Integria Healthcare Privacy Policy

Integria Healthcare (Australia) Pty Ltd (Integria) and its related companies (including Integria NZ Limited) (we, our, us) comply with the Australian Privacy Principles contained in the Privacy Amendment (Enhancing Privacy Protection) Bill 2012 amending the Privacy Act 1988 (Cth), the New Zealand Privacy Act 2020 and New Zealand Information Privacy Principles (to the extent these apply to each Integria entity).

This policy is in addition to Integria Terms & Conditions governing the website and should be read in conjunction with the Terms & Conditions. Integria recognises that your privacy is very important to you and that you have a right to control your personal information. We know that providing personal information is an act of trust and we take that seriously.

This Privacy Policy outlines the type of personal information we may hold, the purposes for which it is held, and how that information is collected, held, used and disclosed. Our site may provide links to third party websites. Integria is not responsible for the conduct of non-Integria companies linked to this site. You should refer to the privacy notices and policies of any third party sites.

How different types of personal information are collected?

The personal information that we collect could include your name, age, gender, the organisation you work for and ABN, your physical address, postal address, telephone and fax numbers and your email address. In some circumstances, a failure to provide such information could result in us being unable to assist you or provide our products or services to you.

We primarily collect information about you when you use or request a product or service, complete a survey, questionnaire or when you communicate with us by email, telephone, in writing or in person.

We will only collect information about an individual for purposes which are relevant to our business. For example, we may collect an individual's name, contact information and other details relevant to our business relationship with that person. In some cases, we may also be required by law to collect personal information, for example, occupational health and safety laws. This information may be required to respect an individual's request or provide our services.

In some instances if all necessary personal information is not provided, we may be unable to assess or process your information or provide you with the products or services you require.

We may also collect anonymous information regarding visitors to our website. This may include Internet Protocol (IP) address, previous sites visited, internet provider location and date and time of the visit.

Sensitive information

We may collect sensitive information, such as health information when it relates to the provision of a good or service or its evaluation. We will only collect this information with your consent or otherwise in accordance with the Australian Privacy Principles and the New Zealand Privacy Act 2020 (to the extent either are applicable).

For what purposes do we collect, hold, use and disclose your personal information?

It is important to know that by using our website:

• You agree that if you submit your personal information to us, we may create a database record about you.
• To receive our website services, you agree that we may collect information from you and from your use of our website, and you agree that this information may be disclosed to our service providers.
• You agree that we may use cookies on your browser (unless you remove them, please see below for explanation).
• You agree that we may contact you with information about products, special offers and updates (unless you have stated that you do not wish to receive these communications).
• We collect, hold, use and disclose your personal information for the following purposes:
  • to provide products or services to you;
  • to answer enquiries and provide information or advice about our products or services and/or special offers, and general health advice where appropriate;
  • to update our records and keep your contact details up to date;
  • to process and respond to any complaint made by you;
  • to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or in co-operation with any governmental authority of any country (or political sub-division of a country);
  • to ask you for your opinion or comments about our products and/or services;
  • to promote our products, services and offers to you through a range of mediums, including but not limited to email, social media and third party online advertising on websites such as Facebook, Instagram and Google;
  • to collect statistical data for marketing analysis; and
  • to protect the rights, goodwill or property of Integria Healthcare.

We sometimes handle personal information relying on exemptions under the applicable Act. Under the Australian Privacy Act 1988 (Cth), these include exemptions in relation to (i) employee records; (ii) related bodies corporate; (iii) provision of services to State or Territory authorities; and (iv) overseas operations relating to personal information of non-Australians. Any permitted handling of personal information und under such exemptions will take priority over this Privacy Policy to the extent of any inconsistency.

Services which may be accessed by telephone or by mail include:

Information on health conditions and products brought to you by the Integria Healthcare brands.

Services which may be accessed through some of our websites include:

• Information about new products or services.
• Special offers.
• Email newsletters.

Please note that information collected about you by our Naturopathic Helpline is not permanently recorded, and is securely discarded at the end of the query. Information collected by our Practitioner Clinical Support (Practitioner brands: MediHerb, Eagle, Eagle Clinical) is recorded, and is kept on file in the instance that we need to refer back to it if there necessary.

