HEARTSTREET

Privacy Policy

HEARTSTREET PRIVACY POLICY

Version: 1.1

Effective date: 27/09/2024 @ 15:40 AEST

This Privacy Policy applies to personal information or data (Personal Information) collected by Heartstreet Pty Ltd and its related entities (HeartStreet, we, us, and our) that we collect and use about you when you use our website, mobile app or other online or offline products and services that we offer (HeartStreet Applications).

The purpose of this Privacy Policy is to explain how and why we collect, use, hold and disclose your Personal Information. Please read it carefully and if you do not agree with this Privacy Policy, please do not submit your Personal Information to us, however, do note that we may not be able to provide the products or services to you.

WHAT IS PERSONAL INFORMATION?

Personal Information is any information about, or relating to an individual who can be reasonably identified from individual or collective pieces of information.

You may choose to provide us with your Personal Information, including your full name, mobile number and email address, name of loved one and relationship to a loved one.

HOW AND WHY DO WE COLLECT PERSONAL INFORMATION?

Using the HeartStreet Applications:

If you choose to use any of our HeartStreet Applications you will be asked to provide Personal Information. You will be asked for your full name, mobile number, name of loved one, relationship to a loved one and email address. We collect this information so that you can use our HeartStreet Applications.

We will comply with our statutory obligations on an ongoing basis, and should the need arise, we will notify you of any changes to our legal obligations via email to the address that you have provided to us.

Newsletters and/or Marketing Communications:

If you choose to subscribe to our newsletters and marketing communications, we will collect your name and email address. We will use this information to send you newsletters and marketing communications that you have subscribed to which may be tailored to your needs based on the information you tell us. If you no longer wish to receive these communications, you can elect to unsubscribe via the newsletter or marketing communication itself or contact us directly to have your information removed from our distribution list.

Website Contact Us

If you contact us to obtain further information about our products and services, we will collect your first name, last name, email address and phone number, and any further information that you choose to provide via the open text box on our website. We will use these details to contact you to provide the information that you have requested.

We may collect further information specific to providing the products and services, such as your or your organisation’s physical address, and other details as required.

Prospective employment and internships:

If you apply for employment or an internship with HeartStreet we will collect your name, preferred contact information and information about your employment and education history, including educational qualifications, previous employers or experiences, and will request that you provide the contact information of consenting relevant referees.

We will require you to provide us with, or consent to us obtaining, a current Police Check, and you may be required to satisfy other pre-employment security and screening checks, including undertaking skills or aptitude testing to assess your suitability to work at HeartStreet.

The Personal Information that you provide about yourself, or third parties (i.e., referees) during the recruitment process, is used solely for the purposes of assessing your eligibility to work with us in relation to the specific employment or internship opportunity.

When we have completed the recruitment process we will delete or destroy any information collected by us from unsuccessful applicants. If you would like to be considered for further employment opportunities in future, you must provide us with your express consent to keep your information on file. Any information retained will be stored securely in accordance with this Privacy Policy.

Contractors:

If you provide contracting services for us, we will collect your full name, relevant company identifiers, and contact details including email, phone number and address of your business. This information is used in the usual course of business to manage our agreements, pay invoices, and to fulfil our statutory obligations.

Collection from third parties:

We may collect information from third parties whom you have authorised to provide your Personal Information to us. For example, if you are nominated as a referee for someone seeking employment or an internship with us, or an educational institution may provide us with some of your Personal Information for the purposes of us offering you a student internship. We may combine this information with the information we collect directly from you, or about you, for the purposes set forth in this Privacy Policy.

Unless you expressly consent to us retaining the Personal Information supplied to us by a third party for a secondary purpose that we have disclosed to you, we will delete or destroy any information collected by us when the purpose for which we have collected it no longer applies.

