Privacy Policy

Orikan means , Orikan Group Pty Ltd and its subsidiary Orikan Australia Pty Ltd.

personal information means information or an opinion about an identified individual, or about an individual who is reasonably identifiable.

You consent to us collecting, holding, using and disclosing your personal information in accordance with this policy.

Orikan collects information about you and your interactions with us when you purchase or use any of Orikan’s products or services, call us or visit Orikan’s website(s). That personal information may include, but is not limited to, your name, email address, phone number, physical address, date of birth, occupation and company details, and, as may be required in the course of business, financial information.

Orikan uses cookies as well as your IP address and browser information available via Google and other analytic tools to count visitors to its web site and understand how they access and use it. These cookies do not identify visitors, and are used only to improve the site’s effectiveness and relevance.

DCA Businesses have separate privacy policies which detail the way each division collects and handles personal information in the delivery of their services. The separate privacy policies are either available on DCA’s website (https://data.com.au/privacy-policy/) or on request.

Orikan collects, holds and uses personal information only for the purposes for which it was collected which are directly related to Orikan’s functions and activities (or a directly related secondary purpose which you could have reasonably expected), including:

• processing personal information on behalf of Orikan’s clients;
• maintenance of the quality of Orikan’s databases;
• to provide you with products and services, or manage our relationship with you;
• contacting or responding to you, or if we need to tell you something important; or
• complying with our legal obligations.

If you do not provide us with your personal information we may not be able to provide our services to you, or communicate with you, or respond to your enquiries.

We will collect your personal information directly from you when you interact with us and when we interact with you on behalf of our clients. Orikan also processes personal information collected by its clients on behalf of those clients.

Orikan collects personal information which is used by Orikan to maintain our databases. An individual may opt out of receiving further contact or request access to their information (see below).

Orikan employs security procedures to protect information from misuse, interference or loss, unauthorised access, modification or disclosure. Orikan supplies data only in accordance with this privacy policy and only to authorised users who have contracted to provide an appropriate level of data security.

Orikan maintains appropriate procedures to ensure that data is accurate, complete and up-to-date.

Orikan utilises systems that meet PCI DSS Level 1 certification and adheres to a comprehensive set of requirements to enhance cardholder data security which ensures the safe handling and storage of sensitive customer credit card information.

Orikan will take reasonable steps to destroy or de-identify personal information once we no longer require it for the purposes for which it was collected or for any secondary purpose permitted under the APPs.

Where relevant and in accordance with our legal and compliance obligations, Orikan may transfer or disclose your personal information for the purposes for which it was collected and any directly related purpose, to its related companies or to external service providers so that they may perform services for us or on our behalf.

We may disclose personal information to our related entities in New Zealand for our business purposes.

We may engage overseas service providers, such as email providers and “cloud” data services, in the course of providing the websites, and our services to you. The location of these service providers may vary.

In the event that personal information must be disclosed overseas other than as described above, we will endeavour to obtain consent from you. Where required by the APPs, we will take reasonable steps to ensure that an overseas recipient does not breach the relevant privacy principles under the Australian Privacy Act 1988 (Cth).

Where relevant, Orikan or its related companies, business partners, clients or service providers (offeror) may use your business contact information which may contain personal information to offer you products and/or services we or they (as applicable) believe may interest you, but not where you tell the offeror not to contact you.

You consent to receiving commercial electronic marketing communications from us, our related companies, business partners, clients or service providers. You may opt out of receiving further commercial electronic marketing communications by following the opt out instructions below or by utilising the ‘unsubscribe’ functionality contained in such messages.

Our websites may use cookies for site administration purposes.  If an individual wishes not to take advantage of cookies, the individual may configure their browser so that cookies are not accepted (this may disable or render unusable some of the features of our website).  Our website may also detect and use an individual’s IP address or domain name for internal traffic monitoring and capacity purposes or to otherwise administer the website.  No personal information is obtained, rather the patterns of usage of visitors to the website may be tracked for the purposes of providing improved service and content based on the aggregate or statistical review of user site traffic patterns.