Restricted Access - Practitioner websites

Our Practitioner websites (www.mediherb.com.au, www.eaglenaturalhealth.com.au, myintegria.com) are restricted websites. Access to those portions of the website containing Professional Literature and other designated materials is limited to Qualified Health Care Professionals only, who have complied with Practitioner requirements for such access. Access to the website is managed by a secured user name, password, and registration system. If you have an identified user name and approved password, you may use it to log onto the website. If you are a legitimate health care professional who desires access to the website, you must complete the on-line application for registration on the relevant Practitioner brand website. The on-line form must be completed, including nominating your preferred user name and password, then submitted to the Practitioner brand as per the instructions on the website. 

Our Use of Cookies

Cookies are pieces of information that a website transfers to your computer's hard disk for record-keeping purposes. Most web-browsers are set to accept cookies. However, if you do not wish to receive cookies you may set your browser to refuse cookies. The use of cookies can enhance your enjoyment of what is offered on this website, because they can help personalise your experience. Cookies can also helps us improve the website by providing aggregate information on how people use the site and which areas are effective and those that are not.

Cookies in and of themselves do not personally identify users, although they do identify a user's browser. The cookies simply operate as a unique identifier which helps us to know what our users find interesting and useful on our website, almost like a questionnaire. We do not link this information back to other information that you have provided to us. We do not store any information inside cookies.

Website analytics and Social Media Sites

Our website uses Google Analytics, a service which transmits website traffic data to Google servers in the United States. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand website traffic and webpage usage.

By using this website, you consent to the processing of data about you by Google in the manner described in Google's Privacy Policy - external site and for the purposes set out above. You can opt out of Google Analytics if you disable or refuse the cookie, disable JavaScript, or use the opt-out service provided by Google - external site.

Integria also may use interfaces with social media sites such as Facebook, LinkedIn, Instagram, Twitter and others. If you choose to "like" or "share" information from this website through these services, you should review the privacy policy of that service. If you are a member of a social media site, the interfaces may allow the social media site to connect your visits to this site with other personal information.

Communicating with you

We may contact you at your email or other address (including social media pages), which you provide to us in order to:

• provide you with information that may be of interest about Integria Healthcare's brands, products and special offers and other matters which may interest you; and
• for those of you with an email address, to send you an email newsletter. By registering to receive email newsletters from Integria Healthcare, you consent to be the recipient of commercial and non-commercial electronic messages from Integria Healthcare and its brands.

We will not send you advertising information without first asking you whether you wish to have promotional information sent to you.

AdWords Remarketing Privacy Policy
This website uses Google AdWords

This website uses the Google AdWords remarketing service to advertise on third party websites (including Google) to previous visitors to our site. AdWords remarketing will display relevant ads tailored to you based on what parts of our site you have viewed by placing a cookie on your machine. This cookie does not in any way identify you or give access to your computer. The cookie is used to communicate to other websites "This person visited this page, so show them ads relating to that page." Google AdWords Remarketing allows us to tailor our marketing to better suit your needs and only display ads that are relevant to you. It could mean that we advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use advertising cookies (from DoubleClick) to associate your browser with interest and demographic categories, and serve ads based on your past visits to this website. Of course, any data collected will be used in accordance with our own privacy policy and Google’s privacy policy. Visit Google’s Privacy Policy for a full understanding of the data shared by Google to advertisers.

How to opt-out

If you do not wish to participate in our Google AdWords Remarketing, you can opt out by visiting Google's Ads Preferences Manager. You can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin. You can also opt out of any third-party vendor's use of cookies by visiting www.networkadvertising.org/choices/

Facebook Custom Audience

Personal Data collected: Cookies and email address.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

We also use search engine and social media sites to provide promotional news or marketing offers which may be of interest to you. If you consent to the sharing of your information with a third party, including social networking sites such as Facebook, your personal information will be disclosed to the third party and will be subject to the privacy policy and business practices of that third party.

We may share hashed portions of your personal information with certain strategic partners to make our business more responsive to your interests and/or those of like-minded consumers. For example, we may aggregate your email address together with the email addresses of others who use our website or our services and transmit the hashed data to Facebook for the purpose of creating “Custom Audiences” (where targeted ads are sent to people on Facebook who have already used our services or been to our website). You can opt out of being included in the Custom Audience at https://www.facebook.com/business/help/1415256572060999.

As Facebook controls the display of your ad preferences, please refer to Facebook's page titled About Facebook Adverts for an explanation on how to adjust your Facebook ad preferences, available at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

You can also opt out from a wide range of online advertising services using Network Advertising Initiative’s opt-out page or the Digital Advertising Alliance’s WebChoices tool.

