7. Do you use my information for Direct Marketing?

We may use your Personal Information to communicate directly with you to promote a product or service. We use direct marketing to provide you with information about products or services that we believe you may be interested in. If you receive direct marketing material from us, and do not wish to continue receiving it, please contact us by any of the methods set out in clause ‎14 below, asking to be removed from all future direct marketing programs. Once we have received your opt-out request, we will remove you from our direct marketing programs as soon as reasonably practicable.

8. What about Cookies, pixels and analytics?

When you access our website, we may receive information about you via a ‘cookie’, a ‘pixel’ or from analytics software.

These tools are pieces of information that our web server may send to your computer, or embed on a website, when you visit the website. These tools help us to recognise when you re-visit the website, and to optimize your experience. We generally don’t collect Personal Information through the use of these tools, though we may be able to access your IP address and information about what your computer technology is when using analytical software.

9. Do we ever send your information overseas?

NovaWorks may upload images and/or footage to its social media accounts from time to time. The social media accounts may be hosted on an overseas server. Where applicable, in the event that your information is sent overseas, NovaWorks will use its best endeavours to ensure that any overseas supplier will keep all Personal Information secure.

10. Can you access your Personal Information or request it be corrected?

• (a) You may request access to the Personal Information that we hold about you by contacting us by any of the methods as set out in clause ‎14.
• (b) Upon receiving an access request we may request further details from you to verify your identity. We reserve the right not to provide you with access to Personal Information if we cannot verify your identity to our reasonable satisfaction.
• (c) An administrative fee may be charged to cover our costs in providing you with access to your Personal Information. This fee will be explained to you before it has been incurred.
• (d) We will respond to your access request within a reasonable period of time by:
• (i) providing you with access to your Personal Information;
• (ii) rejecting your access request, and providing you reasons for this rejection.
• (e) Access requests may be denied where:
• (i) we believe your request is frivolous or vexatious;
• (ii) we are entitled to reject a request by law;
• (iii) we are unable to verify your identity; or
• (iv) you have not paid the administrative fee referred to in clause ‎10‎(c), above.
• (f) If you believe that the Personal Information that we hold is inaccurate or otherwise requires correction, you may send us a correction request by contacting us by any of the methods as set out in clause ‎14, below. We will review your Personal Information and respond to the request within a reasonable period of time.

11. What happens if you want to deal with us anonymously or using a pseudonym?

When contacting us, you can do so either anonymously or by using a pseudonym. If, however, you do so we may not be able to provide you with accurate or useful information, and you may not be able to access a full range of our operations and services. Further, we may not be able to investigate incidents or complaints you have made.

12. Does this policy ever change?

From time to time we may make changes to this Policy. When we do, we will highlight those changes in yellow highlight for a period of 14 days. Changes come into effect from the time when they are brought to your attention, or when you next log on to our website, whichever is earlier. Please make sure you review the Privacy Policy each time you visit our website to keep up to date on any changes.

13. What about the GDPR?

We are an Australian organisation providing products and services within Australia, the US and Canada. From time to time, we may inadvertently capture or collect Personal Information that passes through the European Union. This might occur, for example, if a person in the European Union accesses our website and we collect analytical data about them, if a person in the European Union signs up for a newsletter, or if you give us information about your activities the European Union. If this occurs, we will treat the Personal Information received in accordance with this policy. By providing us with such Information, you consent to its collection and treatment in accordance with this Policy.

14. What happens if you have a question or complaint about how we have handled your Personal Information?

If you have a question or complaint, you can raise it with us by:

Emailing: privacy@novaworks.com.au
Calling us on 1300 965 035; or
Sending a letter to: PO BOX 561, Mitcham Shopping Centre, SA 5062, AUSTRALIA.

We take all complaints seriously and will respond to you within a reasonable period of time, unless we consider your complaint to be frivolous or vexatious or if we are unable to verify your identity. If you aren’t satisfied with the way we have handled your complaint, you can make a complaint to the Office of the Australian Information Commissioner at http://oaic.gov.au.