About this Policy
BUY’T PTY.LTD. ACN 672 230 867 ("Buy’t") respects your privacy. This Privacy Policy describes the information we collect, and the manner in which we may use such information. We are committed to ensuring that to the best of our ability we meet all the requirements of the Australian Privacy Principles (“APPs”) and the Privacy Act 1988 (Cth) (“Privacy Act”). Accordingly, this Privacy Policy has been developed in accordance with the APPs and the Privacy Act. Please read this Privacy Policy carefully to understand how any personal information collected by Buy’t is used.
The Buy’t website (the “Site”) and other mediums are used by Buy’t to give you access to the Buy’t ecosystem and to allow you to purchase goods and services, as well as to give you a spectrum of facilities to enable commerce between you, Buy’t and the Buy’t Merchants, or associates.
Access to the Site is conditional on you accepting the terms and conditions of this Privacy Policy. The Privacy Policy applies to the collection, storage, use and disclosure by Buy’t of the personal information of the individuals using the Site or services of Buy’t.
If you have any further questions or if you wish to receive more information on our information practices and Privacy Policy, please contact our Privacy Officer at support@buyt.com.au

1) Collection of Personal information
We will, from time to time, receive and store personal information you enter onto the Site, or give to us in other forms.
What is personal information?
“Personal information” is information or an opinion, whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
What kinds of personal information do we collect and hold?
The personal information we may collect and hold varies and is dependent on the nature of our dealings with you. The kinds of personal information can include but is not limited to:
a) name;
b) contact details, including residential address, postal address, telephone number and email address;
c) login information, including username and password;
d) information about your use of products or services, or those of our related entities;
e) payment information, including bank account details and credit/debit card details;
f) Identification information;
g) preferences and opinions that you provide in response to surveys commissioned by us; and
h) information about your use of our website and App.
Please note if we are unable to collect personal information we reasonably require, we may not be able to provide our functions or activities to you or the organisation with which you are connected.
How do we collect your personal information?
We collect personal information from you in a variety of ways, including when you interact with us electronically or in person, when you access our website and when we provide our services to you.

Generally, when providing services to our customers, we collect personal information directly from the individuals where reasonable and practical.
We may receive personal information from third parties, if we do, we will protect it as set out in this Privacy Policy.
Our Site or our communication from time to time contain links to third party websites over which we have no control. If you follow a link to any of these websites, please note that they have their own practices and policies. We encourage you to read these privacy policies or statements of these websites and understand your rights. We accept no responsibility or liability for any practices of third-party websites.
We only retain personal data for so long as is necessary for our services or for as long as is required by law.

2) Use of personal information
We may use personal information collected from you to provide you with information, updates and our services. We may also make you aware of new and additional products, services and opportunities available to you. We may use your personal information to improve our products and services and better understand your needs.
We collect, hold and use personal information about you:
a) to identify you, conduct customer identification procedures required by law and to communicate with you;
b) for internal record-keeping;
c) to provide our services to you;
d) to analyse customer needs, develop customer strategies and improve customer experiences;
e) for our market research and business development activities;
f) for marketing, including direct marketing;
g) to protect you and us from fraud;
h) to run competitions or offer additional benefits to you;
i) to comply with our legal obligations;
j) to respond to any queries or complaints you may have; and
k) to work with selected third-party partners to deliver products or services that we believe may be of interest to you.
We may contact you by a variety of measures including, but not limited to telephone, email, SMS, push notification or mail.
You may be able to opt out of any of the above by contacting support@buyt.com.au

3) Disclosure of personal information
We may disclose your personal information insofar as reasonably necessary for the purposes set out in this Policy. Personal information is only supplied to a third party when it is required for the delivery of our services or the purposes described in clause 5).
We may disclose your personal information to:
a) the persons or entities from whom you are purchasing goods or services;
b) other companies related to us;
c) external service providers who assist us in providing our full range of products and services to customers;
d) professional service providers and advisors who perform functions on our behalf, such as lawyers;
e) government, regulatory authorities and other organisations as required or authorised by law; and
f) financial institutions for payment processing.
Organisations providing professional services to us are required to keep those dealings and personal information provided by us as confidential unless required to disclose such information by statute or law.
In the case of contracted service providers, we may disclose personal information to the contracted service provider and the contracted service provider may in turn provide us with personal information collected from you in the course of providing the relevant products or services.
By providing us with personal information, you consent to the terms of this Privacy Policy and the types of disclosure covered by this Policy. Where we disclose your personal information to third parties, we will request that the third party follow this Policy regarding handling your personal information.
Sensitive information
The Privacy Act describes ‘sensitive information’ as information relating to a person’s racial or ethnic origin, political opinions, religion, trade union or other professional or trade association membership, sexual orientation, criminal record, and health information about an individual.
We do not collect sensitive information about our customers.
Overseas disclosure
We may disclose your personal information to our third-party service providers for them to help us provide services to you. Our third-party service providers may store or access your personal information overseas.
Information that we collect may from time to time may be stored, processed in or transferred between parties located in countries outside of Australia. For example, information may be sorted, processed or transferred to our external service providers in Singapore and the Philippines.
Security
We collect and store personally identifiable information using encryption technology that encrypts the information you input before it is sent to us via the Internet. In addition, all the information we collect on the Site is stored on our secure servers which are in a restricted access area and is password protected.
We store all other material that contains personally identifiable information on our dedicated cloud servers. These premises are kept secure at all times.
We restrict access to personal information to our employees, service providers and contractors on a strictly need to know basis and to ensure that those persons are subject to contractual confidentiality obligations.
Please note, however, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site. Any transmission is at your own risk.

4) Holding your personal information
If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by any of the above circumstances.

