Galeru Privacy Policy

Galeru understands the need to protect personal information from misuse, and respect everyone's right to privacy; therefore we have procedures in place for the protection of your personal information.

This document is Galeru Privacy Policy and has been developed to ensure compliance with the Privacy Act 1988 (Cth), effective December 2001. The National Privacy Principles form part of this Privacy Policy and are available on the Privacy Commissioner's website at www.privacy.gov.au.

This Privacy Policy relates to all personal information recorded by Galeru and will be treated accordingly unless you consent to your information being used in a contrary manner.

Our Privacy Policy covers the collection, use, storage and disclosure of personal information and complies with Australia’s National Privacy Principles. We are constantly monitoring all aspects of information usage to ensure your information is protected.

We strive to maintain an open and accountable policy on the privacy of personal information. We are available to discuss our policy or any queries with you.

For further details on the Galeru privacy policy please contact us using the contact info available on our Contact Us page. Privacy Policy - (NPP5.1)

1. Purpose	2.6 Openness
2. Policy	2.7 Access and Correction
2.1 Collection	2.8 Identifiers
2.2 Use	2.9 Anonymity
2.3 Disclosure	2.10 Transborder Data Flows
2.4 Data Quality	2.11 Sensitive Information
2.5 Data Security

1. Purpose

Galeru is committed to the protection of personal privacy and as such has adopted a set of privacy principles. Galeru knows that you care how your personal information is handled and appreciate your trust that we will do so carefully and sensibly and in complying with the Australian National Privacy Principles of the Privacy Act (Private Sector) Amendment 2000.

2. Policy

This policy sets out the principles that Galeru has adopted in order to protect personal information about individuals, covering both external individuals and internal staff. These principles deal with collection, use and disclosure of personal information as well as access to information and intrusion issues. These Privacy Protection Principles are;

2.1 Collection of Personal Information

The type of information that Galeru records includes your name, address, contact details (including telephone number, fax and email address) and business relationship history. This list of information is not exhaustive. Information will be collected when you contact us in person, by telephone, correspond by letter or for example, visit our web site. However, there may be occasions when we need to source personal information about you from a third party. Galeru will only collect personal information that is necessary for one or more of its legitimate functions or activities. Galeru will only collect information by lawful and fair means not in an unreasonably intrusive way. At or before the time Galeru collects personal information from the subject of the information (or, if that is not practical, as soon as practicable thereafter), Galeru will take reasonable steps to ensure that the subject of the information is aware of:

1. Galeru's identity and how to contact us;
2. the fact that he or she is able to gain access to the information;
3. the purpose for which the information is collected;
4. to whom (or the types of individuals or organisations to which) Galeru discloses information of this kind

Where it is reasonable and practicable to do so, Galeru will take reasonable steps to ensure that the subject of the information is or has been made aware of the matters listed from (a) to (d) above.

2.2 Use

Galeru primarily collects data on customers for the purpose of maintaining a business relationship with customers such as contacting them should an order need to be clarified, or if an alternative method of payment is needed. We may also use or disclose personal information for purposes secondary to the main purpose such as for:

• accounting and administration
• regulatory compliance
• protection from error and fraud
• identifying and informing you about other goods or services.

2.3 Disclosure

Galeru may contract out some of its business functions and activities. In particular circumstances, customers’ consent will be obtained so that we can disclose this information to third parties. On other occasions, your consent will be implied. For example, when goods you have ordered are delivered, the contractors that our distributors may engage will require your information to make delivery of those goods. On the other hand, certain circumstances will require us to obtain your express consent so that we may disclose your information.

Galeru will not disclose personal information to third parties for the purpose of allowing them to direct market their goods or services. However, we may use your personal information to bring to your attention other products and services that may be of interest to you. Any direct marketing by Galeru will be provided on the basis that you may inform us not to forward direct marketing material in the future.

2.4 Data Quality

Galeru will take reasonable steps to make sure the personal information it collects, uses or discloses is accurate, complete and up- to- date. Galeru wishes to ensure that your personal information is accurate, complete and up to date at all times. If you advise us of any changes to your personal information we will correct it accordingly.

2.5 Data Security

Galeru will take reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure. Only authorised users will be permitted to access your personal information for approved purposes. Security systems are in place to maintain physical security over our hard copy and electronic data stores and our premises. User identifiers and passwords are in place to control access to our computer system. Galeru will take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose.

2.6 Openness

Upon request, Galeru will take reasonable steps to let individuals know, generally, what sort of personal information it holds, for what purposes, and how it collects, uses and discloses that information.

2.7 Access and Correction

Where Galeru holds personal information about an individual, it will provide the individual with access to the information upon written request, in a form or manner suitable to the individuals reasonable needs, except to the extent that; providing access would reveal the intentions of Galeru in relation to negotiations with the individual in such a way as to prejudice those negotiations.

Where providing access would reveal evaluative information generated within Galeru in connection with a commercially sensitive- decision making process, Galeru may give the individual an explanation for the decision rather than direct access to the information. If Galeru has given an individual such an explanation and the individual believes that direct access to the evaluative information is necessary to provide a reasonable explanation of the reasons for the decision, Galeru will, at the request of the individual, undertake a review of the decision. The review will be undertaken by personnel other than the original decision maker.

Wherever direct access by the individual is impractical or inappropriate, Galeru and the individual should consider whether the use of mutually agreed intermediaries would allow sufficient access to meet the needs of both parties.

If Galeru holds personal information about an individual and the individual is able to establish that the information is not accurate, complete and up- to- date, Galeru will take reasonable steps to correct the information so that it is accurate, complete and up to date. If the individual and Galeru disagree about whether the information is accurate, complete and up- to- date, and the individual asks Galeru to associate with the information a statement claiming that the information is not accurate, complete or up- to- date, Galeru will take reasonable steps to do so.

Galeru will provide reasons for denial of access or correction.

2.8 Identifiers

Galeru adopts its own identifiers for all contacts.

2.9 Anonymity

Whenever it is lawful and practicable, individuals will have the option of not identifying themselves when dealing with Galeru.

2.10 Transborder Data Flows

Galeru will not transfer personal information outside of Australia unless;

• Galeru reasonably believes that the recipient of the information is subject to statute, binding scheme or contract which effectively upholds principles for the fair information handling that are substantially similar to these rules; or
• the individual concerned consents to the transfer; or
• the transfer is necessary for the performance of a contract between the individual concerned and Galeru, or for the implementation of pre- contractual measures taken in respect to the individual's request; or
• the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the individual concerned between Galeru and a third party; or
• the transfer is for the benefit of the individual concerned; and
  • it is not practicable to obtain the consent of the subject of the information to the transfer; and
  • if it were practicable to obtain such consent, the subject of the information would give it;

2.11 Sensitive Information

Galeru will not collect personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade- union membership, or sexual activity. Thank you for your co-operation with Galeru Privacy Policy.