Opting out of communication

An 'opt out' mechanism is offered, so that you may have the opportunity to decide to not receive marketing or promotional information from us. We will remove you from any of our lists that may be used for communication purposes. At any time you may contact the company to 'opt out' of any future direct marketing. Additionally on all direct marketing correspondence, the 'opt out' mechanism will be made clear. To contact us email: enquiries@integria.com

How is personal information disclosed?

Personal information held by us is disclosed by us in accordance with the Australian Privacy Principles and the Information Privacy Principles contained in the New Zealand Privacy Act 2020 (to the extent either are applicable). We will only disclose personal information to a third party where we have your consent, or where the disclosure is permitted or required by law. For example, we may disclose information as follows.

• Integria's related companies.
• External providers, such as suppliers, consultants and agents, including
  organisations that provide information technology and infrastructure support services
  that provide information technology and infrastructure support services.
• Tax, financial, audit and legal advisers.
• Government, regulatory and law enforcement bodies.

Generally, Integria will retain your personal information within Australia and New Zealand only and not use or disclose it to other overseas countries unless otherwise stated in this Privacy Policy. For MyIntegria online customers in New Zealand, personal information is stored in Australia as indicated in the MyIntegria Terms for which customer consent is obtained.

Integria is using third-party service provider, Okta, to assist in administering single sign on authentication on our MyIntegria, Eagle, Mediherb and Patient Ordering platforms. Okta has established a privacy policy to help users understand how Okta collects and uses personal information. Please refer to Okta’s Privacy Policy for details: https://www.okta.com/privacy-policy/.

The information may also be used by Integria or Okta for analysis, quality assurance and planning purposes. We may be unable to provide you with website access if you do not provide the personal information requested.

Event registration, marketing database and Live Chat services

Integria contracts out some functions and relies on third party suppliers to conduct specialised activities such as marketing database services provided by Mailchimp and Live Chat platform operated by Tawk.to. Services provided by these third parties are controlled and operated from the United States and are not intended to subject to the laws or jurisdiction of Australia. You agree that by providing personal information it may be accessed by these organisations providing services in any country where they have facilities or in which they engage service providers, and you consent to the transfer of information to countries outside of Australia, including the United States, which may have different data protection rules than those in Australia. These third-party service providers are required not to use your personal information other than to provide the services requested by us. We will take all reasonable steps necessary to ensure that any personal information transferred overseas is kept securely and in accordance with our privacy laws by the overseas entity.

Security of your personal information

We take precautions including administrative, technical and physical measures to safeguard your personal information against loss, theft and misuse, as well as against unauthorised access, modification, disclosure, alteration and destruction. We protect electronic data using a variety of security measures including password access, data back-up and firewalls.

Keeping personal information up-to-date

We seek to ensure that the personal information it holds is accurate, up-to-date and complete. If we are informed that the information it holds is inaccurate, out-of-date or incomplete, we will correct the information or ensure that the amendments or errors are noted.

What do we do with personal information when it is no longer needed?

We destroy personal information if it is no longer needed for the purposes for which it was collected, or if the law no longer requires us to retain it. We use secure methods to destroy or de-identify the information. We dispose of all hard copy documents and delete electronic information from our systems. 

Access and correction

At any time you can advise us of changes to your personal information. You have the right to ask for the personal information held about you and to advise of any inaccuracy. If you make an access request, we will ask you to verify your identity and specify what information you require. Your request must be in writing.

We may ask the reason for your request so we can assist you most effectively. However, you are under no obligation to provide a reason if you do not wish to. We reserve the right to charge a fee for any significant costs incurred by us in providing access to personal information.

Your trust in Integria Healthcare and our brands is very important to us. If at any time you want to know exactly what personal information Integria is holding about you, you are welcome to request it by e-mailing us at enquiries@integria.com.

Changing and deleting the information we have about you

If at any time you wish to change personal information that is inaccurate or out of date, please contact us by e-mailing us at enquiries@integria.com  and we will change this record. If you wish to have your personal information deleted, please let us know in the same manner as referred to above and we will take all reasonable steps to delete it unless we need to keep it for legal reasons.

