We are committed to protecting the privacy of all our users. The Privacy Act (1988)(Cth) (Privacy Act) and the Australian Privacy Principles (Privacy Principles) set out in Schedule 1 of the Privacy Act, govern the collection, storage, use, and disclosure of information by which individuals may be identified. Further, we comply with EU General Data Protection Regulation 2016/679 (GDPR).
WHAT INFORMATION DO WE COLLECT
‘Personal Information’ means information that can be used to personally identify you, such as your name and email address.
‘Usage Information’ means anonymous aggregate data that is automatically collected through your use of the Website. This includes information that identifies your device, your operating system, your IP address and dates and times that you access and use the Website.
HOW DO WE COLLECT YOUR PERSONAL INFORMATION
We will collect Personal Information directly from you when you:
- post a comment on the Website, we request your name and email address;
- sign up to our mailing list by entering your email address; or
- contact us via email or otherwise to raise a question or concern about the Website.
It is your choice to provide information to us. Wherever it is lawful and practicable, you have the option not to identify yourself when interacting with us. Please be aware that it may be necessary for us to collect your Personal Information to enable us to provide the Website to you. As such, if you do not wish to provide your Personal Information, we may not be able to provide the Website to you in a fully operational form.
We collect Usage Data through cookies, pixel tags, web beacons, log files and other tracking technologies (collectively Cookies). Cookies are small packets of data that are downloaded onto your device when you access a website or app. Cookies hold specific information that helps our Website ‘remember’ your actions and preferences over time. These are the types of Cookies that we may use to operate our Website:
Strictly Necessary Cookies – these Cookies are essential to making sure the Website works correctly, and record information that allows you to move around the Website and navigate its features.
Performance Cookies – these Cookies collect information about how you use the Website, such as how often you access the Website and if you encounter any errors.
Functionality Cookies – these Cookies allow our Website to remember the choices you make to provide a more personalised experience.
Targeting or Advertising Cookies – these Cookies deliver targeted advertising to you based on your interests and use of the Website.
Cookies can stay on your device temporarily (Session Cookies) or until you manually delete them (Persistent Cookies).
Data collected via Cookies does not identify you, but it does identify your device. Where such data can be cumulatively used to personally identify you, we will seek your consent to collect and process such information.
You can disable Cookies at any time in your browser settings. If you disable Cookies, we cannot guarantee that the Website will be fully functional.
HOW DO WE USE YOUR PERSONAL DATA
Legimate purposes that you agree that Crave It All may use your Personal Data for include but are not limited to the following:
- to provide you with access to the Website;
- to ensure technical functioning of the Website
- to confirm your identity;
- to respond to requests submitted by you;
- to prevent, detect and investigate potential illegal activities, security breaches and fraud; and
- to contact you via email to provide you with periodical promotional emails about new recipes or other information which we think you may find interesting, only where you have opted in to receiving such communication and until you withdraw such consents by clicking ‘unsubscribe’ on any direct marketing communications.
For the avoidance of doubt, we will only use your Personal Data for purposes that you would reasonably expect Crave It All to use your Personal Data for in connection with operating and providing the Website to you, or where we are required by law to collect your Personal Data. We will not sell, rent, or licence your email address or any of your Personal Data unless we have otherwise obtained your express consent to do so.
We recognise your right under the Spam Act 2003 (Cth) and the GDPR to opt out from direct marketing, and as such these consents can be modified at any time by clicking ‘unsubscribe’ on any direct marketing communications.
WHO DO WE DISCLOSE YOUR PERSONAL DATA TO
You agree and consent to Crave It All disclosing your Personal Data in the following circumstances:
- to other entities in Crave It All corporate group structure;
- service providers with whom Crave It All has entered into an agreement with to help Crave It All provide the Website, including marketing agencies, financial service providers and technical support; and
- certain third parties (IP rights holders, authorities, police, regulators) if Crave It All is required to do so by law.
You can withdraw your consent for us to share your Personal Data with third parties at any time by email firstname.lastname@example.org, but please note that withdrawal of such consents may affect your ability to access and use the Website.
WHAT ARE YOUR RIGHTS TO YOUR PERSONAL DATA
In accordance with the GDPR, we acknowledge the right of EU citizens to:
- have their data erased that is no longer being used for a legitimate purpose;
- request a copy of all Personal Data held about you by Crave It All in a readable format; and
- request restricted processing of your Personal Data whilst any complaints or concerns are being resolved.
To erase, request or restrict processing of your Personal Data, please email email@example.com with the subject ATT: PRIVACY OFFICER.
ACCESSING, REVIEWING AND CHANGING YOUR PERSONAL INFORMATION
Crave It All cannot modify your Personal Information. You can modify your own information by emailing us at firstname.lastname@example.org. You acknowledge that it is your responsibility to maintain the truth, accuracy, and completeness of your information and your failure to do so may inhibit our ability to provide the Website. You acknowledge and agree that you remain solely responsible for maintaining the truth, accuracy, and completeness of your information at all times, and we shall have no liability to you or any third party arising from your failure to do the same.
The Website may contain links to other third party websites or applications that are independent of Crave It All. We cannot be reasonably expected to be aware of nor held responsible for the privacy policies or practices of these other websites.
Crave It All protects your Personal Data through technical security measures i.e. firewalls, encryption that limit the risk of loss, disclosure, unauthorised access and modification. No security measures are, however, 100% secure so we cannot guarantee the security of your information or data at any time. To the extent permitted by law, we accept no liability for any breach of security, or direct hacking of our security measures, or any unintentional disclosure, loss or misuse of any information or data or for the actions of any third parties that may obtain any information or data.
Notwithstanding the above, we acknowledge our obligation to report any data breach that is likely to risk the rights and freedoms of natural persons to the Australian Information Commissioner and, where our data breach involves the information of EU citizens, report to the European Data Protection Supervisor. We will also inform you, where possible, if your data has been breached in the circumstance where it poses a risk of serious harm or your rights and freedoms.
We may, in the course of providing the Website to you, disclose Personal Data to overseas countries that are deemed by the EU Commission as having an ‘adequate’ level of Personal Data protection. Where we transfer data to a third party in a country where no adequacy decision has been made, we warrant that such third parties in those countries are bound under contract to meet the requirements of the Privacy Act, Privacy Principles and GDPR.