The Currency Shop Pty Ltd (ACN 163 569 462) (referred to as ‘The Currency Shop’, ‘we’, ‘our’, ‘us’) recognises the importance of ensuring the confidentiality and security of your personal information.
The Currency Shop is bound by the Australian Privacy Principles (‘APPs’) and the Privacy Act 1988 (‘Privacy Act’). This Policy outlines The Currency Shop’s practices, procedures and systems to manage and protect your personal information in accordance with the Privacy Act and the APPs.
All third parties (including customers, suppliers, sub-contractors, or agents) that have access to or use personal information collected and held by The Currency Shop must abide by this Policy.
Copies of this Policy are available free of charge by contacting the Privacy Officer or can be downloaded from our website: www.exiap.com.
In this Policy:
- ‘Disclosing’ information means providing information to persons outside The Currency Shop;
- ‘Personal information’ means information or an opinion relating to an individual, which can be used to identify that individual;
- ‘Privacy Officer’ means the contact person within The Currency Shop for questions or complaints regarding The Currency Shop’s handling of personal information;
- ‘Sensitive information’ is personal information that includes information relating to a person’s racial or ethnic origin, political opinions, religion, trade union or other professional or trade association membership, sexual preferences and criminal record, and also includes health information; and
- ‘Use’ of information means use of information within The Currency Shop.
2. What kind of personal information do we collect and hold?
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We may collect and hold a range of information about you to provide you with our services, including:
- full name;
- address and other contact information;
- date of birth;
- nationality; and
- currency trading preferences.
3. How we collect personal information
We generally collect personal information directly from you. For example, personal information will be collected when you sign up to receive email rate alerts, visit our website, call us or send us correspondence.
The Currency Shop will not collect sensitive information about you without your consent unless an exemption under the APPs applies and consent is not required. These exceptions include if the collection is required or authorised by law or necessary to take appropriate action in relation to suspected unlawful activity or serious misconduct.
If you don’t provide us with the personal information we request, we may not be able to provide you with the benefit of our foreign exchange rate comparison services, or meet your needs appropriately.
The Currency Shop does not give you the option of dealing with us anonymously, or under a pseudonym. This is because it is impractical for The Currency Shop to deal with individuals who are not identified.
We collect Device Information using the following technologies:
– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
– “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information.”
4. Unsolicited personal information
The Currency Shop may receive unsolicited personal information about you. We destroy all unsolicited personal information we receive, unless it is relevant to The Currency Shop’s purposes for collecting personal information.
5. About whom do we collect personal information?
The personal information we may collect and hold includes (but is not limited to) personal information about the following individuals:
- potential customers;
- visitors to our website;
- service providers or suppliers; and
- other third parties with whom we come into contact.
6. Why does The Currency Shop collect personal information?
We may use and disclose the information we collect about you so that we may:
- provide you with foreign exchange rate comparison services;
- let you know about other products or services we offer, send you information about special offers or invite you to events;
- protect our business and other customers from fraudulent or unlawful activity;
- advertising to you including retargeting / remarketing
- conduct our business and perform other management and administration tasks;
- consider any concerns or complaints you may have and manage any legal actions involving The Currency Shop;
- comply with relevant laws, regulations and other legal obligations; and
- help us improve the services offered to our customers, and continually enhance our business.
The Currency Shop may also use and disclose personal information for reasonably expected secondary purposes which are related to the primary purposes set out above and in other circumstances authorised by the Privacy Act.
Sensitive information will be used and disclosed only for the purpose for which it was provided or a directly related secondary purpose, unless you agrees otherwise, or where certain other limited circumstances apply (e.g. if required by law).
7. Sharing your personal information
We may disclose personal information to:
- a related entity of The Currency Shop;
- an agent, professional advisor or service provider we engage to carry out our functions and activities, such as foreign exchange contract issuers, money remitters, lawyers, accountants, IT managers, and marketing companies;
- foreign exchange contract issuers or other financial service providers;
- organisations involved in a transfer or sale of all or part of our assets or business;
- financial institutions involved in managing our payments, as banks;
- regulatory bodies, government agencies, law enforcement bodies and courts; and
- anyone else to whom you authorise us to disclose it or as required by law.
