Further Information Regarding Our Privacy Policy
We
are committed to protecting the privacy of our customers and
web site visitors. For that reason we follow the follow guidelines
Adoption
and Implementation of a Privacy Policy: An organisation engaged
in online activities or electronic commerce has a responsibility
to adopt and implement a policy for protecting the privacy of
individually identifiable information. Organisations should
also take steps that foster the adoption and implementation
of effective online privacy policies by the organisations with
which they interact; e.g., by sharing best practices with business
partners.
Notice
and Disclosure
An
organisation's privacy policy must be easy to find, read and
understand. The policy must be available prior to or at the
time that individually identifiable information is collected
or requested.
The
policy must state clearly: what information is being collected;
the use of that information; possible third party distribution
of that information; the choices available to an individual
regarding collection, use and distribution of the collected
information; a statement of the organisation's commitment to
data security; and what steps the organisation takes to ensure
data quality and access.
The
policy should disclose the consequences, if any, of an individual's
refusal to provide information. The policy should also include
a clear statement of what accountability mechanism the organisation
uses, including how to contact the organisation.
Choice/Consent
Individuals
must be given the opportunity to exercise choice regarding how
individually identifiable information collected from them online
may be used when such use is unrelated to the purpose for which
the information was collected. At a minimum, individuals should
be given the opportunity to opt out of such use.
Additionally,
in the vast majority of circumstances, where there is third
party distribution of individually identifiable information,
collected online from the individual, unrelated to the purpose
for which it was collected, the individual should be given the
opportunity to opt out.
Consent
for such use or third party distribution may also be obtained
through technological tools or opt-in.
Data
Security
Organisations
creating, maintaining, using or disseminating individually identifiable
information should take appropriate measures to assure its reliability
and should take reasonable precautions to protect it from loss,
misuse or alteration. They should take reasonable steps to assure
that third parties to which they transfer such information are
aware of these security practices, and that the third parties
also take reasonable precautions to protect any transferred
information.
Data
Quality and Access
Organisations
creating, maintaining, using or disseminating individually identifiable
information should take reasonable steps to assure that the
data are accurate, complete and timely for the purposes for
which they are to be used.
Organisations
should establish appropriate processes or mechanisms so that
inaccuracies in material individually identifiable information,
such as account or contact information, may be corrected. These
processes and mechanisms should be simple and easy to use, and
provide assurance that inaccuracies have been corrected. Other
procedures to assure data quality may include use of reliable
sources and collection methods, reasonable and appropriate consumer
acess and correction, and protections against accidental or
unauthorised alteration.