Complaints

If you believe your personal information is not properly protected, or that there has been a breach or potential breach of this Privacy Policy or the privacy legislation, please contact us immediately and ask for your complaint or concern to be directed to the Privacy Officer.

We take breaches seriously and has procedures to help identify and resolve a breach, potential breach or complaint as quickly as possible. This includes appropriate escalation processes to the General Counsel and notification processes in the event of a serious breach.

Every complaint is forwarded by the staff member who receives it to the Privacy Officer. You will be notified of the process for dealing with the breach or potential breach. Your complaint will be thoroughly investigated and a suitable resolution negotiated with you.

If you are not satisfied with the resolution of your complaint by us, in Australia you may contact the Office of the Australian Information Commissioner (OAIC) (http://www.privacy.gov.au/complaints) who may investigate your complaint. In New Zealand, you may contact the Privacy Commissioner (http://www.privacy.org.nz) who can offer further guidance and investigate your complaint if necessary.

Further information

Our aim is to respond to all enquiries promptly.

For enquiries or feedback about this policy or for complaints about our handling of personal information, please email the Privacy Officer at privacy@integria.com or otherwise you can:

Mail to:
Privacy Officer
Integria Healthcare (Australia) Pty Ltd
Building 5, Freeway Office Park, 2728 Logan Road (PO Box 4854) Eight Mile Plains, QLD 4113

Phone: 1300 654 336

Future Changes

Our commitment to make our company and brand websites leaders in natural healthcare means that we are constantly adding to and changing this site. Because of this, from time to time, our policies will be reviewed and may be revised. Integria Healthcare reserves the right to change our Privacy Policy at any time and notify you by posting an updated version of the policy on our web site. The amended Privacy Policy will apply between us whether or not we have given you specific notice of any change.

ADDITIONAL RIGHTS AND INFORMATION FOR INDIVIDUALS LOCATED IN THE EU OR UK

In addition to the Australian laws, individuals located in the European Union or European Economic Area (EU) may also have rights under the General Data Protection Regulation 2016/679 and individuals located in the United Kingdom (UK) may have rights under the General Data Protection Regulation (EU) 2016/679) (UK GDPR) and the Data Protection Act 2018 (DPA 2018) (together, the GDPR). This Appendix outlines the details of the additional rights of individuals located in the EU and UK as well as information on how we process the personal information of individuals located in the EU and UK.

Under the GDPR individuals located in the EU and the UK have extra rights which apply to their personal information. Personal information under the GDPR is often referred to as personal data and is defined as information relating to an identified or identifiable natural person (individual). This Appendix sets out the additional rights we give to individuals located in the EU and UK, as well as information on how we process the personal information of individuals located in the EU and UK. Please read the Privacy Policy above and this Appendix carefully and contact us at the details at the end of the Privacy Policy if you have any questions.

What personal information is relevant?

This Appendix applies to the personal information set out in the Privacy Policy above. This includes any Sensitive Information also listed in the Privacy Policy above which is known as ‘special categories of data’ under the GDPR.

Purposes and legal bases for processing

We collect and process personal information about you only where we have legal bases for doing so under applicable laws. We have set out below, in a table format, a description of all the ways we plan to use your personal information, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal information for more than one lawful ground depending on the specific purpose for which we are using your data. Please reach out to us if you need further details about the specific legal ground, we are relying on to process your personal information where more than one ground has been set out in the table below. 

If you have consented to our use of data about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your data because we or a third party have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer doing business with us. Further information about your rights is available below.

Data Transfers

The privacy protections available in the countries to which we send data for the purposes listed above may be less comprehensive than what is offered in the country in which you initially provided the information. Where we transfer your personal information outside of the country where you are based, we will perform those transfers using appropriate safeguards in accordance with the requirements of applicable data protection laws and we will protect the transferred personal information in accordance with this Privacy Policy and Appendix. This includes:

• only transferring your personal information to countries that have been deemed by applicable data protection laws to provide an adequate level of protection for personal information; or
• including standard contractual clauses in our agreements with third parties that are overseas.

Data retention

We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Extra rights for EU and UK individuals

You may request details of the personal information that we hold about you and how we are process it (commonly known as a “data subject request”). You may also have a right in accordance with applicable data protection law to have your personal information rectified or deleted, to restrict our processing of that information, to object to decisions being made based on automated processing where the decision will produce a legal effect or a similarly significant effect on you, to stop unauthorised transfers of your personal information to a third party and, in some circumstances, to have personal information relating to you transferred to you or another organisation.

