InStrand Pty Ltd (ACN 646 487 747) trading as Findable or InStrand of 1 Somerville St, Bendigo, VIC 3550 (“Findable”, “we”, “us” or “our”) and our operation of the Platform, comprising of our website located at https://findable.au/ (collectively, the “Platform”) is committed to respecting your privacy.
This privacy policy sets out how we collect, use, process, store, share and disclose your Personal Information on our Platform (“Privacy Policy”). You can view our terms and conditions (https:/findable.au/terms) and contact us at support@findable.au.
We are committed to protecting your privacy and respecting and upholding your rights under the Australian Privacy Principles (“APPs”) contained in the Privacy Act 1988 (Cth) and the General Data Protection Regulation (EU 2016/679) (the “GDPR”) (collectively, “Privacy Laws”). We are a data controller for the purposes of the GDPR. We ensure that we will take all necessary and reasonable steps to comply with the relevant Privacy Laws and to deal with inquiries or complaints from individuals about compliance with the relevant Privacy Laws.
By accessing and using our Platform, products and services, you freely and expressly consent to the collection, use, processing, storage and disclosure of Personal Information by us as set out in this Privacy Policy.
We will collect Personal Information on our Platform only by lawful and fair means and not in an unreasonably intrusive way. Generally, we will collect Personal Information directly from you, and only to the extent necessary to provide our services requested by you and to carry out our administrative functions or as required by a relevant Privacy Law.
We will not collect sensitive personal information (as defined under the relevant Privacy Laws) from you. We ask that you do not send us, or do not disclose, any sensitive personally identifiable information (such as information related to racial or ethnic origin, religion or other beliefs, health, criminal background or trade union membership) on or through the Platform or otherwise. If, contrary to this request, you do provide any sensitive personal information, in doing so you consent to us collecting and handling that information in accordance with this Privacy Policy.
We may also collect Personal Information from you when you enter a draw for the randomly generated opportunity to buy a product displayed on the Platform (“Draw”), fill in an application form, communicate with us, visit our Platform, provide us with feedback, complete online surveys or participate in competitions. We may collect Personal Information about you that you have provided to our business partners or from third parties and in respect of which you have given the third-party permission to share with us.
If you use a pseudonym when dealing with us or you do not provide identifiable information to us, we may not be able to provide you with any or all of our services as requested. If you wish to remain anonymous when you use our Platform, do not sign into it or provide any information that might identify you.
We require individuals to provide accurate, up to date and complete Personal Information at the time it is collected.
Personal information is any information relating to an identified or identifiable natural person (“Personal Information”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Stripe and Outseta are online payment systems that are used to process payments on the Platform. Personal Information will be collected from you for the purpose of processing such payments.
Under the GDPR, we must have a legal basis to process Personal Information collected from individuals residing in the European Union. We rely on several legal bases to process your Personal Information, including:
We use, process and disclose your Personal Information for the purposes for which the information is collected, or for a directly related purpose, including (but not limited to):
Where we:
we may use and process your Personal Information to send you information about products and services we believe are suited to you and your interests or we may invite you to attend special events.
At any time, you may opt out of receiving direct marketing communications from us. Unless you opt out, your consent to receive direct marketing communications from us and to the handling of your Personal Information as detailed above will continue. You can opt out by following the unsubscribe instructions included in the relevant marketing communication, or by contacting us in writing at support@findable.au.
We may disclose your Personal Information to:
If we no longer need your Personal Information for any of the purposes set out in this Privacy Policy, or as otherwise required by the relevant Privacy Laws, we will take such steps as are reasonable in the circumstances to destroy your Personal Information or to de-identify it.
We use cookies, web beacons and similar technologies (collectively “Cookies”) on our Platform. By accessing or using this Platform, you agree that we can store and access Cookies in accordance with this Privacy Policy.
Cookies are small files that can be stored on and accessed from a user’s device when the user accesses a Platform. They enable authorised web servers to recognise you across different Platforms, services, devices and browsing sessions.
