Hijack

Privacy Policy

Version 1.0

1. PURPOSE OF OUR POLICY

Pixelface Technologies Pty Ltd ACN 683 745 851 (we, us or our) has adopted this Privacy Policy to ensure that we have standards in place to protect the Personal Information that we collect about individuals that is necessary and incidental to providing the system and services that we offer and the normal day-to-day operations of our business.

2. WHO AND WHAT THIS POLICY APPLIES TO

Scope

Our Privacy Policy deals with how we handle "personal information" and "personal data" as defined in the Privacy Act and the GDPR respectively. We handle Personal Information in our own right and also for and on behalf of our users.

Age Restrictions

If we learn that Personal Information has been collected from persons under 18 years of age without verifiable parental or guardian consent, we will take appropriate steps to delete such information.

3. THE INFORMATION WE COLLECT

Personal Information

We may collect personal details such as an individual's name, location, date of birth, nationality, family details and other information that allows us to identify who the individual is.

Contact Information

We may collect information such as email address, telephone number, third-party usernames, residential, business and postal address and other information that allows us to contact the individual.

Health Information

We may collect information about physical health and other health-related information as defined in the Privacy Act.

Financial Information

We may collect financial information such as bank or credit card details used to transact with us and other information that allows us to transact with the individual.

Statistical Information

We may collect information about an individual's online and offline preferences, habits, movements, trends, decisions, associations, memberships, finances, and purchases for statistical purposes.

4. HOW INFORMATION IS COLLECTED

Registration/Subscriptions

When an individual registers or subscribes for a service, account, or other process where they enter Personal Information details to receive or access something.

Contact

When an individual contacts us in any way.

Access

When an individual accesses us through the internet, we may collect information using cookies or analytical services.

Pixel Tags

Pixel tags enable us to send email messages in a format customers can read and tell us whether mail has been opened.

5. WHEN PERSONAL INFORMATION IS USED AND DISCLOSED

Primary Principle

We will not use any Personal Information other than for the purpose for which it was collected, except with the individual's permission. We will only process Personal Information when we can identify a lawful basis to do so.

Lawful Bases

We rely upon consent (express, clear and informed consent that can be withdrawn) and legitimate interests (where we can demonstrate processing is necessary and balance it against individual's interests, rights and freedoms).

Business Operations

Information is used to enable us to operate our business, including provision of goods and services, verifying identity, communicating about relationships and services, marketing, investigating complaints, and as required by law.

Third Party Disclosure

We will not disclose or sell Personal Information to unrelated third parties unless prior written consent is obtained. We may disclose information where required by law or to prevent fraudulent activity.

6. OPTING "IN" OR "OUT"

Opt In

Where relevant, the individual will have the right to choose to have information collected and/or receive information from us (consent must involve an unambiguous positive action).

Opt Out

Where relevant, the individual will have the right to choose to exclude themselves from some or all collection of information and/or receiving information from us.

7. THE SAFETY AND SECURITY OF PERSONAL INFORMATION

Data Protection Officer

We may appoint a Data Protection Officer to oversee the management of this Privacy Policy and compliance with the Australian Privacy Principles, the Privacy Act and the GDPR.

Security Measures

We will take all reasonable precautions to protect Personal Information from unauthorised access, including appropriately securing our physical facilities and electronic networks.

Breach Response

In case of a security breach, we will immediately establish the likelihood and severity of risk, notify supervisory authorities within 72 hours if required, and notify affected individuals if there is high risk.

8. HOW TO ACCESS, UPDATE AND/OR REMOVE INFORMATION

Access Rights

Subject to the Australian Privacy Principles and GDPR, individuals have the right to request Personal Information we have about them, and we have an obligation to provide it within 28 days of receiving a written request.

Correction

We will correct any errors in Personal Information within 28 days of receiving written notice about those errors, or two months where the request is complex.

Deletion

We may be required to delete all Personal Information upon request in circumstances including when it's no longer necessary, consent is withdrawn, or processing was otherwise in breach of GDPR.

9. COMPLAINTS AND DISPUTES

If an individual has a complaint about our handling of their Personal Information, they should address their complaint in writing to us. Individuals have the right to seek judicial remedy where they consider their rights under GDPR have been infringed.

10. CONTACTING US

All correspondence regarding privacy should be addressed to: The Privacy Officer, Pixelface Technologies Pty Ltd, privacy@hijack.pro