If you are not happy with how we are processing your personal information, you have the right to make a complaint at any time to the relevant Data Protection Authority based on where you live. We would, however, appreciate the chance to deal with your concerns before you approach the Data Protection Authority, so please contact us in the first instance using the details set out above in our Privacy Policy.

ADDITIONAL RIGHTS AND INFORMATION FOR INDIVIDUALS LOCATED IN THE UNITED STATES

This US Supplemental Privacy Notice (“Supplemental Notice”) applies only to information collected about California, Colorado, Virginia, Utah, Connecticut and Nevada consumers. It provides information required under the following laws, (collectively, “US State Privacy Laws”):

• California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively, the “CPRA”) 
• Colorado Privacy Act of 2021 (the “CPA”)
• Connecticut Data Privacy Act (“CTDPA”) 
• Utah Consumer Privacy Act of 2022 (the “UCPA”)
• Virginia Consumer Data Protection Act of 2021 (the “VCDPA”) 
• Chapter 603A of the Nevada Revised Statutes (the “NRS”)

Some portions of this Supplemental Notice apply only to consumers of particular states. This Supplemental Notice forms part of and supplements and amends, as applicable, our Privacy Policy | Integria Australia.

This Supplemental Notice applies solely to individuals who reside in the USA (“consumers” or “you”). This Supplemental Notice complies with the California Consumer Privacy Act of 2018, as amended, (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this Supplemental Notice. This Supplemental Notice does not apply to personal information outside the scope of the CCPA, including, for example:

• Personal health information collected, processed, sold, or disclosed pursuant to the Health Insurance Portability and Accountability Act (“HIPAA”).
• Personal information bearing on a consumer’s credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living as set forth in the Fair Credit Reporting Act.

Children

The Sites are not intended for children under the age of 16. Integria does not knowingly collect personal information from users under 16 years of age. In the event that Integria becomes aware that it has collected personal information from a user under 16 years of age, it will take steps to delete such information from its database. If you believe that we might have any information from or about a child under the age of 16, please contact us at  privacy@integria.com.

Integria as a Service Provider

When Integria acts as a service provider for its business customers, it collects some personal information on behalf of its customers subject to its contractual obligations.  When Integria acts as a service provider for its business customers, it follows the instructions of its customer on how to process personal information on its customer’s behalf.  The provisions of this Supplemental Notice do not apply to the personal information that Integria processes on behalf of our business customers.

Disclosures

The below chart lists the categories of personal information that Integria may collect or has collected in the past 12 months and how it discloses such information. Integria may also disclose your personal information to a third party, such as a care provider, upon your request or at your direction.

Uses of Personal Information

Integria may use personal information for the following purposes:

• to process and fulfill your order(s) for products and/or services;
• to respond to any of your inquiries or questions about our products and/or services;
• for internal marketing purposes;
• to provide you with additional and updated information, materials, and other advertisements regarding Integria products and/or services;
• to offer you other materials and/or information that Integria believes may be of interest to you;
• to comply with legal obligations and cooperate with government officials or parties in litigation under process of law, to prevent a crime, or as otherwise required by law;
• to enforce or comply with Integria contracts with you, your care provider, or other third parties or protect the security or integrity of the Site;
• to protect against fraud, identity theft, or a threat of safety or destruction of property;
• to protect against legal liability;
• to create and manage user accounts;
• to process payment;
• to communicate with the user’s health care provider regarding the user’s use of the Site;
• to perform data analyses and/or research (including de-identification and aggregation of personal information) or to conduct surveys; and/or
• to evaluate you for employment at Integria or to begin the employment process.

Integria may share user product order information, including the items and quantities ordered, with the user’s health care provider who recommended the product(s).

Sensitive Personal Information

Sensitive Personal Information consists of: (1) government identifiers, such as Social Security Numbers and drivers’ license numbers; (2) account log-in information (e.g., financial account or credit card numbers in combination with any required access codes or passwords); (3) precise geolocation information; (4) racial or ethnic origin, religious or philosophical beliefs, or union membership; (5) content of postal mail, email, and text messages, unless the business is the intended recipient of the subject communications; (6) genetic data; and (7) biometric information that uniquely identifies a consumer or information concerning a consumer’s health, sex life, or sexual orientation.  To the extent we collect information that is considered Sensitive Personal Information under CCPA, it is listed in the chart above. Integria may use information regarding your health to make inferences that allow us to provide you with information and recommendations regarding our products.

