“You” means an individual or company who accesses the Catalyst website including a verified account holder
Digital products – means any information viewed or accessed on catalyst (catalyst.CBD Oil Australia.com.au and subfolders)
Product suppliers – cannabis companies who hold a TGA or ODC license to manufacture or distribute medicinal cannabis products in Australia.
CBD Oil Australia is bound by the Privacy Act 1988 (Cth) (Privacy Act) as amended, including the Australian Privacy Principles (APPs). The APPs are designed to protect the confidentiality of information and the privacy of individuals by regulating the way personal and sensitive information is collected, used, disclosed and managed. Personal and sensitive information is, generally speaking, information or an opinion relating to an identified, or reasonably identifiable, individual, whether the information is true or not and whether the information is recorded in a material form or not.
3. Your Consent
4. Why we collect personal information
We collect personal and sensitive information for various purposes connected with our activities and operations, including to develop, provide and improve our digital products and services, for verification of our visitors and customers, to understand and meet the needs and requests of individuals we engage with and to meet our legal obligations.
5. The information we collect
The type of personal information we collect may include
Contact information such as:
name, email address, postal address, company information;
User preferences and profile information:
login details, marketing preferences, comments, feedback and user data (see Analytics and Cookies)
Personal health information
6. How we collect information
We collect personal information in a number of ways, including:
Directly from you when you provide it to us via the website or email or when you:
Create an account with us
Purchase a product
Participate in a survey
Apply for employment,
Provide a services to us
Use our website or otherwise engage with CBD Oil Australia
By gathering publicly available information available from:
Other websites on the internet
Social media channels (including company pages or posts from users of private social media groups that CBD Oil Australia team members are members of)
Personal and sensitive information may be collected by way of emails, phone conversations (which may be recorded for quality control purposes in accordance with applicable laws), forms filled out by individuals (including via online forms), feedback, enquires, support requests, surveys, competitions, online user-generated content, market research, video conferencing, face-to-face meetings, social media posts and comments and interviews.
We may supplement the information we receive from you with information from third party sources such as our partners, social media channels and other websites. You may in some circumstances have the option of not identifying yourself or using a pseudonym when you deal with us. However, if you choose not to provide the information we need to fulfill your request for a specific product or service we may not be able to provide you with the requested product or service or we may not be able to allow you to participate in activities or to purchase our products and services.
7. Billing information
CBD Oil Australia does not collect billing information such as payment card details. Third-party Payment Gateway providers are used for online payment card or banking transactions made via the CBD Oil Australia website and for payment of invoices online or by phone.
When purchasing a product or service from the CBD Oil Australia website or when paying a CBD Oil Australia issued invoice online or by phone:
Customers will be directed to a payment gateway provider (Stripe).
Payment card details are submitted to the payment gateway provider and cannot be viewed by CBD Oil Australia.
CBD Oil Australia will receive certain information about Customers from the payment gateway provider (including payment card details in a hashed format and the Customer’s name and IP address) to enable CBD Oil Australia to provide products and services ordered by Customers.
8. Analytics and cookies
CBD Oil Australia uses Heap Identify to consolidate information on each unique visitor to their interactions with our site and digital products. This consolidated information provides a more accurate picture of visitor journeys and use of our digital products and website. Heap Identify assigns a unique identifier to each visitor and uses this identifier to link all activity associated with that particular visitor. We also link an email address to that unique identifier so we can better understand certain high value customers.
You can find out more information on how Google uses data when you use CBD Oil Australia’s site or digital products at www.google.com/policies/privacy/partners/.
You can find out more information on how Heap Analytics uses data when you use CBD Oil Australia’s site or digital products at https://heap.io/privacy
9. How CBD Oil Australia might use and disclose your personal information
Generally, CBD Oil Australia may use and disclose your personal and sensitive information for a range of purposes. For individuals who have signed up to our newsletter only we will not disclose any of your personal information.
For individuals who have created an account on our digital products or are paying customers of our digital products (and who are not a part of our Find a prescriber) we will only share your personal information to a third party when you have explicitly consented to the sharing of that information. We may disclose your personal and sensitive information to other members of the CBD Oil Australia team in order to:
respond to your queries or feedback or provide customer service support;
analyse and improve all aspects of our business;
authenticate users to enable access to CBD Oil Australia digital products;
facilitate your participation in forums, social events and educational events
facilitate participation in our governance forums and activities; and
consider employment or other engagement applications.
Your personal and sensitive information may also be used so we can:
provide you with any communications in which we think you might be interested; and
let you know about developments the global cannabis market, developments in our procedures, products, services, activities and programs that might be useful to you,
by way of direct mail or telemarketing and (where you have opted in) by email, SMS or MMS (recipients who no longer wish to receive such communications can request to be removed from the distribution list by following the unsubscribe instructions in the relevant email, SMS or MMS).
Prepare educational and health research materials based on statistical data from our site, however in such circumstances such data would be de-identified of your personal information and aggregated.
10. Disclosure of personal information to other parties
CBD Oil Australia may disclose your personal information to third parties.
For healthcare professionals who are a part of the Find a prescriber feature we may disclose your personal information to website or digital product visitors in order to:
Help patients find a prescriber who can help with their medical condition.
Help other healthcare professionals find like-minded practitioners.