We share your Personal Information with third parties to help us use your Personal Information, as described above. We also use Google Analytics to help us understand how our customers use the Site–you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
FACEBOOK – https://www.facebook.com/settings/?tab=ads
GOOGLE – https://www.google.com/settings/ads/anonymous
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
8. Sending information overseas
We use cloud computing services which means your personal information may be stored on web servers located overseas. These servers may be located in the United States, Brazil, Europe or Asia. We do not disclose your personal information to other overseas recipients.
We will not disclose your personal information to overseas recipients without your consent unless:
- we have taken reasonable steps to ensure that the recipient does not breach the Act, or the APPs; or
- the recipient is subject to a similar information privacy regime.
9. Management of personal information
The Currency Shop recognises the importance of securing the personal information of our customers. We will at all times seek to ensure that the personal information we collect and hold is protected from misuse, interference, or loss, and unauthorised access, modification or disclosure.
Personal information is generally held in a computer database. Any paper files are stored in secure areas. In relation to information is held on our computer database, we apply the following guidelines:
- passwords are required to access the system and passwords are routinely checked;
- data ownership is clearly defined;
- we change employees’ access capabilities when they are assigned to a new position;
- employees have restricted access to certain sections of the system;
- the system automatically logs and reviews all unauthorised access attempts;
- the system automatically limits the amount of personal information appearing on any one screen;
- unauthorised employees are barred from updating and editing personal information;
- all personal computers which contain personal information are secured both physically and electronically;
- data is encrypted during transmission over the network; and
- print reporting of data containing personal information is limited.
10. Direct marketing
The Currency Shop may only use personal information for the purposes of direct marketing without your consent if:
- the personal information does not include sensitive information; and
- the you would reasonably expect us to use or disclose the information for the purpose of direct marketing; and
- we provide a simple way of opting out of direct marketing; and
- you have not requested to opt out of receiving direct marketing from us.
We may disclose your personal information to foreign exchange contract issuers or other financial service providers, and they may send you promotional material about their products or services.
You have the right to request us not to use or disclose their personal information for the purpose of direct marketing, or for the purpose of facilitating direct marketing by other organisations. We must give effect to the request within a reasonable period of time. You may also request that The Currency Shop provides you with the source of their information. If such a request is made, The Currency Shop must notify you of the source of the information free of charge within a reasonable period of time.
We do not adopt identifiers assigned by the Government (such as driver’s licence numbers) for our own file recording purposes, unless one of the exemptions in the Privacy Act applies.
12. How do we keep personal information accurate and up-to-date?
The Currency Shop is committed to ensuring that the personal information it collects, holds, uses and discloses is relevant, accurate, complete and up-to-date.
We encourage you to contact us to update any personal information we hold about you. If we correct information that has previously been disclosed to another entity, we will notify the other entity within a reasonable period of the correction. Where we are satisfied information is inaccurate, we will take reasonable steps to correct the information within 30 days, unless you agree otherwise. We do not charge individuals for correcting their information.
13. Accessing your personal information
Subject to the exceptions set out in the Privacy Act, you may gain access to the personal information that we hold about you by contacting the The Currency Shop Privacy Officer. We will generally provide access within 30 days of your request. If we refuse to provide the information, we will provide reasons for the refusal.
We will require identity verification and specification of what information is required. An administrative fee for search and photocopying costs may be charged for providing access to your personal information.
14. Updates to this policy
This Policy will be reviewed from time to time to take account of new laws and technology, and changes to our operations and the business environment.
15. Our responsibilities
It is the responsibility of management to inform employees and other relevant third parties about this Policy. Management must ensure that they advise employees and other relevant third parties of any changes to this Policy. All new employees are to be provided with timely and appropriate access to this Policy. All employees are provided with opportunities to attend privacy training. Employees or other relevant third parties that do not comply with this Policy may be subject to disciplinary action.
16. Making a complaint
If you have any questions about our privacy procedures, or if wish to make a complaint about how we have dealt with your personal information, you may lodge a complaint with us in any of the following ways:
- by telephoning – 1800 004 930
- by writing to – The Currency Shop Privacy Officer, Level 4, 80 Market Street, South Melbourne VIC 3205
- by emailing – firstname.lastname@example.org
If you are not satisfied with the result of their complaint to The Currency Shop you can also refer your complaint to the Office of the Australian Information Commissioner:
- by telephoning – 1300 363 992
- by writing to – Director of Complaints, Office of the Australian Information Commissioner, GPO Box 5218, SYDNEY NSW 2001
- by emailing – email@example.com