Our Policy Statement
Stockland is a diversified property group and our key business activities include:
By providing personal information to us, you consent to our collection, use, storage, disclosure and management of your personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and this Policy.
What personal information do we collect?
The types of personal information Stockland collects about you depends on the nature of your interactions with us. In this Policy, “personal information” has the meaning given to it in the Privacy Act and includes any information or opinion, whether true or not, about an identified individual or an individual who is reasonably identifiable.
We may collect the following types of personal information:
Do we collect sensitive information?
In some cases we may also collect ‘sensitive information’, for example if you are involved in an accident we may collect medical information and incident reports.
CCTV footage may contain sensitive information, and as such its use and release is governed by additional policies, this is covered in more detail in the section dealing with access to personal information.
How is personal information collected?
We will generally collect personal information:
We may also collect your personal information from third parties such as:
What happens if Stockland cannot collect personal information?
You are not required to provide personal information to us. If you wish to deal with us anonymously or you decide not to provide us with the personal information described above, we may not be able to provide or tailor our products, services or information to you, either to the same standard or at all (for example certain functions of our website may not function properly if you disable cookies).
Why do we collect, store, use and disclose personal information?
We may collect, hold, use and disclose your personal information for the following purposes:
We will not use or disclose your personal information for any purpose other than the purpose for which is was collected (or a related purpose) unless you have consented to that purpose or we are permitted to do so by law.
To whom does Stockland disclose personal information?
We may disclose your personal information (including in some circumstances, your sensitive information) for the purposes for which it was collected or related purposes (as described above) to:
If any Stockland entity is sold to a third party, we may transfer any personal information we hold about you to that third party. We may also disclose personal information on a confidential basis to prospective purchasers of a Stockland entity.
Where we have disclosed personal information to a third party acting on our behalf, we request that those third parties do not use the personal information for their own purposes and that they comply with the Privacy Act and this Policy.
CCTV at Stockland sites and shopping centres
We use CCTV surveillance systems to monitor and record activities at Stockland properties and premises (including our workplace and logistics and retail town centre premises, and residential communities and retirement living communities), the main purpose of this is to maintain a safe and secure environment for our employees, customers and visitors to our premises.
This means we may use your personal information gathered from CCTV for security and risk management, loss prevention, incident investigation purposes and other purposes set out in this Policy, or as permitted by the law.
We also use the data collected from our CCTV surveillance systems to maintain or improve our properties, premises and services, we may do this by:
When used for these purposes the data is aggregated anonymously. We do not identify individuals for these uses.
We securely discard the data collected from our CCTV surveillance systems when it is no longer required for business or legal purposes.Free Wi-Fi service
We offer a free Wi-Fi network service at certain Stockland premises, including our shopping centres.
If you are carrying a Wi-Fi enabled device within range of one of our Wi-Fi networks, we may pick up certain data that is transmitted from your device whether or not you join our Wi-Fi network, including:
We may also link this type of information to your provided personal information if we hold a common identifier such as your unique device identifier.
In each case, we will only use information or data collected via our free Wi-Fi network service in accordance with, and for the purposes set out in this Policy, or as permitted by the law.
If you do not want this information collected, you can disable Wi-Fi and Bluetooth on your device/should not sign into the Wi-Fi network.
Direct marketing communications
We and/or our third party service providers may send you direct marketing communications and information about:
These communications may be sent in various forms, including by telephone, post, fax, email, SMS or any other form of electronic communication, in accordance with the Privacy Act and the Spam Act 2003 (Cth). By providing us your contact details you consent to Stockland and/or third party service providers we engage, sending you the direct marketing messages described above.
Opting-out of other or all marketing communications
You may opt-out of any or all, direct marketing communications at any time by contacting the sender using the details set out in the communication (for example an unsubscribe link), or in the case of Stockland, by contacting our Privacy Officer using the contact details below. In some situations, for example if we are providing services to you, we may still be required to make certain communications to you in connection with providing the services or products to you or as required by law.
Do we disclose personal information outside Australia?
We may disclose your personal information to the following overseas recipients:
The countries in which the recipients are likely to be located include Singapore, United States, Canada, Japan and India.
We will take reasonable steps to ensure that any overseas recipient does not use the personal information for their own purpose, and complies with the Privacy Act and this Policy.
You can set your browser to notify you when you receive cookies, providing you with the opportunity to either accept or reject it, you can also refuse all cookies by turning them off in your browser. However if you do this, certain parts of our website may not function properly.
We handle personal information collected by cookies in the same way that we handle all other personal information as described in this Policy.
Security of Information
We may hold your personal information in either electronic or hard copy form. The confidentiality and security of your information is very important to us, and we take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.
We use a number of physical, administrative, personnel and technical measures to protect your personal information, and regularly test our security controls, however the open nature of the internet means there is always some risk that an unauthorised party might find ways to overcome our security measures, and it is not possible to guarantee the security of your personal information. You should also be aware that e-mail communications are not usually encrypted and should not be considered secure.
Where we no longer require your personal information for business or legal reasons, we will take reasonable steps to destroy or de-identify it.
Where required by applicable law, we will notify you, and the Office of the Australian Information Commissioner and/or other relevant regulatory authorities, of data breaches affecting your personal information.
Third party links
Our websites and mobile applications may contain links to websites owned and operated by other organisations. When you click on one of these links, you are moving to another website. Unless stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites. We encourage you to read the privacy policies and other terms that apply to those websites as they may differ from this Policy, and if you have any privacy concerns, we encourage you to contact those website providers directly.
Access and correction of personal information
If you wish to seek access to and correction of your personal information that we hold about you, please contact our Privacy Officer using the contact details set out below. Depending on the nature of your request, we may ask you to provide us further information in order to verify your identity and ask you to put in writing the information you require.
There may be instances where we cannot grant you access to the personal information we hold, for example, if a legal exception applies or where granting access would interfere with the privacy of others or result in a breach of confidentiality. If that happens we will give you written reasons for refusal.
In the case of requesting access to CCTV footage, we have a corporate procedure, developed to conform with the Privacy Act that governs our use and release of CCTV footage. It may also be the case that we are unable to release CCTV footage if there is an investigation or legal action pending.
If you wish to update the personal information that we may hold, please contact our Privacy Officer firstname.lastname@example.org. If we disagree that there are grounds for amending your personal information, we will inform you of the reasons and add a note to the personal information stating that you disagree with it.
We will not charge you for requesting access or corrections to your personal information, however we may recover reasonable expenses associated with providing you with access to your personal information.
Complaints and concerns about your privacy
If you have any questions about how we handle your personal information, or if you wish to make a complaint about our information handling practices, please contact our Privacy Officer:
Our Privacy Officer will acknowledge receipt of your complaint and after we have completed our investigation, contact you (usually in writing) to advise the outcome, usually within 30 days, and invite a response to our findings.
If you consider that we have been unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the Office of the Australian Information Commissioner:
Phone: 1300 363 992
Post: Office of the Australian Information Commissioner
GPO Box 5218 Sydney NSW 2000
Please visit the OAIC website at www.oaic.gov.au for further information.
We may update our Policy from time to time to take into account new laws and technology, changes to our operations and business practices. The most current version of this Policy is on our website at www.stockland.com.au/privacy-policy and we encourage you to check periodically to ensure that you have the most up to date version of our current Policy.
Effective: 20 August 2019