You may access or request correction of the personal information that we hold about you by contacting us by email at [email address]. We may require you to meet our reasonable costs in providing you with access in the event that we incur such costs (e.g. photocopying costs or costs for time spent on collating large amounts of material). There are some circumstances in which it may not be possible for us to provide you access to your personal information or an exemption under the Privacy Act may apply. For instance, we may not provide access to information if disclosing that information would impact on the privacy of another individual. Where we will not provide access to personal information held about an individual, we will tell the individual why.

You can opt out of receiving further marketing communications at any time by contacting us by email at [email address]. You agree that even if you opt out of receiving marketing communications we may still be required to send you essential information that we are legally required to provide relating to the services we provide. You acknowledge and agree that removal from our distribution lists may take several business days after the date we receive your request for removal.

If you have a complaint about the way in which we have handled any privacy issue, we will consider your complaint and determine whether it requires further investigation. We will endeavour to notify you of the outcome of this investigation within a reasonable period of time. If you are unsatisfied with the way we have handled a privacy issue, you may contact the Office of the Australian Information Commissioner (www.oaic.gov.au).

For any questions relating to Orikan’s Privacy Policy, please contact:

Orikan
Attention: Privacy Officer
Level 6, 30 Convention Centre Place,
South Wharf VIC 3006
E: privacy@orikan.com

This Privacy Policy is effective as at 18/04/2023. Orikan may change its policy on how it handles personal data from time to time. Any changes to our policy will be published on our website.

The bodies corporate listed at the end of this policy trade as Orikan (Orikan, we or us). We recognise that your privacy is important. This document is our privacy policy and it tells you how and why we collect and manage your personal information (including the personal information Orikan will collect from you when you access the Orikan website) and how we will use that information.

Orikan provides a range of services to its clients comprising secure currency management and ATM management services. In the course of carrying out its functions and activities in delivering the services, Orikan collects, holds, uses and discloses personal information.

We respect your rights to privacy under the Privacy Act 2020 (Act) and the Privacy Principles (PPs) and we comply with all of the requirements in respect of the collection, management and disclosure of your personal information set out in the Act and the PPs.

When used in this privacy policy, the term “personal information” has the meaning given to it in the Act, being any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not. In general terms, personal information is any information that can be used to personally identify you. This may include your name, date of birth, address, signature, bank account details, telephone number, email address and profession or occupation. If the information we collect identifies you, or you are reasonably identifiable from such information, then such information will be personal information.

We may collect the following types of personal information about you:

• name and contact details including mailing or street address, email address and telephone or facsimile numbers;
• age or birth date;
• profession, occupation or job title;
• photographic or video images;
• drivers licence, passport details, visa information and firearms license details;
• bank account information including credit card and/or other banking details (in some circumstances, information will include credit history);
• police checks and security information from Police and other governmental departments, employment history, qualifications and resume and job references, health assessments and other health and sensitive information, as part of your job application;
• Tax File Number and superannuation account information;
• details of the services you have acquired from us or which you have enquired about, together with any additional information necessary to deliver those services and to respond to your enquiries;
• records of our communications with you, including any complaints, quote requests or claims;
• any additional information relating to you that you provide to us directly through our website or indirectly through use of our website or online presence, through our representatives or otherwise; and
• information that you provide to us through customer surveys or visits by our representatives from time to time.

We may also collect some information that is not personal information because it does not identify you or anyone else. For example, we may collect anonymous answers to surveys or aggregated information about how users use our website.

Certain personal information we collect is “sensitive information” such as information about racial or ethnic origin, political opinion, religious beliefs, sexual orientation, information about credit, information about health and safety (including workers compensation claim records and work health and safety investigation records), personnel records, criminal records, employee records, membership of a professional trade organisation or trade union.

