Where we refer to the ‘Privacy Act’ in this Policy we mean, if you are located in Australia, the Privacy Act 1988 (Cth) and if you are located in New Zealand, the Privacy Act 1993 (NZ).
What personal information do we collect and hold?
The types of personal information we collect and hold will vary depending on your dealings with us.
We may collect and hold any or all of the following types of personal information:
- your name, address(es), telephone number(s) and other contact details;the name of any company you are employed by or
- associated with;
- your position, title, profession or occupation, work history and other work-related details;
- your email address(es);
- your bank details;
- details of your assets and credit history;
- your credit card details;
- tax file number (TFN) / Australian Business Number (ABN);
- transaction details relating to your use of our products, services or benefits;
- membership numbers or other personal identifiers related to your access to or use of our services;
- health and medical information (such as COVID-19 vaccination status, medical records, sickness absence records and medical certificates);
- criminal background and financial information (including as collected in the context of pre-employment screening/checks);
- CVs, references, application forms, details of education, job history and experience (both within Metcash and with previous employers), areas of expertise, qualifications, contracts of engagement and offer letters;
- trade union / professional association membership;
- other information derived from background checks, including previous address details;
- emergency contact details;
- your date of birth and driver’s licence number where required (for example, to comply with age restrictions or in order to verify your identity when you apply for credit terms); and
- other personal information you provide to us.
How do we collect your personal information?
Metcash generally collects your personal information directly from you, unless it is unreasonable or impracticable to do so. When collecting personal information from you, we may collect it in the following ways:
- through your access to and use of our websites, or when you email us;
- during conversations with you in person (such as in store or via telephone);
- through security cameras at our premises;
- when you apply for credit terms with us, or complete an application, purchase order, agreement or similar or related paperwork;
- through your participation in our procurement processes;
- when you apply for a job with us, including through pre-employment screening/checks (which may include medical assessments, criminal record checks and bankruptcy checks);
- when you enter into a competition or promotion run or supported by Metcash;
- when you register to use one of our marketing or promotional programs, platforms or portals;
- when you subscribe to receive communications from us;
- when you complete one of our surveys;
- otherwise in the course of us providing you with a requested product, service or benefit; or
- when you have other dealings with us.
We may also collect personal information from third parties including:
- business partners we collaborate with to conduct marketing and promotional activities (including suppliers and retailers, and their service providers);
- in connection with pre-employment screening checks (e.g. medical records and health information may collected from a medical practitioner as part of a pre-employment medical examination);
- third party companies such as credit reporting agencies, law enforcement agencies and government entities; and
- your representatives (including legal representatives).
Why do we collect, hold, use and disclose your personal information?
Metcash collects, holds, uses and discloses personal information for a variety of different purposes relating to our functions and activities, which include:
- to establish and maintain our relationship with you, and provide you with information to enable you to remain in contact with Metcash;
- to assess and process your application;
- to provide the products or services you have requested from us, and keep a record of them, and process any payments you make to us;
- to ensure that you can provide products or services to us in the course of any engagement that we may have with you;
- to administer our promotions and competitions;
- to provide credit to you, or pay you for products or services you provide to us;
- to provide you with access to protected areas of our websites;
- to respond to your enquiries;
- to process and respond to your complaints;
- to perform our internal and external administrative functions;
- to notify you of, and register you for, our events and promotions;
- to conduct surveys;
- to assess the performance of our websites and to improve the operation of the websites, and for other data analytics purposes;
- to assist us to make our services and products more valuable or useful to you;
- to conduct due diligence;
- to enable us to perform any duties we owe to you;
- to otherwise enable us to perform our business activities and functions;
- any other purposes described to you at or around the time of collection of the information;
- purposes to which you have provided your consent;
- to enforce our legal rights and obtain professional advice;
- to comply with industry standards and our policies;
- to investigate, review, mitigate risks associated with, and inform you of, a data or other security breach involving your personal information; and
- as required or authorised by law or a court or tribunal order.
Where we have your consent or are otherwise permitted by law to do so, Metcash may also use and disclose your personal information to send direct marketing to you from:
- Metcash Trading Limited and its related bodies corporate; and
- third parties who provide services to us.