We may use Cookies to enable users to access and use our Platform and services, including to:
The data collected through Cookies will not be kept for longer than is necessary to fulfil the purposes mentioned above.
We will handle any Personal Information collected by Cookies in the same way that we handle all other Personal Information.
You can delete and refuse to accept browser Cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of the Platform.
Unless you have adjusted your browser setting so that it will refuse Cookies, our system will issue Cookies when you direct your browser to our Platform.
When transmitting Personal Information from your computer to our Platform, you must keep in mind that the transmission of information over the internet is not always completely secure or error-free. Other than liability that cannot lawfully be excluded, we will not be liable in any way in relation to any breach of security or any unintended loss or disclosure of that information.
We may hold your Personal Information in either electronic or hard copy. We take reasonable steps to protect your Personal Information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we use a number of physical, administrative, personnel and technical measures to protect your Personal Information. For example, our protection includes, but it not limited to, our services and data being hosted in Google Workspaces, which is, amongst other, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, and ISO 9001 compliant, and all data sent to and from Findable is encrypted in transit using 256-bit encryption.
We are also constantly updating and innovating to enhance our protection mechanisms. Where we enhance or update our Platform, we will attempt to do so without interrupting our services to you. We will also ensure that we provide you with an update via an email where changes are made to our Platform.
However, we cannot guarantee the security of any Personal Information transmitted over the internet and therefore you disclose information and Personal Information to us at your own risk. We will not be liable for any unauthorised access, modification or disclosure, or misuse of your Personal Information.
We may disclose your Personal Information to third party recipients such as our payment processing providers Stripe or Outseta, and Retailers located in or outside of the European Economic Area and Australia in order to provide our services to you and enable the Retailer to deliver products to you. As at the date of this Privacy Policy, such third-party recipients (“Recipients”) are located in countries including the United Kingdom, United States of America, Australia and other countries whose laws may not be recognised by the EU Commission as providing an adequate level of protection to Personal Information.
When entering into a transaction with us you expressly and freely consent to your Personal Information being disclosed or transferred to such Recipients. We will take steps reasonably necessary to ensure your Personal Information is treated securely and in accordance with this Privacy Policy. We use reasonable endeavours to ensure that each Recipient receiving your Personal Information is bound by the relevant Privacy Laws (including the standard contractual clauses approved by the European Commission). The standard contractual clauses are available on the European Commission’s Platform at https://ec.europa.eu/info/law/law-topic/data-protection_en.
Under the GDPR, an individual residing in the European Union has enhanced privacy rights, including the right to:
Subject to some exceptions provided by the relevant Privacy Laws, you may request access to your Personal Information in our customer account database, or seek correction of it, by contacting us. See Section 11: Contact information. Should we decline you access to your Personal Information, we will provide a written explanation setting out our reasons for doing so.
We may charge a reasonable fee that is not excessive to cover the charges of retrieving your Personal Information from our customer account database. We will not charge you for making the request.
If you believe that we hold Personal Information about you that is not accurate, complete or up-to-date then you may request that your Personal Information be amended. We will respond to your request to correct your Personal Information within a reasonable timeframe and you will not be charged a fee for correcting your Personal Information.
If we no longer need your Personal Information for any of the purposes set out in this Privacy Policy, or as otherwise required by the relevant Privacy Laws, we will take such steps as are reasonable in the circumstances to destroy your Personal Information or to de-identify it.
The Platform may contain links to other third-party websites s, including social media networks. This Privacy Policy applies solely to information collected by us on our Platform.
If you require further information regarding our Privacy Policy or wish to make a privacy complaint, please contact us in writing at support@instrand.co.
We reserve the right to modify this Privacy Policy in whole or in part from time to time without notice. Non-material changes and clarifications will take immediate effect, and material changes will take effect 30 days after the posting of the amended Privacy Policy on the Platform.
We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personally identifiable information that cannot be resolved between us and the individual.
Dated: 13 January 2024