Sorata understands the importance of protecting your personal information. We comply with obligations imposed on us under the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) (Privacy Act) and we commit to collecting, holding, using and disclosing your personal information in accordance with our obligations and this Privacy Policy.

In this Privacy Policy, references to "Sorata", "we", "us" and "our" are to Sorata Pty Ltd (ABN 20 652 583 241). 

We may update this Privacy Policy from time to time. Any changes to our policy will be published on our website. You can obtain a copy of our current Privacy Policy from our website or by contacting us using the contact details below. 

What is personal information?

Personal information is information or an opinion about an identified individual or reasonably identifiable individual, whether true or not and whether recorded in material form or not. 

This includes a subset of information, called "sensitive information", which is information about a person's racial or ethnic origin, political opinions, membership of political associations, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade associations or trade unions, sexual preferences or practices, criminal records, health information, genetic or certain biometric information.

What personal information is collected and how do we collect it?

We collect and record personal information about individuals such as:

• our customers, potential customers and their representatives; 

• our suppliers, potential suppliers and their representatives, directors, partners, proprietors and shareholders;

• contractors, subcontractors, potential contractors and subcontractors and their representatives in relation to providing goods and services to us; 

• our employees past, present and prospective, including from applications; and

• any other person who comes into contact with us, such as people who view our website.

If you register, subscribe for, use or buy our products or services as a customer of ours (including employees and other staff of our customers), we mainly collect information about you that you provide to us directly – your name, email, mobile number (or other contact details), job title and area of work. 

We may also collect from you basic billing and payment information (such as the name of a customer's billing contact and billing address), although we do not collect or store any credit or debit card numbers or other financial information.  Please see the section below regarding financial information. 

If you are our supplier or potential supplier, we may collect personal information about your representatives, directors, partners, proprietors and shareholders (such as their names, email addresses and contact details). We mainly collect this information from you directly.

If you are our contractor, subcontractor, potential contractor or employee, we may collect personal information about you, such as names, addresses, contact details, as well as other necessary information such as identification information, occupational and employment details (such as employment status and previous work experience), information from or in connection with your resume or job application. We mainly collect this information from you directly. In some cases, we may need to collect health information and other sensitive information (but, if we collect this information, it will always be directly from you and we will always ask for your consent, unless the law permits us to collect this information without your consent). 

We may also collect information about you directly or indirectly when you browse or otherwise interact with our website. Please see the section below regarding Cookies.

In the course of creating our products and services, we collect personal information about persons that hold interests in listed companies, listed registered schemes or certain listed funds (such as names, addresses and the shareholdings or interests of such individuals) and about the representatives of those companies, schemes and funds with whom we interact. We collect this information mainly from those companies, schemes and funds directly or via publicly available sources (such as company registers that are open for public inspection or government databases that are open to public inspection, in all cases whether for a fee or without charge).

Can I remain anonymous?

You can choose to deal with us anonymously or by using a pseudonym.  

However, if you choose to remain anonymous, use a pseudonym or withhold certain information we request, this may affect your ability to access or use certain functions of our website or our products or services.  

If you wish to remain anonymous when dealing with us via a telephone call, please advise the call operator assisting you. Providing your personal details enables us to provide you with a contact record reference number which allows you, and other authorised persons, to retrieve information about that call at a later date.

Why do we collect your personal information?

We collect, hold, use and disclose your personal information for the following purposes: 

• to perform our organisational functions and activities in order to operate our business;

• to identify and communicate with you;

• to register you as a customer or account holder and to manage and administer any account you hold with us;

• to enable us to provide you with requested information, products or services (including access and use our website and online services); 

• to process payments;

• to enable us to better understand our users and to operate, improve and optimise our products or services (including our website and online services) and your and other users' experience;

• to send support and administrative messages, reminders, technical notices, updates, security alerts, and information to you;

• to send marketing and promotional messages to you and other information that has been requested or which may be of interest;

• to help us develop new products and services;

• to help us to manage and enhance goods and services we procure from our suppliers and subcontractors;

• to process any job application submitted by you;

• to investigate or settle any inquiries or disputes raised by you;

• to enforce our legal rights against you;

• to protect the rights, property and safety of us and third parties, including our other customers and users of our products or services (including our website and online services), to the extent your legal rights do not override those such rights or interests;

• for security purposes (such as multi-factor authentication when you log in to our website to access our products and services);

• to respond to any queries or complaints you have made; 

• to comply with our legal and regulatory obligations; and

• to assist government and law enforcement agencies or regulators.

