AURA BUY INVEST DONATE PTY LTD PRIVACY POLICY

Aura Buy Invest Donate Pty Ltd (ACN 640 240 964) (“Aura”) recognises the importance of respecting and protecting the privacy of our members and this Privacy Policy sets out how Aura protects the privacy of your personal information.

This Privacy Policy and all personal information collected and otherwise dealt with by Aura is subject to the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles (“APP”) contained in Schedule 1 of the Privacy Act, as amended from time to time. 

1.          Scope

This Privacy Policy sets out Aura’s practices in relation to the collection, holding, use and disclosure of personal information provided about individuals to Aura through Aura’s various platforms, including but not limited to its website, browser extension and mobile application (the “Aura Platforms”), other applications related to Aura and any services offered or provided by Aura (“services”). In this Privacy Policy we also explain how you can contact us if you have a query about any personal information that we may be holding about you.

2.          Acknowledgement

By continuing to use the Aura Platforms and/or services, you acknowledge that you have had the opportunity to read and understand this Privacy Policy, and consent to Aura collecting, holding, using and disclosing personal information supplied by you in accordance with this Privacy Policy.

3.          Personal Information

In this Privacy Policy, “personal information” has the same meaning as defined by section 6 of the Privacy Act, as amended:

information or an opinion about an identified individual, or an individual who is reasonably identifiable:

a)     whether the information or opinion is true or not; and

b)     whether the information or opinion is recorded in material form or not.

The kinds of personal information that we collect will vary depending upon our interaction with you and may include your name, billing or shipping address, contact telephone number(s), social media details, email address, credit card details, bank account details, drivers licence and other identification documents, usage data (see below) and other information that is necessary for the delivery of our services to you.

4.          Usage Data

We collect usage data automatically when you use access the Aura Platforms or use the services. Usage data may include information such as your device’s IP address, browser type, browser version, the parts of the Aura Platforms and services that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other data. When you access the services by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other data. We may also collect information that your browser sends whenever you use the Aura Platforms or when you access the services by or through a mobile device.

5.          Collection of personal information

In the course of regular business activity and in order to use the Aura Platforms and/or our services, Aura will from time to time collect, require and otherwise deal with your personal information.

Aura collects personal information from individuals in numerous ways, including for example when an individual: 

·       uses the Aura Platforms or our services;

·       contacts or corresponds with Aura via telephone, email, mail or directly through the Aura Platforms;

·       creates an Aura account;

·       subscribes to receive marketing from Aura;

·       provides us with personal information, including for example allowing information on social media to be shared with us or signing up for a promotion.

We may also collect personal information about you from third parties such as thirty party service providers who provide services on our behalf, including marketing agencies, and delivery service providers, third party platforms, including public sources and social networking sites, or where Aura is required to do so by law.

Aura does not generally take steps to seek additional personal information about any individual on the basis of information disclosed to it, except in circumstances where it is reasonably necessary for Aura to do so or as may be required by law.

We note that in certain circumstances, if you do not consent to the use of your personal information as outlined in this Privacy Policy or at the time of collection, you may not have access to our services and we might not be able to provide you with our services.

When collecting information from you – whether it be via the Aura Platforms, email, hardcopy or any other services – we will take reasonable steps to inform you of why we are collecting the information, the purposes for which we intend to use that information and to whom it may be disclosed.

6.          Use and disclosure 

Any personal information collected by Aura will be used or disclosed for the purpose for which it was given to Aura, for purposes which you have otherwise consented to, or for other purposes in accordance with the Privacy Act and/or applicable laws. 

Aura may use your personal information for purposes such as the following:

·       to operate, conduct and administer our services in accordance with our terms and conditions, including to provide verification or validation emails or account statements;

·       to meet our legal, accounting and reporting obligations, including as part of “know your customer” checks;

·       to identify our members, potential members and their representatives;

·       to confirm the eligibility of qualifying transactions and process and track transactions between:

o   you and us;

o   us and any of our participating businesses, payment card operators, program partners and other third party suppliers we have relationships with; or

o   you and any of our participating businesses, payment card operators, program partners and other third party suppliers we have relationships with;

·       to run future marketing campaigns;

·       to send promotional or other information about Aura’s services through e-mail, push notifications or some other means unless you otherwise instruct us to cease or refrain from sending you such information;

·       to send you communications in connection with our services unless you otherwise instruct us to cease or refrain from sending you such information;

·       to conduct research in relation to our services;

·       to monitor and improve our services; and

·       to process any enquiries you have about Aura.

Aura may disclose personal information we hold to any of the following: 

·       participating businesses;

·       payment card schemes;

·       our fund manager; 

·       other third party suppliers such as technical, payment and delivery service providers; and

·       for the purposes described above, and to other persons as described in this Privacy Policy.

