ESR is committed to safeguarding all personal information. The following describes our current policies regarding the collection, storage, use and disclosure of your personal information.
The types of personal information we collect and process may include, but is not limited to, information about you such as your name and contact details, your payment details, records of interactions and correspondence between us such as interactions with our team members and any interactions with us or posts that refer to us on social media, your use of our Site, applications and social media platforms.
We collect your personal information to provide our products or services to you, provide customer support, for marketing purposes, to improve our products and services, for legal and administrative purposes and any related purposes which would be reasonably expected.
We may collect your personal information in the course of you accessing our Site, and any other services provided including during conversations between you and our representatives, when you make an enquiry or complete an application. We will collect personal information from third parties including credit reporting agencies, law enforcement agencies and other Governmental agencies. We will also engage third parties to collect personal information on our behalf in connection with the management of our properties.
We may also collect non-personally identifiable information that does not personally identify you, including anonymous information and aggregate data. We may use this information to understand better how visitors use the Site, research our visitors’ demographics, interest, and behaviour, improve the Site, provide visitors with customised services and information, and for other similar purposes. We may combine this information with personally identifiable information. We may share this information with others, such as investors, for information or promotional purposes to the extent permitted by law.
We may disclose your personal information to comply with our legal obligations, to protect the safety or security of you, us, third parties, including the safety and security of tangible or intangible property that belongs to you, us or to third parties, our Site and our databases. Also, in the event that ESR, or substantially all of its assets, are acquired or merged with another entity, we reserve the right to transfer to the extent permissible at law our databases, together with any personal information and non-personal information contained in those databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality.
We will retain your personal data for as long as is necessary for the purpose(s) for which it was collected and any other permitted linked purpose. Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised (and the anonymised information will be retained) or security destroyed.
To the extent permitted by law, information that we collect may from time to time be stored, processed in or transferred between parties located in countries outside of Australia, including countries with a lower level of data protection than in the country in which you are located. These may include, but are not limited to, Singapore, People’s Republic of China, Japan, South Korea and India.
We will take all reasonable steps to try and guarantee that your personal information is accurate, complete and up to date. To help us do this, please notify us of any change to your personal information.
If we become aware of a Data Breach, we will promptly investigate the incident, and take reasonable steps to contain and remedy the Data Breach. We will take steps to notify you as soon as practicable if we believe that the Data Breach would be likely to result in serious harm to you.
After investigating a Data Breach, we may disclose information about the incident to the Office of the Australian Information Commissioner and to law enforcement agencies about the incident in order to comply with our reporting obligations under the Privacy Act.
In the event of discrepancies of this policy between the English version and other language version(s), the English version shall prevail.
You can contact our Privacy Officer at firstname.lastname@example.org or +61 2 9186 4700 if you have any concerns about our handling of your personal information. We will respond to let you know who will be handling your matter and when you can expect a further response. We may request additional details from you regarding your concerns and may need to engage or consult with other parties in order to investigate and deal with your issue. We will keep records of your request and any resolution.
For information about privacy generally, or if your concerns are not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au and on 1300 363 992.