PRIVACY POLICY – Update June 2020

Your Privacy Is Important To Us

Protecting the trust of customers and any personal information you provide to us is very important to Retail Apparel Group Proprietary Limited (ACN 110 176 077) (“RAG”). RAG is committed to protecting your privacy in all your dealings with us. RAG is bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) and any other relevant privacy legislation.

Consent

By submitting your personal information to us, you agree to the transfer, storage and processing of your personal information in accordance with this Privacy Policy (“Policy”).

This Policy

This Policy outlines how your personal information is treated and forms part of our terms and conditions. This policy explains:

  • what information we collect
  • how we collect your information
  • how we use your information
  • how and with whom we share your information
  • how long we keep your information and how it is stored
  • how we secure your personal information
  • our approach to sensitive personal information
  • the rights you may have in relation to your personal information
  • how we communicate changes to this Policy

About us

This Site is operated by Retail Apparel Group Proprietary Limited (ACN 110 176 077) (“RAG”). For the purposes of applicable data protection laws, RAG is the controller of the personal information collected.

The types of personal information we collect

The personal information we collect may include:

  • your name, contact details, billing and delivery details (if applicable)
  • details, such as gender and date of birth, as supplied by you
  • details from your CV and your employment history, if you apply for a job with us
  • other information supplied by you – including, but not limited to photos or videos, in response to direct questions asked, or when you engage with us through any social media channels

How do we collect information from you?

  1. Information we collect when you visit the RAG website (“Site”)

We will collect personal information that you provide to us when you:

  • fill in forms on our Site,
  • subscribe to our mailing list

We will also collect certain information automatically when you visit our Site, in particular:

  • when you access our Site, we use “cookies” to make it easier for you to use our Site. These cookies record data about the pages you browse and the activities you carried out during your visit. Further details about our use of  cookies here is set out in our Cookie Policy here
  • we record details of the resources that you access to visit our site (for example, URL addresses, traffic data etc.)
  • we record information about the type of device you have used to visit our Site, your device settings and the cause of any system errors. Your device manufacturer or operating system provider will have further details on what information your device makes available
  1. Information we collect when you contact us

We will collect personal information about you when you contact us by telephone, email, or via social media, or when your supply feedback.

  1. Information we collect if you apply for a job with us

You may be able to apply for a job with us through our Site, in-store or through third party websites such as LinkedIn or recruitment companies.

How we use your information

We will use your information in the following ways –

  1. For the performance of a contract between you and us:
  • to provide you with an account on our Site, if you choose to sign up for one
  • to protect and defend our legal rights and interests
  1. Where we have a legitimate interest in using your personal information:
  • to administer and monitor our Site, including to ensure that content is presented in the most effective manner for you and for your device and to allow you to participate in interactive features when you choose to
  • to analyse any feedback that you provide on our services and to improve our services
  • to administer competitions that you have entered
  • to review and assess any job application that you submit to us
  1. If you have consented to receive marketing information from us, we may use your information in the following ways:
  • if you have consented to us doing so, we will share your information internally within RAG in order to send you tailored offers or other information we believe will be of interest
  • if you provide your mobile telephone number and if you have consented for us to do so, we may contact you with marketing messages which have been tailored to match your preferences

You have the option to unsubscribe from our e-mails through a link at the bottom of every email we send to you.

You have the option to unsubscribe from our SMS messages by sending the word ‘STOP’ to the number specified in the SMS message or clicking on the link provided in the SMS message

If you do not supply the personal information we request from you, we may not be able to complete your transaction, deliver your purchases, provide you with the information you have requested, accept your entry into any promotion or competition, or consider your job application.

