Yarra Ranges Tourism Limited (“YRT”, “we” or “us”) is responsible for the marketing of the Yarra Valley and Dandenong Ranges.
YRT understands that privacy is important to you. We are bound by the Information Privacy Principles (IPPs) in the Privacy Act 1988 (Australia). If YRT communicates with you by email, it is also bound by the Spam Act 2003 (Australia). If you are based in the European Union, the General Data Protection Regulation will also apply.
YRT strives to handle personal information in a manner which is consistent with the local privacy laws that apply in the various international jurisdictions in which YRT operates.
This Privacy Policy applies to YRT’s handling of personal information across all its offices as well as online via email and through contact forms on YRT’s websites or social media accounts. You should review this Privacy Policy prior to providing us with any personal information.
The types of personal information that YRT collects directly from you will depend on the nature of your dealings with us. In each case, we only collect the personal information that we need to carry out our specific functions.
We may collect your personal information directly from you via email, by post, by phone, in person at events or exhibits, through our websites and via our social media accounts.
The following table sets out the personal information we may collect from you when you deal with us in certain ways and why we need to collect it:
We may have also received your personal information from other persons if that person has shared their content with you using YRT products, sent gift certificates and products, or invited you to participate in services or forums.
We collect data in a form that does not, on its own, permit direct association with any specific individual. We may collect, use, transfer and disclose non-personal information for any purpose. The following are some examples of non-personal information that we collect and how we may use it:
If we do combine non-personal information with personal information the combined information will be treated as personal information for as long as it remains combined.
The particular purpose for which we collect personal information will either be explained when we collect that information, is set out in this Privacy Policy or will be obvious from the context in which it is collected.
We must only use personal information for the particular purpose we collected it for, or for other purposes that are directly related to that purpose. If we want to use personal information for any other purpose we must obtain your consent.
If we use your personal information to send you information by email (including e-newsletters), we will always give you an opportunity to “unsubscribe”, and we will respect your wishes.
In addition to the ways in which we use your personal information in certain circumstances as set out above, we may also use the personal information we collect from you in the following ways:
YRT makes only limited disclosures of personal information. YRT may disclose your personal information to third parties if this is required by law or otherwise permitted under the Privacy Act or other local laws. Specific examples of when YRT may disclose your personal information to third parties are explained below.
YRT shares personal information that it has collected in the course of conducting trade events with Tourism Victoria. Such disclosure is notified when that personal information is collected.
We may also disclose personal information to external service providers who help us operate our business (eg IT consultants, publishing houses, lawyers and other professional advisors). If YRT engages external service providers, we require those contractors to comply with contractual privacy obligations that reflect YRT’s own privacy obligations.
We may disclose personal information due to legal process, litigation and/or requests from public and governmental authorities within or outside your country of residence. We may also disclose information about you if we determine that disclosure is reasonably necessary to enforce our terms and conditions or protect our operations or users. Additionally, in the event of a re-organisation, merger or sale we may transfer any and all personal information we collect to the relevant third party on a confidential basis.
At times, YRT will provide third parties with certain personal information to provide or improve our products and services, including to deliver products at your request, or to help YRT market to consumers. When we do, we require those third parties to handle it in accordance with relevant laws. For example, when you purchase a product from The Regional Pantry, you authorise YRT and their partners to exchange the information you provide during the activation process to carry out the purchase, delivery and any return of the items.
YRT does not sell personal information, [and unless you otherwise provide us with consent to do so, personal information will never be shared with third parties for their own marketing purposes].
With consent, personal information about participants may be disclosed to other organisations involved in the Australian tourism industry such as airlines, hotels, tour operators and product suppliers.. However, there will be no disclosure of this personal information without consent.
YRT requires our staff to ensure that paper records containing personal information are stored securely. YRT’s personnel are bound by confidentiality obligations as a condition of their employment, and this extends to ensuring that personal information collected by YRT is kept confidential.
The online service such as The Regional Pantry protect your personal information during transit using encryption such as Transport Layer Security (TLS).
When you post on a social networking service, the personal information and content you share is visible to other users and can be read, collected or used by them. You are responsible for the personal information you choose to share or submit in these instances.
Most electronic records of personal information directly collected by YRT are stored in databases hosted on servers in Australia. In each case, our IT systems are protected by appropriate IT security measures. If you do not live in Australia, and you do not want your personal information to be transferred to Australia, please do not provide us with your personal information.
