Application
This privacy policy applies to Dymocks Holdings Pty Ltd ACN 008 453 110 and each of its subsidiaries and related bodies corporate (as defined in the Corporations Act 2001 (Cth)) who are collectively referred to as “Dymocks Group” and “Group” in this policy.
Version Control
This Policy is version 1 and was updated on 1 July 2023.
Privacy
The Dymocks Group respects your right to privacy under the Privacy Act 1988 (Cth) and is required to comply with the Australian Privacy Principles in respect of the collection of personal information from individuals. Set out below is our policy regarding the collection and storage of your information.
Contacting us
If you have any questions about our policy, wish to access or change your personal information or have any complaint regarding treatment of your privacy by us, please contact us at privacy@dymocks.group
Group Entities & Application of this Policy
The Dymocks Group comprises several business divisions. Each of those divisions has their own privacy collection statements and privacy policies. For information on each division please visit the Group Website at www.dymocks.group and link through to the relevant division from there.
This policy does not override or affect the privacy policies of individual businesses. Instead, it sets out the general group approach to privacy which is generally adopted throughout the Group.
The information we collect
Each business division will collect different information based on the industry that it operates in. The sort of personal information we might collect from you includes your name, gender, age, address, email address, school, school grade, parent/guardian details, third party services login (e.g. Facebook, Google+, Microsoft or LinkedIn user names), telephone number, fax number, credit card information, purchase history with us and information about your areas of interest.
For current and prospective employees, we collect name, gender, age, address, email address, phone number, emergency contact details, information related to your right to work in Australia, taxation, bank and superannuation accounts and prior employment history.
Consequence of not providing information
You have no obligation to provide personal information which you do not wish to disclose. In some circumstances, however, if we do not have the required personal information we may be unable to provide you with access to our services or to employment.
How we use the information
The information that you provide to us is generally used to enable us to provide goods or services to you or to offer employment. The uses will include:
- Providing a good or service
- Processing payments, refunds or discounts
- Providing relevant email marketing offers either related to our goods or services or those of partner businesses that we believe are complementary to ours and of benefit to our customers
- Market research
The Dymocks Group may also use your personal information and aggregate it with information from other customers to better understand its customers, the effectiveness of its services or to provide you with better service such as by advising you of new products and services or information which may be of interest to you. You have the right to tell us that you do not want us to send information to you other than for the main purpose for which we have collected your personal information.
For current and prospective employees of a Dymocks Group entity, personal information is used to decide whether to offer employment and to manage the employment relationship. It can also be used to conduct various pre-employment checks.
Disclosure to third parties
The Dymocks Group does not generally disclose personal information to third parties. In some circumstances personal information may be disclosed to third parties who perform services on behalf of a Dymocks Group entity for the purpose of providing you with goods and services or, in the case of current and potential employees, to assist the Dymocks Group in the management of the employment relationship.
The Dymocks Group requires third parties who receive your personal information to comply with either Australian Privacy laws or laws which offer the same or better protection. The Dymocks Group does not sell or rent any personal information.
Information collected by one entity in the Dymocks Group may be disclosed to other entities in the Dymocks Group. This will only occur where a customer has agreed to accept marketing communications and where marketing information from our sibling entity may be of interest. This will most commonly happen in the case of marketing communications from retail service or product companies such as Dymocks Books, Milligram and Dymocks Tutoring.
Storage and Security of information
The personal information obtained by the Dymocks Group is stored electronically on servers either controlled by a Dymocks Group entity or by its contracted third parties who are also bound to comply with the Australian Privacy Principles or laws which offer the same or better protection for your privacy.
The Dymocks Group takes measures to ensure customer personal information is protected from unauthorised access, loss, misuse, disclosure or alteration. The group also takes measures to destroy or permanently de-identify personal information when it is no longer required. The types of measures taken vary with the type of information, and how it is collected and stored. The major measures adopted include:
- Use of 2-Factor Authentication to confirm access to information
- Access and admin level controls to restrict access to information
- Annual removal of data from non-current customers
- Annual penetration testing of key information systems
- Use of a third party payment provider to process payment and store payment details (i.e. so they are not stored on our systems).
Overseas storage
Most personal information held by the Dymocks Group is held on computer systems located within the Commonwealth of Australia. From time to time information may be stored on servers which are located overseas. When this occurs, the Dymocks Group ensures that the third party web storage provider will not use the information other than to assist us in providing services to you and that they are bound to comply with the Australian Privacy Principles or more stringent standards. The countries in which such servers are located are typically either Singapore, the United States of America or the European Union.
How you can access, delete or correct personal information
The Dymocks Group will take reasonable steps to ensure that the personal information it collects, uses or discloses is accurate, complete and up-to-date.
Customers may request access to the personal information the Dymocks Group holds about them. If information is incomplete or inaccurate, then the customer may ask us to amend it.
Customers may at any time request us to delete the personal information that a Group entity holds. If you ask us to delete any personal information that we hold about you, then this may affect our ability to provide you with goods or services, either in whole or in part.
How you can make a complaint
If you would like to complain about a breach of the Australian Privacy Principles, you may contact our Privacy Officer. We may ask you to put your complaint in writing and to provide relevant details. We may discuss your complaint with our personnel and our service providers and others as appropriate. You can contact the privacy officer by emailing privacy@dymocks.group or writing to Privacy Officer, Level 6, 428 George Street, Sydney NSW 2000.
We will respond to your complaint in a reasonable period of time (usually within 30 days).
If you disagree with our decision, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) (whose contact details are as set out HERE).
Links
This privacy policy applies solely to information collected by Dymocks and may differ from the policies from other sites that you may link to from this site. We recommend that you read the privacy policy of any site that you link to from this site.
SPAM
Spam is email or other communication that you have not asked for either directly or indirectly. We do not spam people. If we send a communication it will almost certainly be because you have provided us with your contact information and consented to marketing or related communications.
If you no longer wish to receive communications you can unsubscribe. Normally this can be done by clicking on the link at the bottom of an email. Where the communication is a text, you can reply to the text and confirm you wish to unsubscribe from text messaging.
Remarketing and cookies
We do not collect any personal information on visitors to our website. We do collect non-personal information that allows us to log information about visitors to our website for statistical purposes, such as:
- the number of unique sessions as identified by server address and top level domain (eg .com; .gov; .org etc);
- the number of page hits;
- the pages accessed or downloaded by session;
- the type of browser being used;
- the length of time spent on the site and on particular pages;
- the device being used (eg desktop or mobile); and
- the type of mobile device being used (eg iPhone 4).
In addition:
- we have implemented and use display advertising;
- we use remarketing with Google to advertise online;
- third party vendors, including Google, show our ads on sites across the internet;
- we and third party vendors including Google, use first party cookies (such as the Google Analytics cookie and third party cookies (such as the double click cookie) together to inform, optimise and serve ads based on someone’s past behaviour to our website; and
- Users can opt out by utilising Google’s Opt-Out Browser Add On and/or Ads Preferences Manager.
More Information
More information about privacy law and privacy principles is available from the Office of the Australian Information Commissioner. The Australian Information Commissioner may be contacted at www.oaic.gov.au or by emailing enquiries@oaic.gov.au.