We generally only collect sensitive information about you with your consent. However there are certain circumstances where we are authorised to collect and hold sensitive information without the consent of the individual concerned. These include where the collection:

• is required or authorised under law (such as the Health and Safety at Work Act 2015 (HSW Act);
• will prevent or lessen a serious threat to somebody’s life or health, or assist in the location of a missing person;
• is reasonably necessary to allow us to take appropriate action when we suspect unlawful activity or misconduct of a serious nature that relates to our functions or activities;
• is reasonably necessary to establish, exercise or defend a legal or equitable claim or for the purposes of a confidential alternative dispute resolution process; and
• is reasonably necessary for the enforcement of the criminal law or of a law imposing a pecuniary penalty, or for the protection of public revenue.

In the course of dealing with customers, suppliers, job applicants and services providers, Orikan may collect personal information.

Orikan may collect your personal information directly from you unless it is unreasonable or impracticable to do so. Orikan may collect personal information from you when you:

• access and use of our website, including when you send us feedback or subscribe to our publications via our website;
• access and use of our services, including collection and delivery services and payment or parking services;
• otherwise contact us, either online through our website, by email, mail, telephone or in person.
• request a quote or make an inquiry about our Services;
• enter into an agreement with us for the provision of our Services or for the supply of products or services to us;
• request to visit and/or visit any of our secure facilities;
• apply for a job with us, whether via online or manual recruitment services and whether directly or via external recruitment processes;
• photographic or video images may be collected by CCTV, security cameras and other surveillance devices and by body-worn cameras;
• suffer an injury in connection with the delivery of our Services; or
• during conversations between you and our representatives, including making a complaint.

We may also collect personal information from third parties including:

• your current or previous employer;
• personal and professional references;
• medical professionals, including where you suffer an injury and make a claim against us and we need to assess the claim or where you are offered a job with us and we require you to undertake a medical assessment;
• cloud based services;
• web filtering services;
• from third party companies engaged to provide marketing or promotional services to Orikan; or
• from third party companies such as credit reporting bodies, your financial institution, law enforcement agencies, recruitment agencies and government entities, including where you are offered a job with us and are required to undertake a police check, identity check or credit check.

If at any time you supply us with personal information about another person (for example, a referee) you should ensure that you are authorised to do so and you must agree to inform that person who we are, that we will use and disclose their personal information and that they may gain access to it should we hold that information.

Where practical and lawful, you can deal with us anonymously or using a pseudonym, if you wish. However, in many instances, if you do not provide us with the personal information described above, some or all of the following may happen:

• we may not be able to provide our services to you;
• we may not be able to provide your inquiries, including responding to requests for information about services we provide or quotes or assessing job applications;
• you may be unable to submit feedback or subscribe to our publications via our website and access to certain areas of our website may be limited or declined; or
• we may be unable to tailor the content of our website to your preferences and your experience of our website may not be as enjoyable or useful.

We collect personal information about you so that we can perform our business activities and functions. We collect, hold, use and disclose your personal information for the following purposes:

• to provide our services to you and to send communications requested by you;
• to answer enquiries and provide information or advice about existing and new services including providing quotes;
• to enhance the safety and security of our personnel,
• to enhance the security of our property and our customer’s property (including without limitation cash and precious cargo);
• to detect and deter crimes;
• to contact you regarding your feedback and to provide you with our printed materials;
• to develop new offers, products and services and to help us improve our business;
• to provide you with access to physical Orikan sites across the business;
• to conduct recruiting activities and/or assess job applications;
• to conduct workforce planning;
• to ensure we comply with our safety obligations;
• to ensure we comply with all applicable laws;
• to ensure we comply with all our insurance obligations;
• to provide you with access to protected areas of our website;
• to provide you with access to our products and services;
• to assess the performance of the website and systems and to improve the operation of the website and systems;
• to conduct business processing functions including providing personal information to our related bodies corporate, contractors, service providers or other third parties;
• for the administrative, marketing (including direct marketing), planning, product or service development, quality control and research purposes of us and our related bodies corporate, contractors or service providers;
• to provide your updated personal information to our related bodies corporate, contractors or service providers;
• to comply with our contractual obligations to our customers, particularly those with security requirements;
• to update our records and keep your contact details up to date;
• to process and respond to any complaint made by you; and
• to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or in co-operation with any governmental authority including, for example, workplace safety obligations under the HSW Act.

