Privacy Policy

1. About this Policy

This Privacy Policy explains how MDMTT Enterprises Pty Ltd (we, us, our) collects, holds, uses and discloses personal information, in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the 13 Australian Privacy Principles (APPs) set out in Schedule 1 to that Act. It applies to personal information collected through [website URL] (the Website) and in the course of operating our business.

2. Kinds of personal information we collect and hold

Depending on how you interact with us, we may collect and hold the following kinds of personal information:

identity and contact information, such as your name, postal or email address, phone number and date of birth;
account information, such as your username, password and account preferences;
transaction and payment information, such as billing details, purchase history and (where applicable) payment card information
technical and usage information, such as your IP address, device and browser type, pages viewed, and interactions with the Website, collected through cookies and similar technologies
correspondence, such as enquiries, feedback and support requests.

3. How we collect personal information

We collect personal information directly from you where reasonable and practicable to do so, including when you:

browse or register an account on the Website;
make a purchase or enquiry, or subscribe to our newsletter or marketing communications;
contact us by phone, email, online form or social media; or
complete a survey, competition or promotion.

We may also collect personal information from third parties (for example, our service providers, payment processors, publicly available sources, or social media platforms) where you have consented to this or it is otherwise permitted by the APPs. If we receive unsolicited personal information that we would not otherwise have been permitted to collect, we will, where lawful and practicable, destroy or de-identify that information.

4. Purposes of collection, use and disclosure

We collect, hold, use and disclose personal information for purposes including to:

provide, operate and improve the Website and our products and services;
process transactions and payments;
communicate with you, including responding to enquiries and providing customer support;
send you marketing communications where you have consented or as otherwise permitted by law;
comply with our legal and regulatory obligations; and
manage and resolve complaints, disputes and legal claims.

We may disclose personal information to third parties for these purposes, including to our related bodies corporate, IT and cloud service providers, payment processors, professional advisers, and regulatory or law enforcement bodies where required or authorised by law. We do not sell personal information to third parties.

5. Direct marketing

We may use your personal information to send you direct marketing communications about our products and services, where you have consented, where you would reasonably expect us to do so, or as otherwise permitted under the Privacy Act and the Spam Act 2003 (Cth). Each marketing communication will include a simple means by which you can opt out, and we will process your opt-out request within a reasonable time.

6. Disclosure of personal information overseas

We may disclose personal information to overseas recipients, including cloud hosting and IT service providers. Before doing so, we take reasonable steps to ensure that any overseas recipient does not breach the APPs in relation to that information, including through contractual data protection obligations. By providing us with your personal information, you consent to this disclosure. If this is not practicable in a particular case, we will comply with the requirements of APP 8.2 or otherwise seek your express consent.

7. Government related identifiers

We do not adopt, use or disclose a government related identifier (such as a Medicare number, tax file number or driver licence number) as our own identifier for you, except where permitted under the Privacy Act (for example, where required by law).

8. Data quality

We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, up to date and complete. You can help us do this by keeping your account details current and notifying us of any changes.

9. Data security and retention

We take reasonable technical and organisational steps to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure, including [insert specific measures, e.g. encryption, access controls, staff training, secure hosting]. We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required by law, after which we take reasonable steps to destroy or de-identify it.

If we experience a data breach that is likely to result in serious harm to an individual whose personal information is involved, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme in Part IIIC of the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

10. Access and correction

You may request access to the personal information we hold about you, and request that we correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact us using the details in clause 14. We will respond within a reasonable period (ordinarily within 30 days). We may charge a reasonable fee for access (but not for making a request or for correction). We may refuse a request for access or correction in the circumstances permitted by the Privacy Act, in which case we will provide written reasons for the refusal and information about how you may complain.

11. Notifiable data breaches

If you become aware of, or suspect, a data breach involving personal information we hold about you, please contact us immediately using the details in clause 14.

12. How to make a complaint

If you believe we have breached the Privacy Act or the APPs, you may lodge a complaint with us using the contact details below. Please provide sufficient detail so we can investigate. We will acknowledge your complaint and aim to investigate and respond within a reasonable time (ordinarily 30 days).

If you are not satisfied with our response, or believe it is more appropriate to do so, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

13. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal obligations. The updated Policy will be posted on the Website with an updated ‘last updated’ date. We encourage you to review this Policy periodically.

14. Contact us

For privacy enquiries, access and correction requests, or complaints, please contact:

MDMTT Enterprises Pty Ltd – Andrew Lewis – Director – info@mdmtt.com.au