5) Communication and direct marketing
You consent to us, our partners and affiliates communicating with you by any means including but not limited to phone, email, SMS and push notification, to inform you about existing and new products and services that may be of interest to you. For the avoidance of doubt, this consent includes us, our partners and affiliates (including affiliated energy retailers and their agents) contacting you by telephone to negotiate a new energy supply and sale contract. This consent continues indefinitely and survives termination of this agreement until you opt out in accordance with the below paragraph.
We will ensure that any communication sent as direct marketing complies with the SPAM Act 2003 (Cth) and contains an ‘unsubscribe’ option so that you can remove yourself from any further marketing communications. To opt-out of communications via SMS, reply with “STOP”. You may decline marketing messages sent by push notifications by refusing the relevant permission in your phone or tablet settings, however this setting will prevent you from receiving other messages from us via push notification. You may also opt-out of receiving marketing materials from us using the contact details set out below.
You can also call or write to us to request that your details be removed from our direct marketing list. We will endeavour to remove your details from our direct marketing list within a reasonable time (ordinarily 5 working days).
Our direct marketing list may be operated by software and servers located overseas and your Personal Information may be sent overseas as part of our marketing.
We will also send communications that are required or necessary to send to users of the Site that contain information about important changes or developments to or the operation of the Site as well as other communications you request from us. You may not opt-out of receiving these communications, but you may be able to adjust the media and format through which you receive these notices.

6) Retaining personal information
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for or as required by law.
We will take reasonable steps to destroy or permanently de-identify personal information that is no longer needed for any purpose that is permitted by the Privacy Act.

7) Use of government related identifiers
We will not use government related identifiers (such as driver’s licence numbers) as our own identifier of individuals. We will only use or disclose such identifiers in the circumstances permitted by the Privacy Act.

8) Security of your personal information
We are committed to ensuring that the information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.
Our servers have SSL certificates, so all data transferred electronically between you and us is encrypted.

9) Access to your personal information
You may request details of personal information that we hold about you in accordance with the provisions of the Privacy Act. A small administrative fee may be payable for the provision of information, to cover our reasonable costs of retrieving that information.
If you would like a copy of the information, which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at support@buyt.com.au. We will respond to any request within a reasonable time.
We will endeavour to promptly correct any information found to be inaccurate, incomplete or out of date. If we cannot take reasonable steps to correct the information because such correction is not technically possible or would be impracticable for us to perform, we may be unable to continue to provide services to you. In these cases, we will provide reasons for denial of your correction request.
If we refuse to correct your personal information you have the right to associate with the information a statement that the information is inaccurate, out of date, incomplete, irrelevant or misleading. We will take such steps that are reasonable in the circumstances to associate that statement with all records containing the relevant information.
We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the Privacy Act. If we cannot provide access to your information, we will generally provide you with the reasons why and the mechanisms to complain about that refusal.
There is no cost involved for you to make a correction request or for the correction of your information.

10) Making a complaint and how it will be handled
If you believe that we have breached any obligation under Part IIIA of the Privacy Act from when it applies to us and wish to make a complaint about that breach, please contact us by email at support@buyt.com.au setting out details of the breach. We will promptly investigate your complaint and respond to you in writing setting out the outcome of our investigation, what steps we propose to take to remedy the breach and any other action we will take to deal with your complaint.
It would assist us to ensure we properly understand your complaint, and allow us to respond more promptly, if complaints are made in writing and include as much detail as possible.
We will deal with any complaint in a timely, effective and consistent manner. We will acknowledge the receipt of your complaint within 7 days, and endeavour to make a decision on the complaint within 30 days after it is received. If we need more time to resolve your complaint, then we will notify you as to the delay.
If you feel that we have not satisfactorily addressed your complaint, you may also make a complaint to the Office of the Australian Information Commissioner by visiting www.oaic.gov.au, emailing enquiries@oaic.gov.au or writing to GPO BoBuy’t5218 Sydney NSW 2001.

11) Changes to Privacy Policy
Please be aware that we may change this Privacy Policy in the future. We may modify this Policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our website or notice board. Please check back from time to time to review our Privacy Policy.

12) Website
When you visit our website (https://Y.au/) we may collect certain information such as browser type, operating system, website visited immediately before coming to our site, etc. This information is used in an aggregated manner to analyse how people use our site, such that we can improve our service.

13) Cookies
We may from time to time use cookies on our website. Cookies are very small files which a website uses to identify you when you come back to the site and to store details about your use of the site. Cookies are not malicious programs that access or damage your computer. Most web browsers automatically accept cookies, but you can choose to reject cookies by changing your browser settings. However, this may prevent you from taking full advantage of our website. Our website may from time to time use cookies to analyses website traffic and help us provide a better website visitor experience. In addition, cookies may be used to serve relevant ads to website visitors through third party services such as Google Adwords. These ads may appear on this website or other websites you visit.

14) Third party sites
Our website may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that we are not responsible for the privacy practises of other such websites. We encourage our users to be aware, when they leave our website, to read the privacy statements of each website that collects personal identifiable information.

15) Contact relevant to this Privacy Policy
Please address all requests and questions about this Privacy Policy to the Privacy Officer using the contact details provided below:
Privacy Officer
Email: support@buyt.com.au
Privacy Commissioner
If you require more information about privacy laws generally, please contact:
The Privacy Commissioner:
Office of the Federal Privacy Commissioner
GPO Box 5218, Sydney NSW 2001
Phone 1300 363 992
Website: www.oaic.gov.au

16) Definitions used in this policy
• Personal information as defined under section of the Privacy Policy.
• Privacy Policy means the document.
•Buy’t or we as defined on page 1 of the Privacy Policy.
• You or your means:
i) you, during your usage of our website or the App; and
ii) you, during your dealing with us as a customer.