Large Format Retail Association Limited (ACN 131 555 612) (LFRA) respects your privacy and is committed to protecting your personal information.

1. Purpose

This Privacy Policy (Privacy Policy) sets out the kinds of personal information we collect and hold, and how we can collect, use, disclose, secure and store your personal information. This Privacy Policy also tells you how to access and amend your personal information, and how you can make a complaint if you think we have breached our privacy obligations.

If you use or access our website(s) or services, including the Unwrap website available at www.unwraplfra.com.au (Platforms) you will be deemed to have accepted and consented to this Privacy Policy.

We will update this Privacy Policy when our information handling practices change. Updates will be published on our website(s) and a copy of the latest version of this Privacy Policy is available at [insert link].

2. What is personal information?

In general terms, personal information is information or an opinion about a user that personally identifies individuals either directly or indirectly.

3. What personal information do we collect?

We collect and hold information which is reasonably necessary for us to provide you with access to the Platforms. The extent and type of personal information collected will vary depending on how you interact with us. We may collect personal information for related purposes, but only if you reasonably expect us to, or consent to us doing so.

The personal information we collect about you may include:

• Personal details such as your name, contact details (email, phone number) and position
• Information about your business or your organisation, including its trading locations and LFRA membership status/category
• Photos, video, media and copyright in relation to Large Format Retail property listings, and/or your business or organisation (such as advertisements).

4. How do we collect and hold your personal information?

We collect personal information from you when:

• you create an access account on our Platforms;
• you fill in details in your user account on our Platforms;
• you upload content to our Platforms;
• you interact with other registered users electronically on our Platforms; and
• you interact with us electronically or via mail.

We may also collect non-identifying information in relation to your use of our website(s) through cookies and other means to monitor and improve our website(s) and services.

5. Collection of personal information from third party websites

The Platforms may contain external links to websites operated by third parties. If you access a third-party website from the Platforms, your personal information may be collected by that third party website.

We make no representations or warranties in relation to the privacy practices of any third-party provider or website and we are not responsible for the privacy policies or the content of any third-party provider or website.

You are also advised that there are inherent risks in transmitting information across the internet, including the risk that information sent to or from a website may be intercepted, corrupted or modified by third parties.

6. How do we use personal information?

We will only use your personal information to fulfil the purpose for which it is collected. These purposes include the following:

• to provide and maintain the Platforms and their contents (which may include the disclosure of personal information)
• to establish your user account, and enable you to use the Platforms
• to contact you to provide notices, or to respond to your queries
• to undertake an internal investigation or an action that is required or authorised by law
• internal administrative purposes, including carrying out analytics and reporting

7. How do we disclose your personal information?

We may disclose your personal information to third parties in circumstances where you would reasonably expect us to disclose your information. For example, we may disclose your personal information to our third-party service providers, including our IT, marketing and professional service providers, where we determine it is necessary.

We may also disclose your personal details where required or authorised by law.

8. How do we protect your personal information?

We take steps to protect your personal information, including by implementing anti-virus software, fire walls, and password protection on our files and across our software and hardware. We also regularly update our storage and data systems and protections.

We will not keep your personal information for longer than we need to. In most cases, this means that we will only retain your personal information for the duration of your relationship with us unless we are required to retain your personal information to comply with applicable laws, for example record-keeping obligations.

9. Data Breaches

We will notify you as soon as possible if a data breach has occurred that involves your personal information. In those circumstances, we may tell you what has occurred, what personal information was involved, what the implications are, what you can do, and what we will do to address the breach.

10. Accessing and correcting your personal information

You may access the personal information we hold about you and to update and/or correct it. You can either do this directly by updating your user account, or by contacting us at [email protected] We will respond to you as soon as practicable, and if there is a delay we will advise you in writing.

11. Privacy Policy Complaints and Enquiries

If you would like to leave feedback or complain about the service you have received from us, or if you think we have breached your privacy obligations, please contact us at [email protected]. We will promptly investigate and resolve your complaint and respond to you as soon as possible.