Privacy Policy

HENLEY ARCH PTY LTD PRIVACY POLICY

LAST UPDATED AUGUST 2024

1. ABOUT US

Henley is a private limited company registered in Australia. In the course of our business we may need to gather and use Personal Information about you. We are committed to protecting your privacy and processing your Personal Information in compliance with all applicable privacy laws.
The purpose of this privacy policy (Privacy Policy) is to inform you of how we will process your Personal Information and the measures and processes we have put in place to ensure its adequate protection.

In using the Website, receiving our services, accessing our sites and/or contracting with us, you consent to the collection, use, disclosure and transfer of your Personal Information as set out in this Privacy Policy.

2. ABOUT OUR PRIVACY POLICY

This section explains how to read this Privacy Policy and describes its purpose.
Defining specific terms

  • "APPs" refer to the Australian Privacy Principles in the Privacy Act 1988 (Cth) ("Privacy Act").
  • "Henley" means Henley Arch Pty Ltd and its related corporate bodies.
  • "Personal Information" has the meaning given in paragraph 3 of this Privacy Policy and includes Sensitive Information.
  • "Sensitive Information" is Personal Information relating to certain aspects of an individual including, without limitation, that individuals' health, religion, racial or ethnic origin.
  • "Spam Act" means the Spam Act 2003 (Cth).
  • "we", "us" and "our" refer to Henley.
  • "Website" means Henley.com.au

Purpose of our policy

Henley is bound by the Privacy Act, including the APPs incorporated in the Privacy Act and any other relevant privacy laws which may apply from time to time.

Our Privacy Policy lays down the principles by which we collect, store, use and disclose any Personal Information you provide to us or we collect from other sources, notifies you of all relevant matters required under the Privacy Act and explains your rights with the respect to how Henley deals with your information. Please read this Privacy Policy carefully and contact us with any queries.

3. WHICH KINDS OF PRIVACY INFORMATION WE COLLECT

Henley collects Personal Information as defined by the Privacy Act. Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether the information or opinion is recorded in a material form or not. An example of Personal Information is your name and address.
The kinds of Personal Information we may collect include:

  • Contact Details:
    We may collect information such as your name, address, telephone number, facsimile number and/or email address.
  • Image and likeness:
    We may collect your image and other Personal Information (including Sensitive Information) via CCTV surveillance systems installed at our sites.
  • Financial Details:
    We may collect information about your bank account details and other information that allows us to transact with you.
  • Unsolicited Personal Information you send us:
    We may collect any personal correspondence that you send us, or that is sent to us by others about your activities. We will destroy or de-identify any unsolicited Personal Information we receive, unless we are otherwise entitled to collect the information under the Privacy Act.
  • Sensitive Information:We may collect Sensitive Information from time to time such as, without limitation, information relating to your ethnicity or racial origin.
    If you are applying for a position at Henley, we may collect and hold other personal information about you such as your employment history, race and ethnicity (only if required or authorised by law), health information (only if required or authorised by law) and Government-issued identification, for instance your tax file number (only if an offer of employment is extended to you).
  • Website usage information:
    Henley may also collect information through your use of the Website, including the dates and times you access the Website, the domains from where you visited the Website, your activity on the Website and internet protocol addresses. This information is referred to as click stream data, which may by used by Henley to analyse trends and statistics to improve the Website. Henley may collect the click stream data through the use of cookies. A "cookie" is a text file sent by the Website to your browser and stored on your computer. It identifies your computer. You may set your browser to not accept cookies, but some parts of the Website may not function properly or at all if cookies are disabled. We also use cookies for remarketing to advertise online.
    Some pages and emails created by the Website may also contact a "web beacon." This is a clear-pixel image that generates a notice of your visit to be sent to Henley. A web beacon usually works in conjunction with a cookie. If you disable cookies a web beacon will be able to generate an anonymous notice of your visit, but such notice cannot be associated with information normally contained in the cookies. If the Personal Information Henley requests from you is not provided, or you request to provide such information anonymously, Henley may not be able to provide the information or the services you requested.

Where the Website usage information is de-identified data, the APPs do not apply.

4. HOW WE COLLECT PRIVACY INFORMATION

Unless it is impractical to deal with you anonymously, you are entitled to remain anonymous or use a pseudonym in relation to particular matters. Examples of where it is impractical to allow you to remain anonymous include entering into contracts with Henley, making payments by credit card and attending our sites.
Henley will only collect Personal Information by lawful means. We have a general policy to only collect your Personal Information from you directly, unless it is unreasonable or impracticable to collect such Personal Information from you directly. Most types of Personal Information we collect from you will be information such as contact or financial details reasonably necessary for or directly related to our functions and activities (rather than Sensitive Information).

Subject to applicable law, we may collect your Personal Information in a variety of ways, which include:

  • Person to person;
  • From any contract you enter into with Henley;
  • On forms completed by you and submitted to Henley;
  • Web based enquiries you submitted to Henley;
  • Your use of the Website (including browsing);
  • Via CCTV surveillance systems installed at our sites;
  • From any correspondence you post to Henley;
  • Over the telephone; or
  • Via facsimile, email or other electronic communication you transmit to Henley.