You authorise us to disclose necessary information to related companies and to any agents or contractors who provide services to us in connection with the provision of products or services you have sought from us. These parties are prohibited from using your personal information except for the specific purpose for which we supply it to them.

Our privacy policy also applies to our website at www.orikan.com

Your access to, use of, linking to the website, downloading information or PDF files on the website (collectively, your Access) is conditional on your acceptance and compliance without alteration of the terms set out in this document, and elsewhere on the website. By continuing to access the website you are agreeing to the terms.

Intellectual Property Rights

You may use this website only for your personal and non-commercial purposes. Except to the extent permitted by relevant copyright legislation, you must not use, copy, modify, transmit, store, publish or distribute the material on this website, or create any other material using material on this website, without obtaining the prior written permission of Orikan.

Trade marks (whether registered or unregistered) and logos must not be used or modified in any way without obtaining the prior written consent of Orikan.

The website, products, technology and processes contained in this website may be the subject of other intellectual property rights owned by  Orikan or by third parties. No licence is granted in respect of those intellectual property rights other than as set out in these terms. Your use of this website must not in any way infringe the intellectual property rights of any person.

Cookies

When you access our website, we may send a “cookie” (which is a small summary file containing a unique ID number) to your computer. This enables us to recognise your computer and greet you each time you visit our website without bothering you with a request to register. It also enables us to keep track of services you view so that, if you consent, we can send you news about those services. We also use cookies to measure traffic patterns, to determine which areas of our website have been visited and to measure transaction patterns in the aggregate. We use this to research our users’ habits so that we can improve our online services. Our cookies do not collect personal information. If you do not wish to receive cookies, you can set your browser so that your computer does not accept them. We may log IP addresses (that is, the electronic addresses of computers connected to the internet) to analyse trends, administer the website, track users movements, and gather broad demographic information.

Security

As our website is linked to the internet, and the internet is inherently insecure, whilst we take reasonable steps to protect any information provided on and through our website, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.

Links

Our website/s may contain links to other websites operated by third parties. We make no representations or warranties in relation to the privacy practices of any third party website and we are not responsible for the privacy policies or the content of any third party website. Third party websites are responsible for informing you about their own privacy practices.

We may disclose your personal information to the third parties listed below for one or more of the purposes described above, some of whom may be located overseas:

• our employees, related bodies corporate, contractors or service providers (some of whom are located overseas including New Zealand, Australia and Asia Pacific Region) for the purposes of operation of our website or our business, fulfilling requests by you, and to otherwise provide services to you including, without limitation, web hosting providers, IT systems administrators, mailing houses, couriers, payment processors, data entry service providers, electronic network administrators, debt collectors, and professional advisors such as accountants, solicitors, business advisors and consultants;
• our customers, particularly those with security requirements;
• other third parties appointed by  (for example, the distributors of our printed materials) who may require access to personal information in order to perform our services and our business operations;
• suppliers and other third parties with whom we have commercial relationships, for business, marketing, and related purposes;
• the Office of the Privacy Commissioner (OPC) for the purposes of compliance with our obligations under the Act;
• police and other law enforcement bodies where relevant to their enforcement related activities;
• our insurers in relation to claims and to meet the requirements of our insurance policies; and
• any organisation for any authorised purpose with your express consent.

We may combine or share any information that we collect from you with information collected by any of our related bodies corporate (within Australia).

We may send you direct marketing communications and information about our services that we consider may be of interest to you. These communications may be sent in various forms, including mail, SMS, fax and email, in accordance with applicable marketing laws, such as the Unsolicited Electronic Messages Act 2007 . If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so. In addition, at any time you may opt-out of receiving marketing communications from us by contacting us (see the details below) or by using opt-out facilities provided in the marketing communications and we will then ensure that your name is removed from our mailing list.

We may disclose personal information to our related bodies corporate and third party suppliers and service providers located overseas for some of the purposes listed above.

