- Policy Statement
- Application of the National Privacy Principles
- What is personal information?
- What is sensitive information?
- What is Health Information?
- Employee Records Exemption
Policy Statement
Red Room Entertainment Pty Ltd (Red Room) and its related companies are organisations that are bound by law to comply with the National Privacy Principles contained in the federal The Privacy Act 1988 ("the Act").
Red Room takes all reasonable steps to protect user privacy in the way we collect, use and disclose the personal information of any persons who provide us with such information in the course of carrying out our functions as a retailer and in accordance with the National Privacy Principles.
Red Room has appointed a Privacy Officer who has ongoing accountability for the compliance of Red Room with this Privacy Policy, our procedures and with the Act. The Privacy Officer is also responsible for ensuring this policy is appropriately amended to take account of any future amendments to the Act. The Privacy Officer can be contacted by:
| Phone: | 1300 855 331 |
| Email: | privacy@redroomdvd.com |
| Post: | The Privacy Officer Red Room DVD PO Box 1724 Darlinghurst NSW 2010 |
We offer this statement to inform our users of how we gather and utilise personal information. Red Room reserves the right to alter or add to this Privacy Policy from time to time.
topApplication of the National Privacy Principles
topCollection of personal information
Red Room collects personal information that is necessary for one or more of our activities or functions as a Retailer and in providing a range of customer services to our customers. The collection of such information is only done by fair and lawful means in a way that is not unreasonably obtrusive.
Specifically, Red Room gathers personal information about our users in three different ways:
- Membership application / purchasing products or services – When you make a Red Room membership application and/or when you purchase products or services as a member, Red Room requires you to provide certain details so that we can establish an account and provide you with the product or service. This includes details such as your name, contact information, membership number, password and credit details. Red Room requires this information to help us process and manage your account;
- Non-members purchasing products or services – When non-members purchase products or services, Red Room requires you to swipe your credit card which will provide certain details so that we can provide you with the product or service. This includes details such as your credit card name, number and other credit details. Red Room requires this information to help us process and manage your purchasing products or services;
- You supply it in response to a request from us - Red Room collects personal information from users when voluntarily submitted by a user.
Use and disclosure of personal information
Red Room may use collected personal information to market to a customer, products and services of benefit to our customers, unless individuals or customers have expressed to us that they do not want such marketing offers or materials made available to them. In these circumstances the personal information of such individuals will be used for the sole purpose of providing the service for which the individual provided the information.
Red Room will in each direct marketing communication with an individual make individuals aware that they can express a wish not to receive any further communications. Such a wish may be expressed at any time, even if the individual has previously consented to the receipt of such material. Red Room reserves the right to keep a record of such requests for the sole purpose of ensuring we are able to comply with any such request.
All direct marketing communications by Red Room will contain Red Room's contact details.
On occasion, Red Room in providing services to our customers, makes available the service in conjunction with other organisations. Any personal information collected in these circumstances will only be disclosed to any third party organisation with the express consent of the individual. Any other disclosure of personal information will only be where required or authorised by or under law.
Red Room and its related companies may use personal information collected online to develop and improve the products, benefits and services we offer to our members or website users. Red Room may also use email addresses or other personal information to contact users who directly communicate with Red Room. For example, Red Room may contact users to notify them that they have won a contest or to provide a requested email newsletter.
Red Room may also use its customer database, including information provided by you through this website, to distribute information about other Red Room services and other organisations' services to you. Red Room, or its member stores, periodically sends new release information, coupon offers and other information to members of Red Room.
The personal information collected from you at this site is or may also be used:
- to notify you about other or new services or promotions from time to time;
- to provide customer support;
- to provide you with the products, services or information you have requested;
- to maintain your account.
Aspects of these functions may be outsourced to third parties, who are only authorised by Red Room to use this information for these purposes. Red Room may also disclose personal information to law enforcement agencies, government agencies, courts or external advisors where permitted or required by law.
Red Room's policy is to provide you with the opportunity to limit the use and/or disclosure of your personal information. You may do this when you register or at any time when you receive email communications from us, or at any other time by written notice to Red Room. If at any time you no longer wish to receive email or postal communications from Red Room or from third parties, you can contact Red Room customer service at any time and make an 'opt out' request.
topData quality
Red Room will take all necessary steps to ensure that any personal data we collect, use or disclose is up to date and accurate. Customers can update their contact details at any time by contacting the Privacy Officer.
Where Red Room holds personal information about an individual and that individual is able to demonstrate that the information is inaccurate, incomplete or not up to date, Red Room's will take steps to correct, complete or update the personal information.
If there is a disagreement about the accurateness, up to date ness or completeness of the personal information and Red Room has been asked to associate the in-dispute information with a statement by the individual that acknowledges their disagreement, Red Room will do so upon request.
A request for correction must be made by email to the Privacy Officer and any personal information will only be changed after the individual has positively identified himself or herself. The correction form must be lodged with the Privacy Officer.
Red Room reserves the right to hold all documents lodged or arising out of or in connection with any request for correction to personal information for the purpose of obtaining legal advice or for demonstrating compliance with the Act, the National Privacy Principles and this Policy.