We use platforms such as:
MailChimp and Hubspot are based in the United States of America (USA) and the information collected by them will be transmitted to and stored by MailChimp and Hubspot on servers located outside Australia.
For further information about the type of personal information:
By subscribing to our newsletter [or Hubspot related actions]:
You have the right to seek access to the records of personal information that YRT holds about you. You also have the right to ask us to alter your personal information to ensure it is accurate and up to date.
If you wish to access the personal information that we hold about you, please set out your request in writing, and send it to us using the contact details set out at the end of this Privacy Policy.
We may decline to process requests that are frivolous/vexatious, jeopardise the privacy of others, are extremely impractical, or for which access is not otherwise required by law. We may also decline aspects of deletion or access requests if we believe doing so would undermine our legitimate use of data for anti-fraud and security purposes.
We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy. When assessing these periods, we carefully examine our need to collect personal information at all and if we establish a relevant need, we only retain it for the shortest possible period to realise the purpose of collection unless a longer retention period is required by law.
If you are based in the European Union, you also have the right, under certain conditions:
If you wish to exercise any of these rights, please send that request to us in writing using the contact details at the end of this Privacy Policy.
If you use YRT’s websites, you are understood to consent to the terms and conditions set out on each of our websites. This includes consenting to the terms of this privacy policy.
In general, you can visit YRT’s websites without telling us who you are or revealing any personal information about yourself.
There are however times when we may need to collect personal information from you. For instance, if you register to receive our publications or to attend an event, we will need to collect some personal information from you. At the time of collection, we will seek your permission to send you further electronic communications, and for your personal information to be stored in accordance with this Privacy Policy.
If at any time after submitting your personal information to us you would no longer like to receive information from us, simply follow the “unsubscribe” directions at the end of any email communications you receive, or contact us using the contact details at the end of this Privacy Policy.
No attempt will be made by YRT to identify website users or their browsing activities except in the unlikely event of an investigation, where a law enforcement agency may exercise a warrant to inspect server logs.
The statistics and log files may be preserved indefinitely and used at any time and in any way necessary to prevent security breaches and to ensure the integrity of the information supplied by YRT.
Some YRT web pages use “cookies”, which are small files that may be placed on your hard disk for record-keeping purposes. A cookie helps us remember who you are. Cookies can make your subsequent visits to the web page simpler and more seamless. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. However, by not accepting cookies, some web pages may not display properly.
We use cookies to understand how you use our website. We use them to recognise you on our website and remember your previously selected preference. These could include what language you prefer and what location you are in. We also use cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device and your IP address. Sometimes we share some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
By continuing to use our website, you are consenting to our use of cookies as set out herein.
YRT strives to ensure the security, integrity and privacy of personal information submitted to our sites, and periodically updates its security measures in light of current technologies. You need to be aware of inherent risks associated with the transmission of information via the Internet. YRT cannot guarantee or warrant the security of any personal information you submit to our sites. If you have concerns in this regard, YRT has other ways of obtaining and providing information. Normal mail, telephone and fax facilities are available. YRT sites may also be linked to websites operated by third parties. These links are meant for your convenience only. Links to third party sites do not constitute sponsorship or endorsement or approval of these sites. Visitors to those sites should refer to their separate privacy policies and practices.
YRT websites and services may contain links to third-party websites, products and services. Our products and services may also use or offer products or services from third parties − for example, a gift hamper.
Information collected by third parties, which may include such things as location data or contact details, is governed by their privacy practices. We encourage you to learn about the privacy practices of those third parties before providing them with your personal information.
YRT uses the eWAY Payment Gateway for its online credit card transactions. All online credit card transactions performed on a YRT site using the eWAY gateway are secured payments.
For more information about eWAY and online credit card payments, please visit www.eWAY.com.au
If you have any questions about this Privacy Policy, or if you wish to make a complaint about how YRT has handled the personal information about you, please contact us using the details below:
By E-mail: info@yarrarangestourism.com.au
By Post: PO Box 903, Lilydale VIC 3140
By Telephone: +61 3 8739 8000
Any complaint will be appropriately investigated and the outcome of that investigation communicated to you within 30 days. If you are not satisfied with the outcome or the handling of the complaint by us, you can contact the Office of the Australian Information Commissioner by calling 1300 363 992 or by sending an email to enquiries@oaic.gov.au.
YRT periodically reviews this Privacy Policy and reserves the right, at its discretion, to modify or remove portions of this Privacy Policy at any time.