Purpose of the policy

This is the privacy policy of Oricom International Pty Ltd ABN 46 086 116 369, Oricom Holdings Pty Ltd ABN 30 158 094 976 and our related entities (Oricom), including any New Zealand operations.

Oricom is committed to complying with the Privacy Act 2020 (Privacy Act). This Privacy Policy sets out how we collect, use, store and disclose personal information in accordance with the Information Privacy Principles under the Privacy Act.

Personal Information

Personal information means information about an identifiable individual, and includes information relating to a death that is maintained by the Registrar-General under the Births, Deaths, Marriages, and Relationships Registration Act 2021 or any former Act.

Some examples of personal information we might collect are:

1. general, personal or business details: such as your name, date of birth, job title, contact number, address and email address

2. Transaction and financial information: payment and financial information such as your bank account details, transaction/order information, credit-related iformation

3. Employment Information: if you are a current or former or prospective employee, contractor, partner or office holder, other information as necessary and relevant to your employment

4. Log information: when you use our services, we may gather some information automatically and store it in service log files, as well as your login account information and password.

5. Device information: for example, device model, operating system version, unique device identifier, battery, signal strength

6. Software information: for example, software version and browser type, we may collect the information of the mobile applications and other software you use.

7. Location information:

1. when you use the location-related services, we may record the location information (including via IP Address, GPS, WiFi or cell tower locations) of your device in order to provide relevant services.

2. geographic location information that you or other users provide when using the services, for example, the account you provide may share your location information.

Remaining anonymous or using a pseudonym

You may choose to interact with us anonymously or using a pseudonym.

Sometimes it may be impracticable to remain anonymous or use a pseudonym, or we may be legally required to deal with an individual in an identified form. In such circumstances, we will ask you to provide personal information.  These circumstances include where you:

• order goods online;

• purchase goods to be delivered;

• apply to open a commercial credit trading account;

• purchase an extended warranty on a product or accidental damage protection;

• apply to purchase goods on finance;

• return goods;

• submit a request, enquiry, complaint, consumer guarantee or warranty claim.

How we will collect and hold your personal information

We generally endeavour to collect your information directly from you, unless it is unreasonable or impractical to do so. However, in some circumstances we may collect your information from third parties, such as:

1. your employer, your business contacts or other organisations that you deal with, regulatory or credit reporting agencies, a supplier or from a publicly available record;

2. you have consented to the collection (which would usually be via our privacy statement and/or credit application form, or if you are applying for a job with Oricom we may collect personal information about you from any third parties that you nominate as your referees in your application); or

3. you would reasonably expect us to collect your personal information in this way and it is necessary for us to collect this information for a specific purpose (such as investigation of a complaint).

We collect and hold personal information in a number of ways including:

1. when you order goods or services from us;

2. when you collect goods that you have ordered from us;

3. when you set up an account with us;

4. when you purchase certain products or extend warranties from us;

5. when you request for a refund or exchange of a product;

6. when you subscribe to our catalogues, mailing lists or e-newsletters;

7. when you provide us your details for customer care/technical support purposes;

8. when you browse our website;

9. when you submit an enquiry in our website;

10. when you complete surveys or provide online feedback, complaints or product reviews.

How we store and keep your information secure

We will take steps to hold personal information in a manner which is secure and protected from unauthorised access.

Your information may be held in either a physical form or in electronic form on our IT system or supply partners storage overseas. We will take steps to protect the information against the modification, disclosure or misuse by including such things as physical restrictions, password protection for accessing electronic IT systems.

We will also endeavour to ensure that our service providers have protection for electronic IT systems and other necessary restrictions. We will endeavour to ensure our staff are trained with respect to the security of the personal information we hold, and we will restrict any access where necessary.

We will endeavour to destroy and de-identify the personal information once it is no longer required.

The purpose for which we collect, hold, use and disclose personal information

We aim only to collect, hold, use and disclose personal information for the purpose for which it was provided, for a related secondary purpose, any other purpose you have consented to, and any purpose permitted under the law.

Oricom will primarily collect, hold, use and disclose your personal information for the purpose for which it was provided to us. For instance, we may collect, hold, use and disclose your personal information:

1. to complete the services we provide or in order to supply you or your organisation with goods ordered;

2. payment processing, processing a refund or exchange of a product;

3. to perform our administration and other operations including accounting, risk management, record keeping and archiving; 

4. to better understand our customers’ interests and requirements;

5. to assess credit applications, credit worthiness and credit guarantees;

6. to assess the suitability of a candidate for an employment position within our business and complete our recruitment and screening processes;

7. for complaints handling purposes, dealing with consumer guarantee or warranty claims and other customer care or technical support related activities;

8. to improve our products and services; 

9. online customer reviews, seeking feedback on products you have purchased and customer experience purposes such as seeking feedback on your shopping experience;

10. for product and recall purposes;

11. to contact customers for market research purposes, marketing our products and making recommendations or suggestions to you in relation to our products; and

12. application login credentials.