If we do not collect your Personal Information, our ability to provide quality and efficient services (or any services at all) or provide access to our sites, may be compromised. The specific consequence of us not collecting your Personal Information depends on the context of the collection and the purpose for which the information was collected.

5. PURPOSES FOR WHICH WE COLLECT AND DEAL WITH YOUR INFORMATION

We may collect, use and disclose your Personal Information for the purpose of running our home building business. We need to deal with your Personal Information to allow us to run our business and perform essential functions.

Generally, to the extent permitted by applicable law, we only use and disclose your Personal Information for: (i) the primary purpose for which we collect the information; (ii) a secondary purpose reasonably (or directly if the Personal Information is Sensitive Information) related to the primary purpose for which you would reasonably expect us to use the collected information; or (iii) as otherwise permitted by the Privacy Act or applicable privacy laws. The primary purpose of the collection is partly determined by the context in which the Personal Information is collected.

We may also use and disclose your Personal Information in connection with the management of our relationship with you and/or provision of our services to you for the following purposes:

  • To respond to queries you may have regarding any of the activities or services described on the Website;
  • To communicate with parties to an agreement that includes Henley as a party;
  • To conduct business transactions, such as processing invoices, bills and related financial matters necessary for Henley's provision of goods and services;
  • To conduct customer satisfaction surveys in relation to Henley's products and services;
  • For sending promotional materials or to contact you about the services we offer (unless you have opted out as described in paragraph 7 below); and
  • For monitoring the use of the Website, including to analyse trends and statistics and to track actions performed on the Website to improve the Website.

If we collect your Personal Information via a CCTV surveillance system installed at one of our sites, we may also use and disclose your Personal Information (including any CCTV video recordings that include your Personal Information) for the following purposes:

  • To help ensure security and safety at our sites;
  • To protect our lawful interests;
  • To manage activities at the site (including the activities of our third party vendors and subcontractors);
  • To assist third parties working at the site (including our third party vendors and subcontractors) to manage their obligations to us and complete their work at the site, including by enabling those third parties to review the actions of their personnel and other people attending the site;
  • To help prevent crime at our sites; and
  • To identify, or assist law enforcement or government bodies in identifying, any person suspected of committing an offence at our sites.

6. SHARING PERSONAL INFORMATION

To the extent permitted by applicable law, we may:

  • share your Personal Information with related companies, our subcontractors and other third parties providing services to us in relation to our business activities including third parties providing insurance, financing and building services;
  • disclose your contact details on a confidential basis to third parties for the purposes of collecting your feedback on our services to help us measure our performance and to improve and promote our services; and/or
  • share your Personal Information with any third party to whom we assign or novate any of our rights or obligations or to any person that may acquire our business.

If we collect your Personal Information via a CCTV surveillance system installed at one of our sites, we may also share your Personal Information (including any CCTV video recordings that include your Personal Information) with other third parties who are performing services or delivering goods at the site.

7. MARKETING

Direct Marketing:
We may use and disclose your Personal Information (other than Sensitive Information) to provide you with direct marketing material such as, without limitation, information about offers, products and services offered by us if:

  • you have consented to receive direct marketing materials; or
  • you would reasonably expect us to use your Personal Information for this purpose; or
  • we believe you may be interested in the material but it is impractical for us to obtain your consent.

We will ensure that our direct marketing material incorporates an option for you to elect to receive no further such communications.

Please note that even if you have requested not to receive further direct marketing communications, we may nevertheless continue to provide you with information about changes to our terms and conditions for the supply of goods or services and other factual information as permitted under the Privacy Act and Spam Act.
Remarketing: We also use cookies for marketing purposes. If you leave the Website to visit another website, or perform a relevant keyword search, you may be served our ad.

You can remove any remarketing cookies by deleting your Internet browsing history and clearing your cookies. This can be done through the tools/settings function of your Internet browser. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the Website. You can opt out of any Google cookies by visiting Google’s Ad Settings. Alternatively you can opt out of a third-party vendors use of cookies by visiting the Network Advertising Initiative opt out page.

Overall, cookies help us to provide you with a better experience, by enabling us to monitor which pages or assets you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

8. THE CONSEQUENCES OF NOT PROVIDING US WITH PERSONAL INFORMATION

If you choose to not provide us with Personal Information our ability to perform some essential business functions, such as providing the Website functionality and quoting and constructing your home, might be compromised.

Not providing us with Personal Information could mean we are unable to fulfil one of the above purposes for which we collect Personal Information.

9. STORAGE OF DATA AND OVERSEAS DISCLOSURE

We will typically store electronic records of your Personal Information using cloud technology or by other electronic means. We do not store any Personal Information outside of Australia but may send Personal Information to third parties located outside of Australia as further detailed in this section.

We may transfer your Personal Information to our service providers located in countries outside of Australia including Thailand and China. You consent to your Personal Information being disclosed outside of Australia, including in these locations.

