Introduction
Lipa Pharmaceuticals Limited (Lipa) is committed to protecting the privacy of individuals and handling personal information responsibly and transparently in accordance with the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles (“APP”) as set out in Schedule 1 of the Privacy Act.
Scope
This Privacy Policy applies to all personal information collected, held, used and disclosed by Lipa Pharmaceuticals Limited relating to employees, contractors, job applicants, customers, suppliers, visitors and users of our websites and services.
What is Personal Information?
Personal information means information or an opinion about an identified individual or an individual who is reasonably identifiable.
What Information We Collect
We may collect customer, supplier, employee, contractor, applicant, website user and other parties’ information.
Personal information we collect about you may include but is not limited to identification information such as your name, address, email address, mobile phone number, reference checks, financial and payment information and such other information necessary or convenient for delivering our products and services.
If you choose not to provide certain personal information, we may be unable to provide products or services, process employment applications or fulfill our legal and contractual obligations.
Sensitive Information
We may collect sensitive information about you, including information relating to your health, disability, workers’ compensation claims, or other sensitive matters as defined under applicable privacy laws. We will only collect, hold, use, and disclose sensitive information where it is reasonably necessary for our functions or activities and with your consent, unless
otherwise permitted or required by law. Sensitive information provided to us will be handled with appropriate safeguards and used only for the purpose for which it was collected, or for related purposes permitted by law.
How We Collect Personal Information
Information may be collected directly from individuals, our suppliers, our customers or from authorised third parties such as recruitment agencies, referees and government authorities etc.
If a third party provides us with the personal information of another individual, without limiting any other provision of this Privacy Policy, the third party must acknowledge and agree that the other individual has authorised you to provide their personal information to us; and consents to us using their personal information for the purposes described in this Policy.
Why We Collect Information
To recruit staff, manage employment, provide products and services, satisfy legal obligations and support business operations. We will only use personal information for the purposes for which it was collected, related purposes you would reasonably expect, or as otherwise permitted or required by law. We will not sell, trade, rent or licence your personal information to third parties.
Website Cookies and Analytics
Our websites may use cookies and analytics tools to improve performance and user experience which may lead to the collection of some technical information.
Disclosure of Personal Information
We may disclose personal information and you consent to us disclosing such personal information to:
- third parties engaged by us to perform functions or provide Products or Services on our behalf;
- relevant regulatory bodies in the industry in which we or you operate;
- our professional advisors, including our accountants, auditors and lawyers;
- our related bodies corporate;
- persons or other parties authorised by you to receive information held by us;
- a government authority, law enforcement agency, pursuant to a court order or as otherwise required by law; or
- other parties with which we undertake business transactions.
We may disclose personal information to overseas service providers that support our operations. We take reasonable steps to ensure such providers handle information in accordance with Australian privacy requirements.
Lipa will only disclose personal information to other parties where it is necessary for business purposes or as required by law.
Security of Personal Information
In relation to all personal information, we will take all reasonable steps appropriate to the nature of the information held to:
- ensure that the personal information we collect is accurate, up to date and complete;
- ensure that the personal information we hold, use or disclose is, with regard to the relevant purpose, accurate, up to date, complete and relevant; and
- protect personal information from misuse, loss or unauthorised access and disclosure.
We require staff and service providers to respect the confidentiality of personal information.
Security measures include access controls, encryption, secure systems and employee training.
Retention of Personal Information
Where personal information is no longer required and legal retention obligations have been satisfied, we will securely destroy or de-identify personal information.
Access to Personal Information
Individuals may request access to personal information held by Lipa.
Correction of Personal Information
Individuals may request correction of inaccurate or outdated information.
Notifiable Data Breaches
Lipa will comply with the Notifiable Data Breaches Scheme under Part IIIC of the Privacy Act.
If we become aware that a Data Breach in respect of personal information held by us may have occurred, we will:
- investigate the circumstances surrounding the potential Data Breach to determine whether a Data Breach has occurred;
- if a Data Breach has occurred, carry out a reasonable and expeditious assessment of whether there are reasonable grounds to believe that the relevant circumstances amount to an eligible data breach; and
- take action as required by the Privacy Act or APP.
Disciplinary action will be taken against any employee found to be in breach of this policy.
Privacy Complaints
If you have a complaint about how we collect, use, disclose, manage or protect your personal information, or consider that we have breached the Privacy Act or APPs, please contact our Chief Financial Officer by mail at Lipa Pharmaceuticals Limited, 21 Reaghs Farm Road Minto N.S.W. 2566 or by phone on 02 8796 1400.
We will acknowledge complaints within a reasonable period and aim to resolve them within 30 business days.
If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner.
Policy Review
This policy will be reviewed periodically to ensure compliance with the Privacy Act, APP and all applicable Australian laws and regulations.
Effective Date
This policy is effective immediately.
Approval
This policy is approved by the Chief Financial Officer and the Chief Executive Officer.