Privacy Policy

This Privacy Policy of CINNABALM PTY LTD (ACN 664 712 038) (Us/ us, We/ we, Our/ our) sets out how we treat the Personal information that we collect, use and disclose and our procedures regarding the handling of Personal information, including the collection, use, disclosure and storage of information, as well as the right of individuals to access and correct that information.

We operate the website with domain name www.cinnabalm.com (Platform).
From time to time, we may revise or update this Privacy Policy or our information handling practices. If we do so, the revised Privacy Policy will be published on the Platform. We may collect Personal information in order to conduct our business, to provide and market our services and to meet our legal obligations. By using the Platform or our services, or by providing any Personal information to us, you (You/ you, Your/ Your) consent to the collection, use and disclosure of your Personal information as set out in this Privacy Policy.

1. The types of information. The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal information and and Sensitive Information.
(a) Personal information. Personal information means information or an opinion about an identified individual or an individual who is reasonably identifiable:
(i) whether the information or opinion is true or not; and
(ii) whether the information or opinion is recorded in a material form or not.
If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “Personal information” and will not be subject to this privacy policy.
(b) Sensitive Information. Sensitive Information is defined in the Privacy Act as including information or opinion about
such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.
Sensitive Information will be used by Us only:

(i) or the primary purpose for which it was obtained;
(ii) for a secondary purpose that is directly related to the primary purpose; and
(iii) with your consent or where required or authorised by law.

2. The types of Personal information we collect and hold. The types of Personal information we may collect and hold includes (but is not limited to) Personal
information about:
● your name, address, contact telephone number and other contact details such as your
email address;
● payment information (such as credit/ debit card or bank details);
● other Personal information required to provide our services in specific cases; and
● details of your use of our products or services.
You are not obliged to provide Personal information to us. However, in many cases, if you do not provide Personal information to us, we may not be able to supply the relevant functionality of the Platform.
In some circumstances, you may provide to us, and we may collect from you, Personal information about a third party. Where you provide the Personal information of a third party, you must ensure that the third party is aware of this Privacy Policy, understands it and agrees to accept it. If you are providing us with personal or Sensitive Information on behalf of a person who is under the age of 18
that you are the parent or guardian of, you understand that you are consenting to this Privacy Policy on their behalf as their legal guardian.
If it is necessary to provide specific services to you, we may collect Sensitive Information about you. However, we will only collect Sensitive Information from you if you agree to provide it to us, you authorise us to obtain it from a third party or where the collection of the information is required or authorised by or under an Australian law or a court/ tribunal order or otherwise where the collection is not prohibited under Australian law.
3. How Personal information is collected and held by us
We collect Personal information in the following ways:
● when you fill in and return to us a signed client form;
● when you submit Personal information through the Platform (such as when you send us a message or fill out an online form);
● in person, for example, when you engage with our employees, agents, or customer service representatives;
● in the course of providing services to you;
● We generally do nott collect Sensitive Information, but when We do, We will comply with the Privacy Act.

We store Personal information We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. We take steps to protect your Personal information against loss, unauthorised access, use modification or disclosure. Some examples of the steps we take to protect your Personal information include:
● ensuring there are suitable password protection measures and access privileges in place to
monitor and control access to our IT systems;
● imposing restrictions on physical access to paper files (if any);
● requiring any third parties engaged by us to provide appropriate assurances to handle your Personal information in a manner consistent with Australian law; and
● taking reasonable steps to destroy or de-identify Personal information after we no longer need it for our business or to comply with the law.
● The Australian Privacy Principles (APP):
(i) permit you to obtain access to the Personal Information We hold about you in
certain circumstances (APP 12); and
(ii) allow you to correct inaccurate Personal Information subject to certain
exceptions (APP 13).

● Where you would like to obtain such access, please contact Us in writing on the contact details set out at the bottom of this Privacy Policy.
4. Collection of Personal information through activity Information that may identify you as a user may be gathered during your access with the Platform.
The Platform may include pages that use ‘cookies’. A cookie is a unique identification number that allows the server to identify and interact more effectively with your computer or device. The cookie assists us in identifying what our users find interesting on the Platform. A cookie may be allocated each time you use the Platform. The cookie does not identify you as an individual in our data collection process, however it does identify your Internet Service Provider.
You can configure your access to the Platform to refuse cookies. If you do so, you may not be able to use all or part of the Platform.
5. The purposes for which we collect, hold, use and disclose Personal information
We collect, hold, use and disclose Personal information for a variety of business purposes including:
● to provide the products or services you have requested from us;
● to improve our business, products and services;
● to promote our business to you;
● to market our other services or products to you;
● to handle and respond to your enquiries, complaints or concerns; and
● to provide Personal information to third parties as set out in this Privacy Policy.

6. Direct marketing
We also collect, hold, use and disclose your Personal information to:
● notify you about the details of new services and products offered by us;
● send you our newsletters and other marketing publications;
● administer our databases for client service, marketing and financial accounting purposes;
and
● to comply with our legal requirements regarding the collection and retention of
information concerning the products and services that we provide.
If you do not wish to disclose your Personal information for the purpose of direct marketing or you would like to opt-out of receiving direct marketing communications, you can do so by contacting us using the contact details set out below, or by following the instructions to unsubscribe which are contained in a communication that you receive from us.
7. Third party service providers
We may disclose your Personal information to third parties who work with us in our business to promote, market or improve the services that we provide, including:
● providers of customer relations management database services and marketing database services;
● marketing consultants, promotion companies and website hosts;
● partnered businesses; and
● consultants and professional advisers.
We may also combine your Personal information with information available from other sources, including the entities mentioned above, to help us provide better services to you. Where we do share information with third parties, we require that there are contracts in place that only allow use and disclosure of Personal information to provide the service and that protect your Personal information in accordance with Australian law. Otherwise, we will disclose Personal information to others if you have given us permission, or if the disclosure relates to the main purpose for which we collected the information and you would reasonably expect us to do so.
8. How we handle requests to access your Personal information
You have a right to request access to your Personal information which we hold about you and to request its correction. You can make such a request by contacting us using the contact details set out in this policy.
We will respond to any such request for access as soon as reasonably practicable. Where access is to be given, we will provide you with a copy or details of your Personal information in the manner requested by you where it is reasonable and practicable to do so.
We will not charge you a fee for making a request to access your Personal information. However, we may charge you a reasonable fee for giving you access to your Personal information.

In some cases, we may refuse to give you access to the information you have requested or only give you access to certain information. If we do this, we will provide you with a written statement setting
out our reasons for refusal, except where it would be unreasonable to do so.
9. How we handle requests to correct your Personal information
We will take such steps (if any) as are reasonable in the circumstances to make sure that the Personal information we collect, use or disclose is accurate, complete, up to date and relevant.
If you believe the Personal information we hold about you is inaccurate, irrelevant, out of date or incomplete, you can ask us to update or correct it. To do so, please contact us using the contact details listed below.
10. How to contact us or make a complaint
If you have any questions about this Privacy Policy, if you wish to correct or update information we hold about you or if you wish to request access or correction of your Personal information or make a complaint about a breach by us of our privacy obligations (including the way we have collected, disclosed or used your Personal information), please contact:

Emily McCallum
PO BOX 91 Brunswick South LPO
hello@cinnabalm.com
0437754749

We will acknowledge and investigate any complaint about the way we manage Personal information as soon as practicable. We may seek further information from you to clarify your concerns. If We agree that your complaint is well founded, We will, in consultation with you, take appropriate steps to rectify the problem. We will take reasonable steps to remedy any failure to comply with our
privacy obligations.