Other purposes:

We may collect and retain your Personal Information for legitimate business purposes, including to:

comply with a legal process or obligation;

enforce or comply with a contract or agreement with you or a third party (including any violations of them), this Privacy Policy or other applicable policies;

respond to claims of alleged violations of the rights of a third party;

respond to your requests for assistance with our products and services; and/or;

protect the rights, property or personal safety of HeartStreet, its agents and affiliates, its customers and/or the public. This includes exchanging information with other companies and organisations for fraud protection, and spam/malware prevention, and similar purposes.

OTHER CIRCUMSTANCES WHERE WE MAY DISCLOSE YOUR PERSONAL INFORMATION:

Other circumstances in which we may disclose or transfer your Personal Information are:

where you have provided your express consent; or

in the usual course of business, to our related HeartStreet companies to provide our products and services to you, and we transfer de-identified data to improve and develop our products, services and customer experience;

to selected third party service providers who perform services on our behalf, such as online payment services, provided that those third parties comply with our privacy and data security requirements; or

where we are required, authorised or permitted to do so by the laws in the applicable jurisdiction.

Under no circumstances will we disclose your information to third parties for the purposes of direct marketing.

Third Party Links and Features

The website contains links to third-party websites such as social media sites, and also contain third-party plug-ins (such as Twitter, YouTube, and LinkedIn). If you choose to engage with these sites or features, you may disclose your information to those third parties, their users and the public more generally depending on how their services function and your own personal preferences within those services. We are not responsible for the content or practices of those websites or services, and the collection, use, and disclosure of your information will be subject to the privacy policies of the third-party websites or services, and not this Privacy Policy.

HOW DO WE STORE AND HOLD PERSONAL INFORMATION?

We store, process and hold Personal Information collected digitally by us in Google Cloud computer systems and databases located at their servers in the USA.  

We have implemented and maintained appropriate technical and organisational security measures, policies and procedures designed to reduce the risk of accidental destruction, or loss, or unauthorised disclosure or access to such information. We monitor and regularly review our practices against our own policies and against industry best practices.

Whilst we take appropriate technical and organisational measures to safeguard your Personal Information, no transmission over the Internet can ever be guaranteed to be secure.

We will delete, destroy or de-identify Personal Information as required by law.

You have a right to contact us for more information about the safeguards we have put in place to ensure the adequate protection of your Personal Information when this is transferred as mentioned above.

CHANGES TO THIS POLICY:

HeartStreet reserves the right to amend and update this Privacy Policy from time to time to reflect changes to what types of Personal Information it collects and how it handles Personal Information in accordance with its provision of products and services and to remain compliant with applicable laws and regulations. Any changes to our Privacy Policy will be published on our website with an updated ‘Effective Date’. If we make a material change to this Privacy Policy, you will be notified in accordance with any applicable legal requirements. By continuing to use our products and services, you are confirming that you have read and understood the latest version of this Privacy Policy.

CONTACTING HEARTSTREET:

Your Right to Access, Correction and Deletion of Your Personal Information:

We take all reasonable steps to ensure that the Personal Information that we collect and hold about you remains relevant, accurate, up to date and secure. You are entitled to access the information that we hold about you and to contact us to request that we manage your information differently, for example, provide you with copies of your information, correct any errors, delete information, transfer information, restrict uses of Personal Information that we hold about you, in accordance with law. We may request you provide us with information necessary to confirm your identity before responding to your request.

If you request a copy of any of your Personal Information we will provide it to you in a structured, commonly used and machine-readable format. There is no charge for requesting access to your Personal Information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).

QUESTIONS, COMPLAINTS OR CONCERNS:

If you have any questions, complaints or concerns about this Privacy Policy, including:

how we have handled a privacy issue;

our compliance with this Privacy Policy or applicable privacy or data protection laws;

further information about how or when we disclose or transfer Personal Information; or

a request for access to, correction or deletion of your Personal Information;

You can contact our Privacy Officer by e-mailing us at support@heartstreet.com.

We will make reasonable efforts to investigate and resolve your questions, complaints or concerns quickly and in compliance with applicable privacy and data protection laws.

Where we are unable to satisfactorily resolve your questions, complaints or concerns, you are entitled to contact the appropriate privacy or data protection authority in your jurisdiction at any time.