Privacy Policy ABOUT THIS POLICY Discovery Trust t/as Discovery Noosa ACN 140304650 (“we”, “us” or “our”) is committed to respecting your privacy and upholding your rights under the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) and similar privacy laws in the jurisdictions in which we operate (collectively “Privacy Laws”). This Privacy Policy is intended to inform you of our practices regarding the collection, use and disclosure of any information we collect from or about you, whether through the Discovery Noosa website (“Website”) or by any other method. By visiting www.discoverynoosa.com.au and/or registering to become a customer/client, you expressly consent to the collection, use and disclosure of your Personal Information in accordance with this Privacy Policy, which forms part of the Terms & Conditions of use of our Website. We ensure that we will take all necessary and reasonable steps to comply with the relevant Privacy Laws and to deal with inquiries or complaints about our compliance with the relevant Privacy Laws. By accessing and using our Website and services, you freely and expressly consent to the collection, use, processing, storage, and disclosure of Personal Information by us as set out in this Privacy Policy. WHAT INFORMATION DO WE COLLECT Personal Information We will only collect from you information that is necessary and relevant to our relationship with you, including to enable us to provide you with the best possible service and customer experience. Where your personal information is collected, it will be done so directly, with your permission, whether in person, by telephone, internet or post. If you choose not to provide your personal information to us, it may restrict our ability to provide you with the service you require. The personal information may include (but not limited to) When do we collect your information? •Your full name •Billing address •Delivery address •Email address •Telephone number •Payment details •Your device ID, device type, geo-location information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log in details •Details of the products and services you have purchased or enquired about through the Website, including any additional information necessary to deliver those products and services and to respond to your enquiries •Any additional information relating to you that you provide to us directly through our website or indirectly through your use of our website or online presence or through other websites or accounts from which you permit us to collect information •We may also collect Personal Information about you, which you submit voluntarily by posting a comment on our social media pages. We advise you to limit the Personal Information that you publish on social media or other 3rd party environments since we cannot control any third-party collection or use of any such information. •purchase goods from us •contact us for information or a quote •complete a survey •enter a promotion or competition •subscribe to our mailing list •attend an event •apply for a job How do we get your consent? When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to us collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, i.e marketing purposes, we will either ask you directly for your expressed consent or provide you with an opportunity to say no. WHY WE COLLECT INFORMATION & HOW WE USE IT We collect your Personal Information to facilitate your use of our Website, including your purchase of products. We use your Personal Information in a number of ways for this primary purpose, including (but not limited to) providing you with access to our Website, contacting you with details of new products, our sales, processing any purchases you make and administering our dealings with you. We also collect your personal and non-personal information in order to:- improve Discovery Noosa by developing processes, products and services to meet your needs better. This might include de-personalising your Personal Information (to create anonymous information) and aggregating it along with your non-personal information for the purpose of statistical analysis. We reserve the right to use and disclose such aggregated information as we see fit, including for marketing, advertising or research purposes. provide Personal Information including your full name, telephone number, postal and email address details, payment details and product preferences to the supplier of any product displayed on our Website to process the required payment and enable them to provide and deliver products to you. administer, protect, improve or optimise our Website, products and services (including performing data analytics); creating industry reports from de-identified data. We may also use your personal and non-personal information for any other purpose you have consented to or any use which is required or authorised by a relevant Privacy Law. We reserve the right to use your Personal Information to investigate any suspected breach of our Terms and Conditions or if we suspect you are or have been engaged in any unlawful activity; •Where we: have your express consent (which you may withdraw at any time have a legal basis; or are otherwise permitted by relevant Privacy Laws, •We may use and process your Personal Information to send you information about products and services we believe are suited to you and your interests, or we may invite you to attend special events. At any time, you may opt out of receiving direct marketing communications from us. Unless you opt out, your consent to receive direct marketing communications from us and to the handling of your Personal Information as detailed above will continue. HOW TO UNSUBSCRIBE Should you wish to opt-out from receiving our direct marketing communications. You can opt out by following the unsubscribe instructions included in the relevant marketing communication or by contacting us in writing. You can contact us directly at hello@discoverynoosa.com.au. You may still receive administrative communications from us related to purchases you make, currently in progress. SHOPIFY Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall. PAYMENT If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, please refer to Shopify’s Terms of Service (https://www.shopify.com/legal/terms) and/or Privacy Statement (https://www.shopify.com/legal/privacy). LINKS When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements. SECURITY To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. THIRD PARTIES Discovery Noosa may at its discretion use other third parties to provide essential services on our site or for our business processes. We may share your details as necessary for the third party to provide that service. These third parties are prohibited from using your personally identifiable information for any other purpose. Discovery Noosa does not share any information with third parties for any unknown or unrelated uses. AGE OF CONSENT By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence, and you have given us your consent to allow any of your minor dependents to use this site. DISCLOSURE We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service. CHANGES TO THE PRIVACY POLICY Discovery Noosa may make changes to this Privacy Policy from time to time. We will publish those changes on this site. It is your responsibility to ensure that you have checked the Privacy Policy. Your continued use of our services (including online services), requesting our assistance or the provision of further personal information to us (directly or via an authorised person) after this Privacy Policy has been revised, constitutes your acceptance of the revised Privacy Policy. If our store is acquired or merged with another company, your information may be transferred to the new owners so they can continue to sell products to you. If you have an enquiry regarding this Privacy Policy or your personal information, please contact our Privacy Officer.