Sources of Information

Integria may collect personal information from the following sources: you, your agents, through our third-party service providers, data analytics providers, social media networks, and your care provider.

Sale and Sharing of Personal Information

CPRA defines “Sharing” as any disclosure of personal information to third parties for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. “Cross-context behavioral advertising” is defined as the targeting of advertising based on your personal information obtained from your activity across websites, applications, or services outside of the Sites or Integria Services. 

In the past 12 months, we have not sold personal information. To ensure we can share our products with you and tailor our advertisements, we do allow some of our advertising partners to use cookies, pixels and other technologies to collect personal information on our website or services, which may constitute Sharing under CPRA.

Data Retention

We will retain your personal information for no longer than is necessary for the purpose stated in this Privacy Policy, unless otherwise extending the retention period is required or permitted by law or subject to our retention policies as may be in place from time to time. The data storage period may vary with scenario, product, and service. The standards we use to determine the retention period are as follows: the time required to retain personal information to fulfill business purposes, including providing products and services; maintaining business records; controlling and improving the performance and quality of the Sites; handling possible user queries or conducting assessments of user complaints; whether you agree to a longer retention period; and whether the laws, contracts, and other equivalencies have special requirements for data retention.

California Residents Rights

The CCPA provides California residents with specific rights regarding their personal information, described below. Below are your CCPA rights and how to exercise those rights.

a. Access to Specific Information and Data Portability Rights (“Right to Know”)

You have the right to request that Integria disclose certain information to you about its collection and use of your personal information over the past 12 months. You may request:

• The categories of personal information Integria collected about you;
• The categories of sources of personal information Integria collected about you;
• Integria business or commercial purpose for collecting that personal information;
• The categories of third parties with whom Integria shares that personal information; 
• The specific pieces of personal information Integria collected about you including whether or not Integria collects Sensitive Personal Information; or
• Whether information, if any, is Sold or Shared by Integria.

b. Deletion Request Rights

You have the right to request that Integria delete some or all of the personal information that it has collected from you and retained, subject to a number of exceptions. Integria is not required to delete personal information that is: (i) necessary to complete a transaction with you or for warranty or product recalls; (ii) used for security purposes, to prevent fraud, to fix errors, or to comply with law; (iii) reasonable for Integria to use for internal purposes given its relationship with you; or (iv) compatible with the context in which you provided the information.  The list of exceptions above is not exhaustive, and we may also deny a deletion request as otherwise permitted by law.

c. Limiting Our Use of Your Information

In certain circumstances, you have the right to limit our non-essential use of your personal information, including Sensitive Personal Information.  

d. Exercising Your Rights

To exercise your rights described above, please submit a verifiable consumer request to Integria by either:

• Calling us at + 61 1300 654 336.
• Contact us by completing the form at Contact Us | Integria Australia.
• Emailing our Privacy Officer at privacy@integria.com.

Only you, or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. If you are making a request on behalf of another person, you must provide written legal documentation that you are authorized to act on behalf of that individual. 

e. Response Timing and Format

Integria endeavors to respond to a verifiable consumer request within 45 days of its receipt. If Integria requires more time (up to 90 days), it will inform you of the reason and extension period in writing. Integria will deliver the written response by mail or electronically, at your option.

Any disclosures Integria provides will only cover the 12-month period preceding the date it receives your verifiable consumer request. The response Integria provides will also explain the reasons it cannot comply with a request, if applicable. For data portability requests, Integria will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Integria does not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If Integria determines that the request warrants a fee, it will tell you why it made that decision and provide you with a cost estimate before completing your request. 

f. Non-Discrimination

You have the right to not be discriminated against for exercising any of your CCPA rights. Unless permitted by the CCPA, Integria will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Your Rights and Choices

California, Colorado, Virginia Utah, and Connecticut consumers have certain rights with respect to the collection and use of their Personal Information. Those rights vary by state. As required by the CPRA, we provide detailed information below regarding the data subject rights available to California consumers. Colorado, Virginia, Utah, and Connecticut consumers have similar rights and can find more details by referencing the applicable US State Privacy Law.