While Henley has privacy rules in place to protect your Personal Information, the overseas recipient may not be subject to privacy obligations or to any principles similar to the Privacy Act or the APPs. We cannot always control how these overseas recipients handle your Personal Information that we disclose to them.

If you have any concerns regarding the transfer of your Personal Information overseas, or if at any time you wish to withdraw your consent, you should contact our Privacy Officer. However, if you withdraw your consent we may be unable to fulfil one of the above purposes for which we collect Personal Information.

10. MAINTAINING THE INTEGRITY, CURRENCY AND SAFETY OF YOUR PRIVACY INFORMATION

This section explains how Henley holds your Personal Information, how you can access your Personal Information, update your Personal Information, complain about an alleged breach of the APPs or make any related enquiry.
Maintaining currency of your information

Henley relies on accurate and reliable information to deliver quality and effective services. If we are satisfied that any of the information we have about you is inaccurate, out-of-date, irrelevant, incomplete or misleading, or you request we correct any information, we will take steps as are reasonable in the circumstance to ensure the information held by us is accurate, up-to-date, complete, relevant and not misleading.

Should we refuse to correct the information, we will explain the reasons for refusal.

If we disclose your privacy information that is later corrected, we will, or else you may ask us to, notify the entity that received the incorrect information about that correction.

Safety of your information

Henley takes reasonable steps to protect the Personal Information Henley collects from you against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons, misuse, interference, loss, unauthorised access, modification or disclosure.

By using the Website, however, you acknowledge and accept the risk that the Website may contain hyperlinks to websites owned, operated and/or maintained by independent third parties. Henley has no control over the privacy practices or the content of any such websites linked to the Website, we can only inform individuals of the types of organisations to who we disclose Personal Information.

Data breaches

Henley will comply with its obligations under the Notifiable Data Breaches scheme in respect of notifiable data breaches. To the extent we are required to notify you of a data breach, we will take all reasonable steps to make you aware of such data breach.

Identifiers

Henley does not adopt or use any identifiers of any Australian government body or agency assigned to any individual as its own identifier.

11. UPDATES TO THIS PRIVACY POLICY

Henley reserves to the right to amend this Privacy Policy at any time and such amendments will be posted to the Website. Henley may, at its discretion, communicate amendments of this Privacy Policy to you by email or mail. In most circumstances, basic amendments to this Privacy Policy will not require your consent. However, if the amendments alter part of this Privacy Policy that renders Henley obliged to obtain your consent, we will notify you of the amendments and communicate that your acceptance of our email indicates implied consent unless you communicate to us that you do not consent to the amendments.

12. ACCESSING YOUR INFORMATION OR LODGING A COMPLAINT

Accessing and correcting your Personal Information

You are entitled at any time to request access to your Personal Information held by us. Henley will provide you with access to your Personal Information, unless an exception to the right to access applies under applicable privacy law. If an exception applies, Henley will advise you in writing of the reason for refusal and outline how you may complain about the refusal.

Subject to applicable law, Henley reserves the right to charge an administrative fee to cover its reasonable costs for providing access to your personal information. We will endeavour to respond within a reasonable period after the request is made, it is anticipated that this is no more than 30 days.

If Henley does not agree that your Personal Information is inaccurate, we will, at your request, attach a note stating that you disagree with the relevant material.

While Henley takes all reasonable steps to ensure your Personal Information is accurate, up to date and complete, Henley relies upon the accuracy, completeness and currency of the Personal Information you supply to us.

Accordingly, if you identify any inaccuracy in your Personal Information, or you need to make a change or wish to verify such information, please contact Henley with a request to access your Personal Information with sufficient information to enable Henley to verify your identify. If this Personal Information has been previously disclosed to a third party, Henley will notify the relevant third parties of the correction.

If there is a reason under the Privacy Act for us not to provide a person with any of your Personal Information (including where we are not obligated to comply with such request), we will give you a written notice of our refusal setting out the reasons for such refusal (except to the extent it would be unreasonable or unlawful to do so), and advise you of the mechanisms available to you to complain about the refusal.

You may also inform us if you withdraw any consents that you have previously provided to us.

Lodging a complaint

If you wish to complain about a potential breach of this Privacy Policy or any rights you may have under applicable law, please contact our Privacy Officer who will make good faith efforts to rectify the issue and respond within a reasonable period after the complaint is made. You are also entitled to lodge a complaint with the Office of the Australian Information Commissioner. You can contact the Office of the Australian Information Commissioner:

  • by telephoning – 1300 363 992;
  • by writing to – Director of Complaints, Office of the Australian Information Commissioner, GPO Box 5218, SYDNEY NSW 2001; or
  • by emailing – enquiries@oaic.gov.au.

13. CONTACT US

Please direct all requests to Henley's Privacy Officer by email at privacy@henley.com.au or by mail to the following address:

Attention of the Privacy Officer
Henley Arch Pty Ltd
395 Ferntree Gully Road
Mount Waverley, 3149, VIC