Disclosure of your personal information

We may disclose your personal information to the following third parties for the purposes listed above:

• to other entities within our corporate group (Group Entities); 

• our trading partners and internal or external service providers and those of our Group Entities;

• your nominated representatives; 

• other organisations or individuals who assist us in providing products, events, services and programs to you or to administer our business; 

• professional service providers and advisors who perform functions on our behalf, such as lawyers and accountants; and

• Government, regulatory authorities or other organisations as required or authorised by law.

We may also disclose your personal information to a purchaser or potential purchaser in connection with the sale or potential sale of Sorata Pty Ltd or any Group Entity, our business or any of our assets.

When we disclose personal information to third parties, we make all reasonable efforts to ensure that we disclose only relevant information and that it is accurate, complete and up to date and that the third party will comply with the Privacy Act.

We may disclose personal information in other circumstances, where the person concerned has consented to the disclosure, or where we are expressly permitted to do so by the Privacy Act or another law. These other disclosures may include where:

• you would reasonably expect the disclosure to occur (for example, quality assurance purposes or training);

• we are authorised or compelled by law to disclose; 

• it will prevent or lessen a serious threat to someone's life, health or safety or a threat to public health or safety; 

• it is necessary as part of the establishment or defence of a legal claim;

• it is requested by an enforcement agency such as the police; or 

• it is a necessary part of an investigation following a complaint or incident.

Overseas disclosures

We may disclose your personal information to recipients located outside Australia from time to time for the purposes set out in this Privacy Policy, including to the United States and the Philippines. Where we disclose information outside of Australia, we will take reasonable steps to ensure that any such person to whom personal information is disclosed will deal with that information in a way that is consistent with the APPs and this Privacy Policy.

Security and safety of information

The security and privacy of your personal information is paramount and we make every effort to help ensure that your personal information is protected. We have put in place appropriate security measures to help prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We have also put in place procedures to deal with any suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. We have also put in place procedures to help ensure that if your personal information is no longer required by us for any purpose for which it was collected and is no longer required by law to be retained by us, we will destroy or de-identify that information.

However, please aware that there are inherent risks in using any online service and in transmitting information across the internet and that no data transmission over the internet can be guaranteed to be totally secure.  

Financial information

Your purchase of our products and services through our website is undertaken through Stripe, a third-party payment gateway provider. Stripe may collect your personal information and you can view their privacy policy at https://stripe.com/au/privacy. 

Cookies

We use cookies and similar technologies to improve your experience, for analytics and for marketing purposes. We use cookies and similar technologies in accordance with applicable law. You may be able to manage your cookie preferences (including deleting or disabling cookies) on your web browser, but if you choose to disable cookies, some features of our website may not operate as intended.

Direct marketing

We may use your personal information to offer you products and services of ours or of our Group Entities which we believe may interest you, but we will not do so if you tell us not to. 

When you receive electronic marketing communications from us, you may opt out of receiving further marketing communications by following the opt-out instructions provided in the communication. 

How is my information kept up to date and how can I access it?

We have measures in place to ensure the information we hold about you is accurate, complete and up to date. 

You may access or request correction of the personal information that we hold about you by contacting us. Our contact details are set out below. There are some circumstances in which we are not required to give you access to your personal information.

There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material). 

We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate and up to date. 

If we refuse to provide you with access to your record or to update your record in the way you request, we will provide you with written reasons.

If we refuse to correct or update your information, you may request that we make a note on your record that you are of the opinion that the information is inaccurate, incomplete, out of date, irrelevant or misleading, as the case may be.

How can I make a complaint?

If you have a complaint or concern regarding our handling of your personal information or think that your privacy has been affected, you should contact us using our contact details set out below to raise your complaint or concern. 

We will consider your complaint and determine whether it requires further investigation. We will notify you of the outcome of this investigation and any subsequent internal investigation.

If you remain unsatisfied with the way in which we have handled your privacy complaint or concern, you may approach an independent advisor or contact the OAIC. See the OAIC website for more information about how to make a complaint.

Contact Us

Our relationship with you is our primary concern. If you have any questions or concerns about your privacy and our policy, please do not hesitate to contact us (info@sorata.com).

Updated 3/25