Where applicable, we may handle or disclose personal information relying on applicable exemptions under the Privacy Act, including but not limited to, the related bodies corporate exemption and the employee exemption.

From time to time, there may be other purposes for which we collect, hold, use and/or disclose your personal information and Aura will provide you with information in relation to this.

7.          Overseas Disclosure 

We may disclose personal information to third parties and third party services providers located outside Australia in order to provide our services, including but not limited to, recipients in the United States of America, United Kingdom, Canada and New Zealand.

8.          Subscriptions and Marketing

When you create an Aura account, you give us consent to send you information on ways to earn rewards, specific offers and commercial advertising and marketing messages in relation to our services and the products and services of third parties that we believe you may be interested in. 

You may opt-out of receiving direct marketing messages by following the opt-out links. The request to opt out may take up to 7 days to process. Please note, opting-out of receiving direct marketing messages will not affect any service-related messages and notifications which you may still receive from us.

9.          Storage and Security 

Aura understands the importance of your personal information and has appropriate procedures to in place to safeguard the personal information we hold from misuse and unauthorised access or disclosure.

Aura will only retain your personal information for as long as necessary to fulfil the purposes it was collected for, or for the purposes of satisfying any fraud detection and prevention, legal, accounting, or reporting obligations we may have.

In some circumstances Aura may anonymise or de-identify your personal information (so that it can no longer reasonably identify you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Aura takes reasonable steps to maintain the security and privacy of your personal information and has processes in place to endeavour to ensure the security of your personal information. Some of the steps we take include:

·       implementing and using security restrictions to access our systems;

·        storing personal information in a database which is accessible only to the application server; and

·       preventing access to personal information by individuals to the extent possible.

10.       Cookies

To ensure we are meeting the needs and requirements of the Aura Platforms’ users, and to continue to develop our online services, we may collect aggregated information through the use of cookies. We may use cookies to collect data about your visit and to allow you to navigate from page to page without having to reload each time. 

Cookies and other tracking technologies help us to track transactions for cash back and improve the experience when browsing our website.

Aura also utilises other tracking technologies such as server to server tracking. When you click on a link, server to server tracking creates a unique identifier that is stored server-side, which is later matched if you make a conversion (such as a purchase).

Some cookies are essential to provide you with services available through the Aura Platforms and to enable you to get the benefits from your account. They help to authenticate users and prevent fraudulent use of Aura accounts. Without these cookies, some services cannot be provided, and we only use these cookies to provide you with those services.

You may control, refuse and/or delete cookies by using the appropriate setting on your browser as you wish, however, if you do so you may not be able to access portions of the Aura Platforms or the services. For example, it may mean that your transaction does not track and you will not be eligible for cash back.

11.       Links – External websites

Please note the Aura Platforms may contain links to other external websites. These links are provided as a convenience to you. Aura is not affiliated with these websites and accordingly has no control over, and is not responsible for their content, activities, privacy practice or other policies. Links to external websites are not covered by this Privacy Policy.

12.       Changes to Privacy Policy

Please note that we reserve the right to amend, modify, remove or vary this Privacy Policy at any time and without notice. You should check the Aura Platforms to take notice of any changes we may have made to this Policy. 

13.       Access to personal information

If you would like to access your personal information, please contact our privacy manager directly via the contact details found below under “Contact”. Alternatively, where your personal information in held in your online account, you may access this by signing into your Aura Account.

Aura will respond to a request for access to personal information within a reasonable period after the request is made. 

14.       Correction of personal information

In the event Aura holds personal information about you and you believe that any of the information we hold about you is inaccurate, out of date, incomplete or requires correction, please make a request to our office for correction. Contact details can be found below.

15.       Contact

If you have any questions or concerns about this Privacy Policy or how Aura handles personal information, or if you wish to contact Aura in relation to the personal information we hold about you, please contact Aura’s privacy manager:

By Phone: 1800 287 225

By Email: support@aura.club

If you decide to contact us for any of the reasons above, we request that you provide us with sufficient details regarding your reason for getting in touch with us.

16.       Privacy complaints

If you wish to make a complaint about a matter relating to privacy please contact the privacy manager using the details set out above (refer to “Contact”).

Any complaint received by Aura will be taken seriously and will be investigated and considered by Aura in due course. During this investigation we may need to seek further information from you as to the circumstances surrounding your complaint. Aura will endeavour to provide a response to the complainant within a reasonable period.

If you are not satisfied with the way in which we handle your inquiry or complaint in regard to your personal information, if applicable, you may contact the Office of the Australian Information Commissioner (“OAIC”). Contact details for the OAIC can be found at www.oaic.gov.au. 

Last Updated: 12 September 2022