The operator and the assistant stand with a camera at sunset

Privacy
Policy

1. Explicit Consent and Use of Cookies:

• Since you mention collecting information from cookies, it’s important to include a more explicit statement about cookie use, such as:

• “Our website uses cookies to enhance your browsing experience and for analytics purposes. By continuing to use our website, you consent to the use of cookies. You can adjust your browser settings to manage or disable cookies.”

Rationale: Being explicit about cookie consent aligns with transparency expectations and current privacy standards.

2. Clarify How You Handle Sensitive Information:

• You’ve defined “Sensitive Information,” but it may be beneficial to state explicitly whether or not you actively collect this data, as it appears you may not. For example:

• “We do not typically collect Sensitive Information unless it is essential to providing a service you have requested, and we will only do so with your consent or as required by law.”

Rationale: If Sensitive Information is not generally collected, specifying this can avoid unnecessary concern.

3. Specify How Personal Information is Used for Marketing:

• Your policy briefly mentions marketing. To clarify, add:

• “We may use your Personal Information to send you marketing communications that may interest you. You can opt out of receiving such communications at any time by contacting us or using the ‘unsubscribe’ link in any marketing email.”

Rationale: This assures users of their right to opt out of marketing communications, meeting the requirements of the Spam Act.

4. Add a Retention Period for Personal Information:

• While you state that client files are stored for a minimum of one year, clarifying a more defined period or range could be helpful, for example:

• “Client files containing Personal Information will be retained for a minimum of 1 year and, unless required for ongoing services or legal reasons, will not be kept longer than 7 years.”

Rationale: A specific retention period improves clarity around data storage practices.

5. Add a Data Security Section:

• Expand on how data is secured:

• “We employ industry-standard security measures to protect Personal Information, including encryption, secure servers, and access controls. We regularly review our security protocols to ensure your data is safeguarded against unauthorized access, modification, or loss.”

Rationale: This reassures clients that their information is stored securely.

6. Include Information on Cross-Border Data Transfers (if Applicable):

• If you share data internationally (e.g., with partners or software providers outside Australia), mention this. For example:

• “Some of our third-party service providers may store or process your Personal Information outside Australia. We ensure that any cross-border data transfers comply with Australian privacy requirements.”

Rationale: Mentioning cross-border transfers enhances transparency.

7. Additional Contact Information for Privacy Complaints and Enquiries:

• Complete the last section by providing a contact email and/or postal address.

• For example:

• “If you have any queries or complaints about our Privacy Policy, please contact us.”

Rationale: Full contact details make it easy for clients to reach you.

Suggested Revised Version (Incorporating Adjustments)

PostStudio (Ilya Postnikov) is committed to providing quality services to you and respects your privacy. This Privacy Policy outlines our obligations in managing your Personal Information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

What is Personal Information, and Why Do We Collect It?

Personal Information refers to information or an opinion that identifies an individual. This includes names, addresses, email addresses, and phone numbers. We collect this information for the primary purpose of providing services to you and for secondary purposes related to service delivery, including marketing. You may unsubscribe from our mailing/marketing lists at any time by contacting us.

Collection of Personal Information

Personal Information is collected through various means, such as correspondence, telephone, email, and our website (poststudio.com.au). We may also gather data from cookies and authorized third parties. Our website uses cookies for analytics; by using our website, you consent to this. You can manage cookies via your browser settings.

Sensitive Information

Sensitive Information (e.g., racial or ethnic origin, political opinions, health information) is generally not collected unless essential for services requested by you. This information is only used with your consent, for related purposes, or as required by law.

Disclosure of Personal Information

Your Personal Information may be disclosed:

• To third parties with your consent;

• As required or authorized by law; or

• To service providers, some of whom may operate outside Australia, ensuring compliance with Australian privacy requirements.

Security of Personal Information

We protect your Personal Information using secure servers, encryption, and access controls. We regularly review and update security measures to guard against unauthorized access or disclosure. Client files are retained for a minimum of 1 year and up to 7 years if needed for legal or service purposes.

Access to Your Personal Information

You may request access to or correction of the Personal Information we hold about you. To protect your data, we may require identification before releasing information. Requests are free, though an administrative fee may apply for copies.

Facebook Comments and Data Sharing

Our website embeds a Facebook Comments plugin, which may collect data such as your IP address and track interactions. For information on how Facebook handles this data, please refer to Facebook’s Privacy Policy.

For queries or complaints, please contact us: