Old Bridge X-Press IGA

Riverelle Pty Ltd ABN 84 134 542 368 and related companies trading under IGA banner IGA OLD BRIDGE is committed to the protection of personal privacy within the scope of applicable law. This Privacy Policy covers our treatment of personal information that we collect, hold, use and disclose.

You should be aware that the handling of personal information by third parties will be subject to those third parties’ own privacy policies, and participation in a loyalty program or other promotional offers may be subject to additional terms and conditions. You should familiarise yourself with those policies and terms and conditions before providing personal information or agreeing to participate in a loyalty program or other offers.

We may update this Privacy Policy from time to time. The most current version will be posted in store and is also available by contacting us at the contact details below.

Types of personal information collected

The types of personal information that we collect and hold will vary depending on your dealings with us. This information may include any or all of the following:

• name, address(es), telephone number(s) and other contact details;
• electronic address(es);
• transaction details relating to your use or purchase of our products, services or benefits;
• if you are a member of a loyalty program in which we participate:
  • your membership details (e.g. member number) for that loyalty program; and
  • details relating to your use or acquisition of products, services or benefits from organisations that operate, administer or provide products and/or services in connection with that loyalty program;
• payment information (such as credit card or bank details);
• any other personal information which you provide to us.

We will not collect sensitive information from you or any third party.

From time to time, you may provide us, and we may collect from you, personal information of a third party (for example, for delivery purposes). Where you provide the personal information of a third party, it is your responsibility to ensure that those persons are aware of this Privacy Policy, understand it and agree to accept it.

You do not have to provide us with any personal information. However, if you do not do so, we may not be able to provide you with products, services or benefits you have requested.

How we collect personal information

Generally, we collect personal information directly from you, such as:

• when you submit information through our website;
• in person or on a form that you provide to us;
• in the course of us providing you with a requested product, service or benefit;
• when you have other dealings with us.

We may collect personal information about you indirectly, for example through:

• transactions that you enter into in store;
• providers who support transactions that you make in store, including credit card providers and point of sale
  systems providers;
• organisations that operate, administer or provide products and/or services in connection with any loyalty
  program in which you and we participate;
• our related bodies corporate;
• our business partners;
• third parties who supply services to us, e.g. point-of-sale terminal vendors who report transaction data to us.

Why we collect, hold, use and disclose personal information

We will use and disclose the personal information we collect for the purpose disclosed at the time of collection, or otherwise as set out in this Privacy Policy. We will not use or disclose your personal information for any other purpose without first seeking your consent, or where authorised or required by law.

We may collect, hold, use and disclose personal information for the following purposes:

• to establish and maintain your relationship with us;
• to provide the products, services or benefits you have requested from us;
• if you are a member of a loyalty program in which we participate, to enable:
  • you to participate in the program, and enjoy program benefits;
  • us to better understand and gain insights into store and campaign performance, shopper trends and
    to plan future developments, member offers and campaigns; and
  • organisations that operate or administer that loyalty program to perform their functions in relation to
    that program, including to undertake analysis on retailer performance and trends, and to provide
    aggregated, anonymous statistics on these matters to other program participants;
• to answer any inquiry you make;
• to otherwise enable us to perform our business activities and functions.

We may disclose your personal information to organisations that participate in, operate or administer any loyalty program in which you and we participate. We may also disclose your personal information to other third parties who work with us in our business to provide, promote or improve the products or services you have requested or are interested in, such as:

• couriers and delivery contractors;
• consultants and professional advisers; and

Direct marketing

We may also use and disclose your personal information to send direct marketing to you, including electronic direct marketing, from:

• us;
• our related bodies corporate and Metcash Trading Limited;
• the operator or administrator of a loyalty program in which you and we participate; and
• hird parties who provide services to us, our related bodies corporate, Metcash Trading Limited or the operator or administrator of a loyalty program in which you and we participate.

The direct marketing may relate to:

• your membership of, and benefits associated with, loyalty programs in which you and we participate;
• our products and services;
• the products and services of other parties; and
• new developments we believe may be of interest to you.

You may opt-out of receiving this direct marketing through the unsubscribe function that will be made available to you with each direct marketing communication. You should be aware that if you opt out, you may not be able to receive benefits you would otherwise receive e.g. if you opt out of loyalty program emails, you may not be able to receive all the benefits of participating in that loyalty program.

How we store and protect personal information

We store personal information in a combination of computer storage facilities, paper-based files and other records. In so doing, we take reasonable steps to protect your personal information from misuse, interference and loss, and unauthorised access, modification or disclosure.

Additionally, we take reasonable steps to destroy or permanently de-identify personal information when we no longer need it.

Do we send personal information overseas?

If you and we are a member of the IGA Rewards program, your personal information may be disclosed to or accessed by overseas recipients as described in the IGA Rewards privacy policy (igarewards.com.au/privacy) for purposes connected with that program. We are also likely to disclose some of your personal information, for the purposes described above, to recipients in Australia

How you can request to access or correct your personal information

We will take reasonable steps to make sure that the personal information we collect, hold, use or disclose is accurate, complete and up to date. If your personal details change, such as your address or phone number, or you realise details we hold about you are incorrect:

• if you are registered on our website or with a loyalty program in which we participate, you can update certain of that personal information by logging into your account or contacting the operator of that website or loyalty program, e.g. please refer to the IGA Rewards privacy policy (igarewards.com.au/privacy) for details of how to request access or correct information held by the operator or administrator of the IGA Rewards program; or
• you can contact us to let us know using the details provided under the heading “How to contact us or make a complaint” below.

At your request, we will provide you with a copy of any personal information which we hold about you, unless an exception under the Privacy Act 1988 applies. We may charge a reasonable fee for retrieving this information, in which case we will inform you of the fee and obtain your agreement to that fee before providing the information.

We will promptly acknowledge and investigate any complaint about the way we manage personal information.

Digital Technologies

We and third parties may use digital technologies such as cookies, web server logs and web beacons in connection with the use of websites and other online services. Some of these technologies may operate without collecting or using any personal information. Please note this privacy policy applies to our collection, use, disclosure and storage of personal information only.

Our website may use cookies to track user traffic patterns and to better serve you when you revisit the website. A cookie is a small data file that a website may write to your hard drive when you visit it. A cookie file can contain information, such as a user ID which the website uses to track the pages you have visited. You can refuse all cookies by turning them off in your browser. However, full functionality for our websites requires the use of cookies.

Information is also generated whenever a page is accessed on our website that records information such as the time, date and specific page. We collect such information for statistical and maintenance purposes that enables us to continually evaluate our website performance.

How to contact us or make a complaint

If you have any questions about this Privacy Policy, if you wish to update information we hold about you or if you wish to make a complaint about our collection, use or disclosure of your personal information under this Privacy Policy, please contact:

Leesa Dawson-Davies
Shop 10/4 Old Coast Road
Halls Head, WA 6210
Ph. 08 9586 9233

If you wish to make a complaint regarding a third party’s handling of personal information, you should contact that third party at the details set out in their privacy policy, e.g. please refer to the IGA Rewards privacy policy (igarewards.com.au/privacy) for details of how to make a complaint to the operator or administrator of the IGA Rewards program.

We will take reasonable steps to remedy any issues resulting from our failure to comply with our privacy obligations. If our response to your complaint does not address your concerns to your satisfaction, you may have the right to make a complaint to the Office of the Australian Information Commissioner, whose website is located at www.oaic.gov.au.

_{Last updated 25/05/2018}