If Red Room refuses to correct personal information upon a request to do so, we will provide reasons for the refusal.
topData security
Red Room takes all necessary steps to protect the personal information we hold from any misuse, unauthorised access, modification or disclosure. Personal information is held in both our computerised databases and in hard-copy files.
Red Room databases are secured by passwords, as is our customer database.
Red Room information technology employees ensure all systems are protected from unauthorised access and all systems have virus protection. Only employees who require access have access to these databases. Where only limited access is necessary then only limited access is provided.
Personal information held in hard copy is limited only to those individuals who need access to such information to perform their duties.
All Red Room employees, who have access to personal information, receive training in Red Room's Privacy Policy and procedures and the National Privacy Principles and will collect, use, hold, store and disclose any personal information in accordance with the National Privacy Principles and this Policy.
Failure to abide by this policy of any employee may result in counselling, disciplinary action, and where a serious breach occurs may include the possible termination of their employment.
Red Room’s website is at www.redroomdvd.com. Each time you visit our website, anonymous navigation information is collected by our servers. This information includes:
- your server's IP address;
- the date and time of your visit;
- the address of the previous site you visited;
- the website you leave our site to visit;
- the type of browser and operating system you are using;
- the address of the pages you accessed.
This information provides Red Room with statistics about how the website is used and navigated, including the number of hits, the frequency of visits and the duration of visits to each web page on the site. It does not personally identify individual users unless the user has previously elected to identify themselves by submitting personal information.
Other than as described above, Red Room will not make an attempt to identify users or their browsing activities. However, in the unlikely event of an investigation, a law enforcement agency or other government agency may exercise its legal authority to inspect our Internet Service Provider's logs.
topOpenness
This Privacy Policy will be made available to anyone who requests a copy and is readily available on our website www.redroomdvd.com. Further upon request Red Room will make available to any person or organisation the sort of personal information we hold and the purpose of collecting, holding, using and disclosing such information.
The Privacy Officer has ongoing accountability for the compliance of Red Room with this Privacy, our procedures and with the Act. The Privacy Officer is also responsible for ensuring this policy is appropriately amended to take account of any future amendments to the Act. Should you wish for
topAccess to personal information
Where Red Room holds personal information about individuals those individuals will be able to access that personal information upon request unless the request is frivolous or vexatious or would have an unreasonable impact on the privacy of others or access is otherwise not required by the Act. Requests must be made to the Privacy Officer in writing by email or post.
topIdentifiers
Red Room identifies customers by a customer number, this includes customers who are also natural persons, in addition we do not identify any individual by any Commonwealth government identifier such as Medicare or Tax File numbers.
topAnonymity
If lawful and practical, individuals will have the option of transacting anonymously with Red Room.
topTransborder data flows
Red Room does not transfer any information about any individual to any foreign country.
topSensitive information
Red Room does not collect sensitive information about an individual unless they have consented or it is required or authorised by law or the collection is necessary for the establishment, exercise or defence of a legal or equitable claim or the information relates solely to our customers or to individuals who have regular contact with us in connection with our activities and at or before the time of collecting the information the organisation undertakes to the individual whom the information concerns that the organisation will not disclose the information without the individual's consent.
topWhat is personal information?
Personal information is information or an opinion about an individual whose identity is apparent or can reasonably be ascertained. An individual is a natural person and therefore our policy does not extend to information about non-natural persons such as a business or a company, unless that information also constitutes personal information.
Information is still regarded as personal information, even if it not true or correct and whether or not it is recorded in a material form or not.
topWhat is sensitive information?
Personal information is sometimes not only personal but also personal and sensitive information. Sensitive information is information or an opinion about an individual's
- racial or ethnic origin; or
- political opinions; or
- customer of a political association; or
- religious beliefs or affiliations; or
- philosophical beliefs; or
- customer of a professional or trade association; or
- customer of a trade union; or
- sexual preferences or practices; or
- criminal record;
- that is also personal information; or
- health information about an individual.
What is Health Information?
Health information is information or an opinion about:
- the health or a disability (at any time) of an individual; or
- an individual's expressed wishes about the future provision of health services to him or her; or
- a health service provided, or to be provided, to an individual; that is also personal information; or
Health information is also other personal information collected to provide, or in providing, a health service; or other personal information about an individual collected in connection with the donation, or intended donation, by the individual of his or her body parts, organs or body substances.
topEmployee Records Exemption
An employee record, in relation to an employee, means a record of personal information relating to the employment of the employee. Examples of personal information relating to the employment of the employee are health information about the employee and personal information about all or any of the following:
- the engagement, training, disciplining or resignation of the employee;
- the termination of the employment of the employee;
- the terms and conditions of employment of the employee;
- the employee's personal and emergency contact details;
- the employee's performance or conduct;
- the employee's hours of employment;
- the employee's salary or wages;
- the employee's customer of a professional or trade association;
- the employee's trade union customer;
- the employee's recreation, long service, sick, personal, maternity, paternity or other leave;
- the employee's taxation, banking or superannuation affairs.
Acts done or practices engaged in by Red Room where Red Room is or was an employer of an individual are exempt from the application the Act and this policy, if the act or practice is directly related to:
- a current or former employment relationship between Red Room and the individual; and
- an employee record held by the Red Room and relating to the individual.
This exemption does not apply to prospective employees, contractors, subcontractors or temporary staff who are employees of a recruitment agency of Red Room.