Where you have provide your consent, we may use your personal information that we have collected to promote and market products and services to you, including through methods such as email and SMS. We will not use your personal information for marketing purposes where you have opted-out of receiving such communications.

Please note that when you create an online account with us you agree to subscribe to Oricom marketing communications and your details will be added to our marketing database. When you subscribe to Oricom marketing communications, you agree to receive information relating to Oricom and our products and services.

If you subscribe to Oricom marketing communications, we may disclose your personal information in an anonymised form to third-party platforms such as Facebook, Instagram, Google and YouTube for the purpose of marketing products and services to you based on your personal information and preferences. For example, we may actively target banners and ads to you when you are on other website, apps and third-party platforms.

You can unsubscribe from Oricom marketing communications at any time by using the unsubscribe facility in the relevant communication. Alternatively, you may opt-out of receiving Oricom marketing communications by submitting a privacy enquiry by email to privacyofficer@oricom.com.au.

We may disclose or receive personal information or documents about you, including to/from third parties such as:

1. organisations that provide services to us in connection with our businesses, including customer support, customer experience/engagement, extended warranties, payment processing, administration, archival, data storage, data analytics, information technology, hosting, research, mail and delivery/shipping, distribution, logistics, marketing, auditing, consulting, financial and legal advisory, banking and other financial institutions, debt collection, fraud/theft prevention and/or identification, security or technical services and the operation and administration of our website. In some cases these service providers may collection your personal information on our behalf;

2. third party platforms like Facebook, Instagram and Google, in an anonymised form for the purposes of displaying banners, advertising or content based on your personal information or preferences;

3. if you return goods to us to be repaired, third-parties including our repairs system administrator, the manufacturer of the goods and authorised repairers;

4. law enforcement agencies to assist in the prevention, investigation and prosecution of criminal activities;

5. parties involved in any third-party acquisition or potential acquisition of an interest in Oricom or its assets;

6. our insurers and insurance brokers;

7. if goods you purchase from us are subject to a product recall, the manufacturer or distribution of those goods;

8. where it is unreasonable or impractical to obtain information directly from you;

9. other third-parties where you have specifically consented to the disclosure of information to these third-parties.

We may also collect personal information from other credit providers and Credit Reporting Bodies (CRBs).

Documents (including hard copy documents and electronic document such as emails) which coincidentally contain personal information will also be retained in accordance with Oricom’s normal document retention practices for accounting, legal and business purposes. Generally, you have no obligation to provide any personal information requested by us. However, if you choose not to do sow here we require this information, we may not be able to provide you with the goods and services that you want or deal with a request, enquiry or complaint that you have.

Disclosure to/from CRBs (Credit Reporting Bodies)

We may disclose or obtain personal information to/from a CRB in accordance with the permitted disclosures as defined under the Privacy Act and Credit Reporting Privacy Code 2020.

We may disclose or obtain your Credit Information to the following CRB’s listed below.

Centrix

PO Box 62512

Greenlane, Auckland 1546

Tel: 0800 236 874; 09 966 9706

Email: helpdesk@centrix.co.nz

Equifax

PO Box 912012

Victoria St West

Auckland 1142

Tel: 0800 692 733; 09 367 6200 

Email: publicaccess.nz@equifax.com

Experian

PO Box 9589

Newmarket, Auckland 1031

Tel: 0800 733 707

Email: creditreport@au.experian.com

 A copy of the credit reporting policy for the CRBs listed above will be available on their website or will be provided in hard copy upon request.

Using our website and Cookies

We may collect and store information about your use of our website, such as which pages you visit, the time and date of your visit and the IP (internet protocol) or MAC (media access control) address assigned to your device.

We and our internet service provider also collect information such as the pages you access on our website, the documents you download, the amount of time you spend on a page, which links you use to access our site and the type of device and browser you use. This information is used to improve the services we offer you, for statistical and website development and functionality purposes.

When cookies are used on this site, they store information about your visit, which may include a unique identifier or value to indicate whether you have visited a webpage. We may use this to identify you when you engage with our website more than once.

Most internet browsers are set up to accept cookies. If you do not wish to enable cookies, you may be able to change the settings of your browser to refuse all cookies or to notify you each time a cookie is sent to your computer.

If you click through to our website from any email or message we send to you, we may identify and collect information relating to your subsequent and previous use of our website, such as which pages you visit and for how long.

