Privacy Policy

This privacy policy describes how Grainassist comply with their obligations under the  Privacy Act 1988. We are bound by the National Privacy Principles ( NPP’s ) in the Privacy Act , which regulate how organisations may collect,use, disclose and store personal information and how individuals may access and correct personal information held about them.

This policy offers an easy to understand summary of how we collect, use, disclose and store your personal information and how you can contact us if you want to access or correct personal information we hold about you.

 

Collection

It is our usual practice to collect personal information directly from the individual.Sometimes we collect personal information from a third party or a publicly available source, but only if the individual has consented to such collection or would reasonably expect us to collect their personal information in this way, or if it is necessary for a specific purpose such as the investigation of a privacy complaint. In limited circumstances we may receive personal information about third parties from individuals who contact us and supply us with the personal information of others in the documents they provide to us. In these circumstances we will attempt to ensure that the consent of those third parties is obtained if we think we may need to use or disclose that information.

 

Use and disclosure

We only use personal information for the purposes for which it was given to us, or for purposes which are directly related to one of our functions or activities, and we do not give it to other government agencies, organisations or anyone else unless one of the following applies:

• the individual has consented,
• the individual would reasonably expect, or has been told, that information of that kind is usuallypassed to those individuals, bodies or agencies; and
• it is required or authorised by law.

 

Data quality

We take steps to ensure that the personal information we collect is accurate, up to date and complete.These steps include maintaining and updating personal information when we are advised by individuals that their personal information has changed, and at other times as necessary.

 

Data security

We take steps to protect the personal information we hold against loss, unauthorised access, use, modification or disclosure and against other misuse. These steps include password protection for electronic files, securing paper files in locked cabinets and physical access restrictions.When no longer required, personal information is destroyed in a secure manner or deleted.

 

Access and correction

If an individual requests access to the personal information we hold about them, or requests that we change that personal information, we will allow access or make the changes unless we consider that there is a sound reason under the Privacy Act or other relevant law to withhold the information.