For customers of our digital products we will only provide your personal information to third parties with your consent. However, CBD Oil Australia will provide all adverse drug reaction and other safety related information to the related product sponsor where required by contract or by law. CBD Oil Australia will never provide your personal details/information to a third party, including the product sponsor unless you have given permission for us to do so.
We do not sell or license your personal information to third parties.
We also note that we may have access and correction obligations pursuant to the Consumer Data Right provisions of the Competition and Consumer Act 2010.
11. Sending information overseas
All personal and sensitive information held by CBD Oil Australia is held in Australia. There may be times when personal and sensitive information is sent overseas, including instances when a customer of our digital product requests to speak with a product supplier. CBD Oil Australia complies with the APPs when sending personal and sensitive information overseas. CBD Oil Australia will not send your personal and sensitive information to a recipient outside Australia without obtaining your consent or otherwise complying with the APPs.
Product suppliers may be located around the world.
12. Security and management of personal information
CBD Oil Australia takes reasonable steps to protect the personal and sensitive information we hold from misuse and loss and from unauthorised access, modification or disclosure. The ways we do this include:
Limited access to the information we collect about you (for example, for anyone not listed in the Find a prescriber, we limit access to your information to you and members of the CBD Oil Australia team who need your information to carry out our business activities).
limiting access to the information we collect about you (using a payment gateway for secure handling of your billing information);
requiring any third-party providers to have acceptable security measures to keep personal information secure; and
putting in place electronic, and procedural safeguards.
If we no longer require your personal information and are not legally required to retain it, CBD Oil Australia will take reasonable steps to destroy or permanently de-identify the personal information.
For example, for past customers of our digital products who have cancelled their subscription we will delete all personal information for those who have not used the digital products within 6 months. Prior to deleting personal information we’ll attempt to reach out to the past customer 2x (over 30 days via email) to let them know their account will be deleted unless they tell us otherwise.
13. Data breaches
We will take all reasonable steps to ensure that your personal information is not hacked, unlawfully or improperly accessed, interfered with or attacked by third parties. In the unlikely event that this occurs we will notify you of the unauthorized breach and the steps we are taking in response to the breach.
The steps we will take are as recommended by the OAIC are as follows:
Report to OAIC first
Report to individuals affected (and we will also report to all users of the tools)
When notifying the OAIC and users of CBD Oil Australia.com.au, we will include:
your organisation or agency’s name and contact details
a description of the data breach
the kinds of information involved
recommendations about the steps individuals should take in response to the data breach
14. Links from our website to other websites
Our site may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that CBD Oil Australia is not responsible for the privacy practices of other such websites.
We encourage our users to be aware, when they leave our website, to read the privacy statements of each and every website that collects personally identifiable information.
15. Requests to stop facilitating direct marketing
If you request that we stop facilitating direct marketing we will comply with that request.
16. Accessing the information we hold about you
Under the APPs, you may be able to obtain a copy of the personal and sensitive information that we hold about you. The APPs provide some exceptions to your rights in this regard.
For individuals who are customers of one of our digital products you will have access to all of your personal information in the My Account section of our digital products. For Catalyst customers, please email firstname.lastname@example.org subject: Catalyst Personal Information Request, with your request. Please email us from the email address used to create the account and provide your full name, post code and medical registration number.
For anyone else, make a request to access this information by contacting us in writing at email@example.com subject: Accessing my personal information. We will require you to verify your identity and specify what information you require.
17. Updating your personal information
We endeavour to ensure that the personal and sensitive information we hold about you is accurate, complete and up-to-date.
For individuals who are customers of one of our digital products you will have access to all of your personal information and the ability to update it in the My Account section of our digital products. For Catalyst customers, please email firstname.lastname@example.org subject: Update Catalyst Personal or Sensitive Information Request, with your request. Please email us from the email address used to create the account and provide your full name, post code and medical registration number.
For everyone else, please contact CBD Oil Australia at email@example.com subject: Updating My Personal and Sensitive Information, if you believe that the information we hold about you requires correction or is out-of-date.
18. Updates to this Policy
If you are concerned that we have not complied with your legal rights or applicable privacy laws, you may bring a complaint internally through our complaints process or you may decide to make a formal complaint with the Office of the Australian Information Commissioner (www.oaic.gov.au) (which is the regulator responsible for privacy in Australia).
We will deal with complaints as follows:
Step 1: Let us know
A complaint must be made in writing to CBD Oil Australia as required by s 40(1A)
Step 2: Investigation of complaint
Your complaint will be investigated by our Privacy Officer. A response to your complaint will be provided in writing within a reasonable period (30 days)
If the complainant and CBD Oil Australia can find a resolution or are in the process of finding one, the complaint should go no further.If the complainant and CBD Oil Australia can find a resolution or are in the process of finding one the complaint should go no further.
If the complainant and CBD Oil Australia agree there is no immediate resolution, the complaint may then be taken to the OAIC.
Step 3: Contact OAIC
We expect our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also contact the Office of the Australian Information Commissioner as follows:
Office of the Australian Information Commissioner (OAIC)
Complaints must be made in writing.
Phone: 1300 363 992
Director of Compliance
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
20. Contact us
CBD Oil Australia
We will endeavour to respond to all complaints and correspondence promptly.