Privacy policy

 

Our privacy obligations

TANK is made by Anamorphic Digital. Anamorphic Digital is governed by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).  The APPs regulate how personal information is handled by Anamorphic Digital.  

‘Personal information’ means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Anamorphic Digital’s Privacy Policy applies to personal information collected and/or held by Anamorphic Digital.

Additionally, as a health service provider or organisation operating in NSW that collects, holds or uses health information, Anamorphic Digital is also governed by the Health Records & Information Privacy Act 2002 (NSW).

This Privacy Policy also explains how we process ‘personal data’ about people in the European Union (EU), as required under the General Data Protection Regulation (GDPR).

We will review this policy regularly, and we may update it from time to time.

 

The types of personal information we collect and hold

We collect personal information about our customers, as part of our routine activities.

We also collect personal information about our staff, contractors and suppliers, as well as the contact details of individuals who work for contractors and suppliers, and other types of professional associates and personal contacts.

How we collect personal information

Information that you specifically give us

We may ask you to provide us with certain types of personal information if you wish to obtain a particular service or product from us. This might happen over the telephone, through our mobile app or website, by filling in a paper form, or meeting with us face-to-face.  We will give you a Collection Notice at the time, to explain how we will use the personal information we are asking for.  The notice may be written or verbal.

You might also provide your personal information to us, without us directly asking forit, for example if you engage with us on social media.

Information that we collect from others

If you apply for a job or contract with us, we will collect personal information about you from your referees.  With your consent we may also use a third party service to ensure your employment, educational and identity records are valid. We may also check some details about our suppliers from publicly available sources, such as the Australian Business Register and ASIC databases.

Information that we generate ourselves

We maintain records of the interactions we have with our customers, including the products and services we have provided to you.

We collect limited information about users of our apps and websites, for diagnostic and analytic purposes.  We use cookies and gather IP addresses to do so, but we do not trace these back to individual users.

The types of personal information we collect

The types of personal information we collect about our customers includes:

●       Name and contact details

●       Credit card or other payment details

●       Raw data that customers provide in order to use our products, e.g., time use and reflections in TANK, personal values ratings in TANK values

●       Patterns drawn from this raw data, e.g., trends and correlations over time

 

Links to other sites

On our website, we may provide links to third party websites. These linked sites are not under our control, and we cannot accept responsibility for the conduct of companies linked to our website. Before providing your personal information via any other website, we advise you to examine the terms and conditions of using that website and its privacy policy.

 

How we use personal information

We may use your personal information for the following purposes:

●       to provide the service or product you have requested

●       to provide technical or other support to you

●       to answer your enquiry about our services, or to respond to a complaint

●       to manage our employment or business relationship with you

●       to promote our other programs, products or services which may be of interest to you (unless you have opted out from such communications)

●       if otherwise permitted or required by law, or

●       for other purposes with your consent, unless you withdraw your consent.

 

The 'lawful processing’ grounds on which we will use personal information about you are that processing is necessary for the performance of the contract to which you are party when you subscribe to our product or service.

We may use automated decision-making to offer suggestions aimed at improving the effectiveness of our products and services for our customers. The decision rules used are based on patterns behavior that have been effective in the past for other customers and/or for research participants. The consequence of these decision rules failing to achieve their aim is that customers receive ineffective suggestions.

We will keep personal information about you, to use for the above purposes, for as long as you remain a subscription customer, or if you decide to cancel your subscription, for a period of 12 months from the date of cancellation.

When we disclose personal information

Our third party service providers

The personal information of our customers, staff, suppliers and other contacts maybe held on our behalf outside Australia, including ‘in the cloud’, by our third party service providers.  Our third party service providers are bound by contract to only use your personal information on our behalf, under our instructions.

Our third party service providers are Expo, Clerk, Supabase, OneSignal, Apple, and Google.

Other disclosures and transfers

We may also disclose your personal information to third parties for the following purposes:

●       if necessary to provide the service or product you have requested

●       if otherwise permitted or required by law; or

●       for other purposes with your consent.

Security of your personal information

We will take reasonable security measures to protect personal information from loss, unauthorised access, use, modification or disclosure. This includes industry standard encryption of data at rest and in transit and role-based access management.

We will take reasonable steps to ensure personal information is stored securely, not kept longer than necessary, and disposed of appropriately.  We will retain your personal data for a period of 12 months from the date of your service cancellation, or if you request earlier deletion, within a reasonable time period of the request.

Accessing or correcting your personal information

You have the right to request access to the personal information Anamorphic Digital holds about you.  Unless an exception applies, we must allow you to see the personal information we hold about you, within a reasonable time period. We will charge AUD100 to provide you with this data.

You also have the right to request the correction of the personal information we hold about you. We will take reasonable steps to make appropriate corrections to personal information so that it is accurate, complete and up-to-date. Unless an exception applies, we must update, correct, amend or delete the personal information we hold about you within a reasonable time period. We do not charge for making corrections.

To seek access to, or correction of, your personal information, please contact our Privacy Officer by emailing privacy@anamorphicdigital.com.

Exercising your other rights

You have a number of other rights in relation to the personal data Anamorphic Digital holds about you.  You have the right to:

●       seek human review of automated decision-making or profiling

●       opt-out of direct marketing, and profiling for marketing

●       opt-out of processing for research/ statistical purposes, or processing on the grounds of ‘public interest’ or 'legitimate interest’

●       erasure

●       data portability, and

●       temporary restriction of processing.

In most instances you may exercise these rights via direct interaction with our products and services, e.g., by opting out of insights via your account settings, or out of marketing via an unsubscribe button.

To seek to exercise any rights not addressed in our products or services, please contact our Privacy Officer by emailing privacy@anamorphicdigital.com.

To contact our Privacy Officer

If you have an enquiry or a complaint about the way we handle your personal information, or to seek to exercise your privacy rights in relation to the personal information we hold about you, you may contact our Privacy Officer as follows:

       

OUR PRIVACY OFFICER IS:    

Helen Lawson Williams

Chief Executive Officer

Telephone: +61 (0)400 136 003

Email: privacy@anamorphicdigital.com    

Mail: PO Box 188 Camperdown NSW 1450 AUSTRALIA

For the purposes of the GDPR, our Privacy Officer is also our Data Protection Officer (DPO). 

While we endeavour to resolve complaints quickly and informally, if you wish to proceed to a formal privacy complaint, we request that you make your complaint in writing to our Privacy Officer, by mail or email as above.  We will acknowledge your formal complaint within 10 working days.

If we do not resolve your privacy complaint to your satisfaction, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) by calling them on 1300 363 992, making a complaint online at www.oaic.gov.au, or writing to them at OAIC, GPO Box 5218, Sydney NSW 2001.

If you are in the European Union, you can choose to instead lodge a complaint with your local Data Protection Authority (DPA). The list of DPAs is at http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

We live and work on Country that has been cared for by the Gadigal people of the Eora nation for uncounted generations. We offer respect and gratitude to their elders past and present.
We acknowledge that sovereignty was never ceded.