While we take great care to protect your persona information on our website and use data transmission encryption, unfortunately no data transmission over the internet can be guaranteed to be 100% secure. Accordingly, we cannot ensure or warrant the security of any information that you send to us or receive from us online. This is particularly true for information you send to us via email. We have no way of protecting that information until it reaches us. Once we receive your transmission, we use our best efforts to ensure its security in our possession.

Our website may contain links/plug-ins to other sites. We are not responsible for content of, or the privacy practices or policies, of those sites.

Our website may contain links to other websites of interest. However, once you have used those links to leave our site, note that we do not have any control over that other website. Therefore, we are not responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.

How you may access your personal information

You are entitled to access your personal information held in our possession (except in certain circumstances set out in the Privacy Act).

We will endeavour to respond to your request for personal information as soon as practicable in a manner as requested by you, and no later than 20 working days after receiving it.

You can make a request for access by sending a letter addressed to our Privacy Officer, details specified below.

The Privacy Officer

Oricom International Pty Ltd

Locked Bag 658

SOUTH WINDSOR NSW 2756

Email: privacyofficer@oricom.com.au

Phone: 1300 889 785

Fax: 02 4574 8888

With any request that is made we will need to authenticate your identity to ensure the correct person is requesting the information. We will not charge you for making the request, however if reasonable we may charge you with the costs associated with your request.

You will only be granted access to your personal information where we are permitted or required by law to grant access. We are unable to provide you with access that is unlawful.

If we refuse access to the information, written notice will be provided to you setting out:

1. the reasons for the refusal (except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so); and

2. the mechanisms available to complain about the refusal; and

3. any other matter prescribed by the regulations.

Correction

Should we hold personal information and it is inaccurate, out of date, incomplete, irrelevant or misleading, or incorrect you have the right to make us aware of this fact and request that it be corrected.

If you would like to make a request to correct your information please contact our Privacy Officer on the details above. In assessing your request we need to be satisfied that the information is inaccurate, out of date, incomplete, irrelevant or misleading. We will then take all reasonable steps to ensure that it is accurate, up to date, complete and not misleading.

It is our normal policy to resolve any correction requests within 30 days. If we require further time we will notify you in writing and seek your consent. Should we refuse to correct your personal information written notice will be provided to you setting out:

1. the reasons for the refusal (except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so); and

2. the mechanisms available to complain about the refusal; and

3. any other matter prescribed by the regulations.

We will endeavour to notify any relevant third parties of the correct personal information where necessary and required.

You may also request that we delete your Oricom account and/or your purchasing history and associated transactions. To request this please contact our Privacy Officer on the details above.

Complaints

In the event that you wish to make a complaint about a failure of us to comply with our obligations in relation to the Act or this policy please raise this with our Privacy Officer on the contact details above. We will provide you with a receipt of acknowledgment as soon as practicable.

After receiving a privacy complaint, we will consider whether we need any further information from you to properly consider and investigate the complaint, and may request such information from you. We will then conduct internal discussions with the relevant business units involved in the collection, holding, use or disclosure of your personal information which is subject of your complaint, and evaluate whether we believe that such collection, holding, use or disclosure of your personal information was in breach of the Privacy Act, and notify you of the results of your investigation of your complaint.  

If the conclusion of our investigation is that our collection, holding, use or disclosure of your personal information was in breach of the Privacy Act, we will take steps to remedy the breach as soon as reasonably practicable.

We will endeavour to respond to your complaint and attempt to resolve the issues within 30 days. However, if your complaint involves complex matters or requires extensive investigation and consultation, it may not be possible to respond within this timeframe.

If you are not satisfied with our response to your complaint you are entitled under the Privacy Act to make a complaint to the Privacy Commissioner. Information on how to make a complaint is available from the Commissioner’s website (https://www.privacy.org.nz/).  

Disclosure to overseas recipients

We may disclose your personal information to a person or organisation outside of New Zealand for one or more of the purposes set out in this policy. Oricom takes reasonable steps to ensure that any overseas recipient complies with the Privacy Act. 

We will not send your personal information outside of New Zealand unless:

1. It is necessary to complete your transaction; or

2. You have provided your consent; or

3. We believe on reasonable grounds that the organisation involved would only deal with your personal information in a similar manner to the requirements under the Privacy Act; or

4. Where otherwise allowed by the Privacy Act.

If you have any queries regarding our privacy policy or wish to find out more, please contact our Privacy Officer on the details list above.

Exemptions

Oricom sometimes handles personal information relying on exceptions under the Privacy Act. Any permitted handling of personal information under such exemptions will take priority over this Privacy Policy to the extent of any inconsistency.

Amendments to this Policy

Oricom reserves the right to amend this privacy policy at any time.