The direct marketing may relate to:
- our products and services;
- the products and services of other parties;
- promotions run by us or other parties; or
- other new developments we believe may be of interest to you.
You may opt-out of receiving this direct marketing from Metcash or third parties through the unsubscribe function that will be made available to you with each direct marketing communication.
If personal information is not provided
You do not have to provide us with any personal information however, if you do not do so, this may limit the assistance we are able to provide you. For example, we may not be able to complete a transaction you have entered into, finalise payment for a product or service you have ordered or supplied, consider or process an application you have made, provide a product or service you have requested, ensure that you can provide us with products or undertake services that we have requested of you, grant credit terms, accept or validate your entry in a promotion or contact you in connection with the promotion, tailor, optimise or enhance your use or experience of our websites, respond to your queries or complaints or otherwise handle your enquiries, process your job application or otherwise provide you with the products, services or benefits you have requested.
Who do we disclose your personal information to?
Metcash may disclose your personal information to various third parties who we engage to assist in performing our business activities and functions, including those who help to provide our products and services to you. The third parties we may disclose your personal information to include:
- our personnel;
- manufacturers and suppliers;
- couriers and delivery contractors;
- customers and suppliers, for example, in connection with complaints or queries, or to the extent this is required (whether by the customer, the supplier, Metcash or by law, including public health orders) in order for you to perform your role (such as attending a customer or supplier site);
- marketing consultants and promotions companies (some of whom are engaged for the purposes of directly marketing products, services and promotions to you);
- professional advisers such as accountants, solicitors, business advisers and consultants;
- government bodies and regulatory authorities;
- credit reporting agencies or bodies in accordance with our Credit Reporting Data Management Policy;
- companies that we plan to merge with or be acquired by or who may invest in us;
- payment processors, debt collectors, web hosting providers, IT service providers and other third party service providers that are used by Metcash to store collected information.
How do we store and protect your personal information?
Metcash stores personal information in a combination of computer storage facilities, paper-based files and other records. In so doing, we have taken reasonable steps to protect your personal information from misuse, interference and loss, and unauthorised access, modification or disclosure.
When we no longer need your personal information, we take reasonable steps to destroy or permanently de-identify the information.
Disclosure of personal information to overseas recipients
Metcash discloses personal information, for some of the purposes described above, to organisations located in other countries, including the United Kingdom, the United States of America and India. We may also make personal information held in Australia, New Zealand or the other countries listed above remotely available for processing by service provider personnel located in other countries, such as China and Thailand.
We take reasonable steps to ensure that overseas recipients of your personal information do not breach the privacy obligations relating to your personal information.
How you can access and correct your personal information
Metcash will take reasonable steps to make sure that the personal information we collect, use or disclose is accurate, complete and up to date. If your personal details change, such as your address or phone number, please contact our Privacy Officer by email or at the address detailed below.
At your request, Metcash will provide you with a copy of any personal information which we hold about you, unless an exception under the Privacy Act applies. We may charge reasonable fees for retrieving this information, in which case we will inform you of the fee and obtain your agreement to that fee before providing the information.
We will promptly acknowledge and investigate any complaint about the way we manage personal information.
- so that your preferences for a particular site can be stored;
- to improve your browsing experience; and
- to help tailor advertising and promotions to you.
Information is also generated whenever a page is accessed on a Metcash website that records information such as the time, date and specific page. We collect such information for statistical and maintenance purposes that enables us to continually evaluate our websites’ performance.
How to contact us or make a complaint
The Privacy Officer
Metcash Trading Limited
1 Thomas Holt Drive
Macquarie Park NSW 2113
Metcash will take reasonable steps to remedy any issues resulting from our failure to comply with our privacy obligations. If our response to your complaint does not address your concerns to your satisfaction, you may have the right to make a complaint to a competent regulator (e.g. in Australia, the Office of the Australian Information Commissioner, whose website is located at www.oaic.gov.au and in New Zealand, the Office of the Privacy Commissioner, whose website is located at www.privacy.org.nz/).