Cartisan Group Pty Ltd (“Cartisan”, “we”, “us”) is committed to protecting your privacy. This policy outlines our obligations to you in respect of how we manage your personal information.
About this policy
We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your personal information.
A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner at www.oaic.gov.au.
What personal information we collect and why
Personal information is information or an opinion that identifies an individual. Examples of personal information we collect include names, email addresses, organisation names and the content of messages you send us.
This personal information is obtained from your interaction with our website, from correspondence and, occasionally, from third parties. We collect it for the primary purpose of responding to you and providing our services, and for secondary purposes closely related to that purpose where you would reasonably expect such use.
When we collect personal information we will, where appropriate and where possible, explain why we are collecting it and how we plan to use it.
Enquiries sent through this website
When you send an enquiry through our contact form we collect your name, email address and message, and your organisation and preferred timeframe if you choose to give them. The enquiry is delivered to our inbox by email using Resend, our transactional email provider. We use it only to reply to you and to discuss the work you have described.
To keep the form free of spam, it uses Vercel BotID, which checks invisibly that a submission comes from a person using a browser. The site is hosted by Vercel, which processes standard request information (such as IP address and browser type) to serve and protect the site.
Website analytics
Our website uses Google Analytics 4, a web analytics service provided by Google, to understand how visitors use the site, such as which pages are viewed and how visitors arrive. Google Analytics uses cookies and collects information such as your approximate location, device and browser. Google Analytics 4 does not log or store IP addresses. We do not use this information to identify you.
You can read more about how Google uses information from sites that use its services in Google’s privacy documentation, and you can opt out with the Google Analytics opt-out browser add-on.
Sensitive information
Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information. We do not ask for sensitive information. If we receive it, it will be used only:
- for the primary purpose for which it was obtained
- for a secondary purpose that is directly related to the primary purpose
- with your consent, or where required or authorised by law.
Third parties
Where reasonable and practicable to do so, we will collect your personal information only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.
Disclosure of personal information
We do not sell personal information. Your personal information may be disclosed:
- to the service providers named above, only as needed to operate this website and deliver your enquiry
- to other third parties where you consent to the use or disclosure
- where required or authorised by law.
Some of these service providers store or process information outside Australia, including in the United States.
Security of personal information
Your personal information is stored in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure.
When your personal information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify it. However, most personal information is or will be stored in client files, which we keep for a minimum of seven years.
Access to personal information
You may access the personal information we hold about you and update or correct it, subject to certain exceptions. If you wish to access your personal information, please contact us in writing. We will not charge a fee for your access request, but may charge an administrative fee for providing a copy of your personal information.
To protect your personal information we may require identification from you before releasing the requested information.
Policy updates
This policy may change from time to time. The current version is always available on this page.
Complaints and enquiries
If you have any queries or complaints about this policy, please contact us through our enquiry form or write to us at The Commons, 32 York Street, Sydney NSW 2000.