Privacy policy
Purpose
Elk acknowledges the requirements of the Australian Privacy Principles as set out in the Privacy Act 1988 (Cth). This Privacy Policy provides a comprehensive explanation of how the company collects, manages, and secures your personal information.
In all instances the company will collect, use, and disclose only the personal information that is reasonably necessary for the proper operation and management of our business activities. We are committed to ensuring compliance with the APPs and any registered APP codes by implementing relevant practices, procedures, and systems.
Application
This policy applies to anyone that provides personal information to Elk.
Definitions
‘APPs’ Means the Australian Privacy Principles
‘Company’ Means Elk Cocktail Lounge
‘Customers’ Includes any person/org who engage with Elk in the provision of its services
‘Employee’ Means any permanent, casual, or temporary person employed directly by Elk Cocktail Lounge
‘Employee Records’ Means any record of personal information relating to the employment of the employee. For example, Employee Records includes health information about the employee and personal information about:
• the engagement, training, disciplining, or resignation of the employee.
• the termination of the employment of the employee.
• the terms and conditions of employment of the employee.
• the employee’s personal and emergency contact details.
• the employee’s performance and conduct.
• the employee’s hours of employment.
• the employee’s salary or wages.
• the employee’s membership of a professional or trade association.
• the employee’s trade union membership.
• the employee’s recreation, long service, sick, personal, maternity, paternity or other leave; and
• the employee’s taxation, banking, or superannuation affairs.
Policy Requirements
Elk Cocktail Lounge is committed to consistent compliance with the Privacy Act 1988 (Privacy Act) and the Australian Privacy Principles that relate to private sector organisations.
This Privacy Policy details how the company comply with our privacy obligations and how we collect and manage the personal information you provide to us.
What is your personal information?
When used in this policy, the term personal information is defined in the Privacy Act as:
“….information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.”
In summary, personal information is any information about you that can be linked to you.
What personal information do we collect and hold?
There are two types of personal information: Sensitive and Non Sensitive.
Non Sensitive personal information can be information such as your name, your address, your email address, etc. If you work for the company we will likely have some of this information.
Sensitive information is a specific category of personal information and may include health information about you , and other personal information of this type. If the company requires this information from you the company will seek your specific consent before we ask you for it.
The company also collect information which is not personal as it cannot be linked to you and is not covered by this Policy.
How do we collect and hold your personal information?
We may collect your personal information directly from you unless it is unreasonable or impracticable to do so. We may also collect personal information in a variety of ways, including via the Elk website, when you respond to e-mail questionnaires or when you provide personal information to use by other means, such as in-person during conversations with our representatives, providing a business card, over the phone and by email.
We may also collect personal information from third parties including:
- Our service providers
- Business affiliates
- Customers
- Other third parties such as employers and persons nominated by you as referees or government agencies
Personal information is held by us in secure physical and electronic data systems.
Why do we collect and hold personal information?
There are reasons why we need to use personal information on occasions.
Those reasons include:
- To provide you important work-related information including workplace health and safety, work rosters and other information relating to your engagement with the company.
- To update the company records and keep your records up to date
- To comply with any law, rule, regulation, lawful and biding determination, decision or direction of a regulator, or in cooperation with any governmental authority of any country.
The company’s commitment under this Policy is that it will not intentionally disclose (and will take commercially reasonable steps to prevent the accidental disclosure of) your personal information to third parties, except when we are under legal obligation to do so.
Are cookies and IP addresses used?
The company use cookies to enhance your experience on Elk‘s website. Cookies hold information that identify an individual computer but are not used to identify any personal information about you.
Web browsers may have the option to disable cookies. However, if cookies are disabled, Elk website may not operate in the most efficient or desired way.
Direct marketing materials
The company may send you direct marketing and information about our services that the company consider may be of interest to you. These communications may be sent in various forms, including mail, SMS and email in accordance to applicable marketing laws, such as the SPAM ACT 2003 (Cth).
If you indicate a preference for a method of communication, the company will endeavour to use that method wherever practicable to do so. You can consent to receiving direct marketing communications and information from us. However, at any time you may opt out of receiving marketing communications for the company by contacting us or by using opt out facilities provided in the marketing communications, from which the company will ensure your name is removed from the mailing list.
The company do not provide personal information to other organisations for the purposes of direct marketing without consent by you.
How can I access, change and / or delete information?
You may request access to any personal information the company holds about you by contacting the Venue Manager. The company will then contact you to request sufficient information to allow us to confirm your identity. As soon as practicable after your request is received, the company will give you access to your information.
There may be times when the company cannot grant you access to the personal information we hold. For example, if it would result in a breach of confidentiality or law. The company will let you know in this case.
You should be aware the company is required by law to retain certain personal information (such as payroll records); such information will not be deleted. The company will let you know if we cannot delete your personal information for legal or other reasons.
Security
The company takes reasonable steps to ensure your personal information is protected from misuse, loss and from unauthorised access or disclosure.
The company may hold your information in either or both electronic and hard copy form. Only authorised personnel will be provided with access to personal information. These parties are required to treat this information as confidential and deal with it in accordance with this Privacy Policy and the company’s Handling Confidential Information Policy. Personal information is destroyed or de-identified when no longer needed.
If personal information is lost or subjected to unauthorized access, use, modification, disclosure, or other misuse (Data Breach), the company will take all necessary steps to immediately contain the Data Breach, rectify the Data Breach and prevent the Data Breach from occurring in the future. Where the Data Breach is deemed eligible and likely to result in serious harm, as identified in the Privacy Amendment (Notifiable Data Breaches) Act 2017, the company will take reasonable steps to notify you and provide you with relevant information.
Please bear in mind that the internet is not completely secure anywhere in the world so any information which you transmit to the company online is transmitted at your own risk.
Contact
If you have any questions in relation to your personal information, the company’s Privacy Policy or any concerns or a compliant regarding the treatment of your personal information by the company, please e-mail us at info@elkbar.com.au
You can also write to us at 562 High Street, Penrith, NSW, 2750 or call 1800 355 227 and ask for the Venue Manager. The company will treat your requests or complaints confidentially. The Venue Manager will contact you within a reasonable time after receipt of your request or compliant to discuss your concerns and to outline options regarding how they may be resolved.
Responsibilities
The company will ensure every employee in Elk is aware of this policy.
RACI
• Responsible – It is the responsibility of the Venue Manager to implement, maintain and communicate this policy.
• Accountable – The final authority for this policy lies with Owners/Directors.
• Consulted – When making changes to this policy consultation should be carried out with the leadership team.
• Informed – All changes to this policy should be communicated to all employees.
Non-Compliance
Failure of an Employee to comply with this policy may result in disciplinary action, up to and including termination of employment.