• Access and Data Portability Rights: You may request, up to twice every 12 months, a copy of the specific pieces of personal data that we have collected, used or disclosed about you in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows you to transmit this information to another entity without hindrance. You have the right to request that we disclose to you the following information in respect of our collection and use of your Personal Information over the past 12 months:
  • The categories of Personal Information we collected about you.
  • The categories of sources for the Personal Information we collected about you;
  • Our business or commercial purpose for collecting or selling your Personal Information;
  • The categories of third parties with whom we share your Personal Information;
  • The specific pieces of Personal Information we collected about you;
• If we sold or shared your Personal Information for a business purpose, including separate lists for
  • disclosures for a business purpose, identifying the Personal Information categories disclosed; and
  • sales, identifying the Personal Information categories sold and that each category of recipient purchased.
• Correction: You may request correction of your Personal Information that we have collected about you if it is inaccurate or incomplete.
• Deletion: You may request deletion of your Personal Information that we have collected about you, subject to certain exceptions.
• Right to Opt Out of Sharing, Disclosure, or Sale of Personal Information: You have the right to direct us to not share, disclose, or sell your Personal Information.  You may submit such requests via the “Do Not Sell or Share My Personal Information” link on our websites or other ways as described in this Privacy Notice. Once we receive your request, we will ensure that your Personal Information is not sold to or shared with third parties.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising your data subject rights. We will not discriminate against you for exercising your data subject rights.
• Right to Restrict or Limit the Use of Sensitive Personal Information: You have the right to restrict the use and disclosure of Sensitive Personal Information to certain purposes related to the offering of goods or services as listed in the CPRA.

We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, when a California or Connecticut consumer authorizes an agent to make a request on their behalf, we may require the agent to provide proof of signed permission from the consumer to submit the request, or we may require the consumer to verify their own identity to us or confirm with us that they provided the agent with permission to submit the request. You may also make a verifiable consumer request on behalf of your minor child. In some instances, we may decline to honour your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.

The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with your Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us.

We will only use the Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision, and we reserve the right to either refuse to act on your request or charge you a reasonable fee to complete your request if it is excessive, repetitive, or manifestly unfounded.

You may have a right to appeal a decision we make relating to requests to exercise your rights under applicable local law. If your request is denied or if we do not take action on your request, we will inform you in writing of the reasons for not taking action, as well as provide an explanation of any rights you have to appeal the decision.

Changes to this Supplemental Notice

We reserve the right to amend this Supplemental Notice at our discretion at any time. When we make changes to this Supplemental Notice, we will post the updated Notice on our website.

CANADIAN NOTICE

ADDITIONAL RIGHTS AND INFORMATION FOR INDIVIDUALS LOCATED IN CANADA

This Appendix is for Canadian Residents (“Canadian Notice”) and supplements Integria’s Privacy Policy | Integria Australia. Any terms we use in this Canadian Notice that aren”t defined will have the meaning we provide in the Privacy Policy.

International Data Transfers. We are based in Australia and any information collected through the services is stored and processed in Australia or as otherwise stated in our Privacy Policy. If you are located in Canada, you understand that in using the services your personal information will be transferred to and processed in Australia and other countries where our third-party service providers and partners operate. These countries may have data protection laws that are different to the laws of your country and, in some cases, may not be as protective.

Profiling Activities. Integria uses standard tracking technologies like cookies to distinguish you from other users and to collect certain information about how you use and interact with the Services (as described in our Privacy Policy | Integria Australia). This helps us to provide you with a positive user experience and allows us to provide and improve our Services. For more information about the types of tracking technologies we use and how you can control them, please see our Cookie Notice.

Your Rights and Choices. You may be able to exercise certain rights with respect to your personal information that we collect and control:

• Access. You may ask us in writing whether we have collected personal information about you and to obtain access to that personal information.
• Correction. If you believe the personal information we have about you is inaccurate or incomplete, you can ask us to correct it.
• Deletion. We will delete personal information when we no longer have a lawful basis to retain it. You can ask us to delete personal information that you believe we no longer are required to retain.

You may submit a request to exercise your rights by either:

• Calling us at + 61 1300 654 336.
• Contact us by completing the form at Contact Us | Integria Australia.
• Emailing our Privacy Officer at privacy@integria.com.

We may need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account, if you have one. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

Changes to this Canadian Notice. Integria may modify or update this Canadian Notice from time to time so you should review this Canadian Notice periodically.

This document was last updated on 8 July 2024.

See Terms & Conditions.