We take reasonable steps to ensure that the overseas recipients of your personal information do not breach the privacy obligations relating to your personal information.

We may disclose your personal information to entities located outside of New Zealand, including the following:

• our related bodies corporate, located across Australia and the Asia-Pacific region;
• our data hosting and other IT service providers, located in various locations throughout the world; and
• other third parties located throughout the world.

We take reasonable steps to ensure your personal information is protected from misuse and loss and from unauthorised access, modification or disclosure.

We may hold your information in either electronic or hard copy form. Personal information is stored securely and is subject to restricted staff access, personal logins, IT and security policies, secure archiving and document management controls.

We have a Data Breach Response Plan in place to assist us in responding quickly to suspected data breaches.  We also have dedicated internal resources to assist us in managing a “notifiable data breach” under the Act, which occurs where:

• there has been unauthorised access to or unauthorised disclosure of the information; or
• the information is lost in circumstances where unauthorised access to or unauthorised disclosure of the information is likely to occur,

and a reasonable person concludes that such access or disclosure, or loss of information would be likely to result in “serious harm” (such as serious physical, psychological, emotional, economic, reputational or financial harm) to any of the individuals to whom the information relates.

If we suspect an eligible data breach has occurred but do not have reasonable grounds to believe there has in fact been a breach, we will carry out a reasonable and expeditious assessment as soon as possible and in any event, within 30 days of suspecting a breach, to determine whether there are reasonable grounds to believe that there has in fact been an eligible data breach.

If we have reasonable grounds to believe that there has been a notifiable data breach, we will, as soon as practicable, provide a statement to the OPC setting out the details of the breach in a form required by the OPC (Notification Statement). If practicable, we will take reasonable steps to notify the contents of the Notification Statement to each individual to whom the relevant information relates, or to each individual who may be at risk of serious harm from the eligible data breach. If neither of these two options are practicable, we will publish a copy of the Notification Statement on our website, and take reasonable steps to publicise the contents of the Notification Statement.  In providing the contents of the Notification Statement, we will inform you of our recommendation of steps that individuals can take to protect themselves from such data breach.

We take reasonable steps to destroy or permanently de-identify and archive any personal information when it is no longer needed or when we are no longer required by law to retain it (whichever is the later).

You may request access to any personal information we hold about you at any time by contacting us using the contact information below.

We will need to verify your identity before giving you access. We may charge you a reasonable fee to cover our administrative and other reasonable costs in providing the information to you. We will not charge for simply making the request and will not charge for making any corrections to your personal information.

There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will give you written reasons for any refusal and details of how you can complain if you are not satisfied with our decision.

We will take reasonable steps to ensure that the information we collect, store, use or disclose about you is accurate, complete and up-to-date, and relevant for any purpose for which it is used or disclosed. However, if you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may ask us to update or correct it. We will consider if the information requires amendment. If we do not agree that there are grounds for amendment then we will add a note to the personal information stating that you disagree with it.

If you believe that your privacy has been breached, or if you have any questions about your privacy, please contact us using the contact information below and provide details of the incident so that we can investigate it. We will treat your complaint confidentially, investigate your complaint and aim to ensure that we contact you and your complaint is resolved within a reasonable time (and in any event within the time required by the Act, if applicable).

If you have any questions about this privacy policy, any concerns or a complaint regarding the treatment of your privacy or a possible breach of your privacy, please use the Contact Us link on our website (available at: www.oriakn.com/contact/) or contact our Privacy Officer using the details set out below.

You can contact our Privacy Officer via:

Post

Orikan Privacy Officer
L6, 30 Convention Centre Place
SOUTH WHARF
VIC 3012
Australia

E: privacy@orikan.com

A copy of this privacy policy will be made available to anyone who requests it via the contact details above and a link to this privacy policy will be provided on our website at www.orikan.com/privacy/

We may change this privacy policy from time to time. Any updated versions of this privacy policy will be posted on our website and will be effective from the date of posting.

This privacy policy was last updated on 18/04/2023

• Orikan New Zealand Limited