How and with whom we share your information

  • We share your information with our core service providers and third party platforms as required for our business to function. Whilst you are a member of our mailing list we may share your information with trusted non-core service providers, such as marketing partners we have carefully selected to deliver incentives to participate in offers, polls, surveys, analysis or research, all of which assist us in enhancing our services. They are not permitted to use your information after you unsubscribe.
  • We also use services offered by Google, Facebook, Instagram and other similar social media platforms to better tailor our marketing communications and for targeted advertising. As part of this process, some personal information, such as your email address, is provided to the relevant third party, however for security purposes this data is “hashed” prior to being shared. Hashing is a process of identity masking or “pseudonymisation” which means we do not disclose your email but are able to link your social media presence and our website. Your personal information may be transmitted to countries outside of Australia and the European Economic Area. If you would like more information about how your personal information may be transmitted, please contact Ragonline@rag.net.au
  • We receive insights from Facebook about the effectiveness of our advertising campaigns which you experience on our website and social channels, which helps to better target our advertising.

Every external company we work with has a contract with us which clearly sets out our expectations and requirements in handling personal information and obligates them to meet the appropriate privacy legislation requirements.

How long we keep your information

We retain the information you provide for the following periods:

  • for as long as you subscribe to receive marketing information
  • in the case of any contact you may have with our Customer Care team for as long as is necessary to provide support-related reports and trend analysis
  • for as long as RAG is otherwise required to retain it by law

How we store your information

Your information may be processed by our employees or by the employees of our service providers or third parties.

We will keep the data which we collect from you on a secure server. Any information relating to credit card details is handled by a PCI DSS compliant third party and encrypted using secure server technology. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access and require our service providers to do the same.

Where we have given you a password (or where you have chosen one) to access certain parts of our Site, you are responsible for keeping this password confidential. We ask that you do not share a password with anyone.

How we secure your personal information

RAG stores and holds Information electronically and/or in hard copy. We will take reasonable steps to store and hold your personal information in a secure and restricted manner and to protect your personal information from misuse, loss and unauthorised access, modification or disclosure.

Access to your personal information is limited to those individuals who require such access in order to perform their duties and responsibilities. Any personal information held by a third party storage provider is done so under strict contractual obligations of confidentiality and non-disclosure.

RAG has the necessary technical and organisational security measures in place, as are appropriate, and these security measures ensure a level of security appropriate to the risk that may arise in the processing of your personal information.

Sensitive personal information from our customers

We do not seek to collect sensitive personal information (i.e. information relating to race or ethnic origin, political opinions, religious or other beliefs, trade union membership, physical or mental health, sexual orientation or criminal records). We ask that you do not provide such information to us.

Sensitive personal information from our employees and prospective job applicants

The special personal information relating to our employees or prospective job applicants will be safeguarded and any processing of this information will be regulated to ensure the protection thereof.  RAG undertakes to keep confidential all employees and prospective job applicants special personal information and limit disclosure to only those RAG employees and third party providers with a legitimate need to know this information or where they are required to access and process this information due to operational requirements.

Rights you may have

RAG will take reasonable steps to keep your personal information up-to-date, complete and accurate and may, from time to time, ask you to update your details.

You may have certain rights in relation to personal information that we hold about you. These include the right to request access to your personal information, to request that it is erased, that its processing is restricted, or that any inaccurate personal information is rectified. You may also have the right to object to the processing of your personal information (i.e. withdrawing your consent, which you can do at any time), or in some circumstances to obtain a copy of the personal information in a machine readable format (we may ask for proof of identification before supplying you with the personal information). If we deny access to your personal information, we will tell you why. You also have the right to complain about the use of your personal information to the relevant Data Protection Authority.

Please contact our Privacy Manager at privacyinfo@rag.net.au if you would like to make a request or if you have any privacy-related queries or complaints.

Changes to this Policy

We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy, and if the changes are significant, we may provide you with additional notice such as adding a statement to the homepage of the Site or sending you an email with the update.

Please check this Policy regularly to stay informed about our information practices and the ways you can help protect your privacy.

Contact Us

If you have any questions about the Policy and practices of this Site you can contact us at Ragonline@rag.net.au