Tandou Limited ("Tandou") values the relationship that we have with our customers and we are committed to respecting and protecting the privacy and personal information of our customers.

The business of Tandou is governed by various policies and procedures that Tandou has put in place, including this Privacy Policy Statement which has been designed to ensure compliance with obligations arising under the Privacy Act 1988. The Privacy Act 1988 ("the Act") is based on a set of ten Privacy Principles that seek to reach a balance between the free flow of information for the public good and the protection of personal information.

Throughout this Privacy Policy Statement reference is made to ‘personal information.’ This is a reference to information, whether fact or opinion and whether true or not, which identifies a person as an individual or information from which that person’s identity may be reasonably ascertained. This Privacy Policy Statement explains the policy of Tandou in dealing with personal information that we collect.

Collection of Personal Information

Tandou will only collect personal information that is necessary for completion of an Order when wine is purchased online, by mail order or phone order. The personal information that will be collected by Tandou includes name, email address, daytime telephone number, financial information such as credit card details and special delivery instructions.

Use and Disclosure

Tandou is the sole owner of the personal information that we collect. In some circumstances, however, the personal information that is collected by Tandou may be used or disclosed for purposes other than the primary purpose of collection. This may include circumstances where:

a. The provider of the personal information has given consent to the use and/or disclosure;

The disclosure is required or authorised by or under law;
There is a serious and imminent threat to an individual’s life, health, safety or welfare or a serious threat to public health, public safety or public welfare;
Tandou suspects that unlawful activity, such as a fraudulent transaction, has been or may be engaged in and in such circumstances Tandou may disclose or use the personal information to investigate or report the unlawful activity to the relevant person or authority;
Tandou reasonably believes that the use and/or disclosure of personal information is reasonably necessary for one or more of the following by or on behalf of an enforcement agency:

i. the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches a prescribed law;

the enforcement of laws relating to the confiscation of the proceeds of crime;
the protection of public revenue;
the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal.

If it is necessary for Tandou to use and/or disclose personal information under paragraph (e), Tandou will make a written note of the use and/or disclosure.

Data Quality

Tandou will take reasonable steps to ensure the personal information that we collect, use and/or disclose is accurate, complete and up to date for the purpose that the information was collected.

Access and Correction

Where Tandou holds personal information about a person Tandou will, on request, provide that person with access to the information in a manner suitable to the person’s reasonable needs except to the extent that:

providing access would pose a serious and imminent threat to the life or health of any individual; or
providing access would have an unreasonable impact on the privacy of other individuals; or
the request for access is frivolous or vexatious; or
the information relates to existing or anticipated legal proceedings between Tandou and a person and the information would not be accessible by the process of discovery in that proceeding; or
access to the information would reveal the intentions of Tandou in relation to negotiations with a person in such a way as to prejudice those negotiations; or
providing access would be unlawful; or
denying access is required or authorised by or under any law; or
providing access would be likely to prejudice an investigation of possible unlawful activity; or
providing access would be likely to prejudice:

the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches a prescribed law; or
the enforcement of laws relating to the confiscation of the proceeds of crime; or
the protection of public revenue; or
the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal by or on behalf of an enforcement body; or

where an enforcement body performing a lawful security function asks Tandou not to provide access to the information on the basis that providing access would be likely to cause damage to the security of Australia.

Where Tandou holds personal information about a person and that person is able to establish that the information is not accurate, complete and up to date, Tandou will take reasonable steps to correct the information so that it is accurate, complete and up to date. If the person disagrees that the personal information held by Tandou is accurate, complete and up to date the person may request Tandou to associate with the information a statement claiming that the information is not accurate, complete or up to date. In the event that such a request is made, Tandou will take reasonable steps to provide a statement.

If Tandou denies a person access to the personal information that is held about them or refuses to correct personal information that is held about them, Tandou will provide reasons for such denial or refusal.

Links

The website of Tandou may, from time to time, contain links to the websites of other organisations which may be of interest to the customers of Tandou, such as Secure Bill which is an online facility that Tandou uses that allows people to pay online bills issued by Tandou. These linked websites are responsible for their own privacy practices regarding personal information. Tandou advises that those websites should be checked for their respective privacy policy statements and we encourage each person to read the privacy statements of those websites.

This website does not use ‘cookies.’ A cookie is a piece of date stored on the user’s hard drive containing information about the user.

Log Files

The website of Tandou uses IP addresses. The website may log your IP address and Tandou may use the IP address to diagnose problems with our servers. IP addresses are not linked to personally identifiable information and are not shared with any third party.

Security

Tandou takes every reasonable precaution, both online and offline, to protect the security and integrity of our customers’ personal information from misuse and loss and from unauthorised access, modification or disclosure.

When our order form asks a person to enter personal information, such as financial details, that information is encrypted and protected with the best encryption software available in the industry – SSL.

Tandou also strives to protect personal information offline. Personal information that is collected by Tandou is restricted to our offices and only employees who need the information for a specific job are granted access to the personally identifiable information.

Tandou will take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose for which the information may be used or disclosed.

Transborder Data Flow

Tandou will not transfer personal information collected outside of the Commonwealth of Australia unless the receiving country is subject to a comparable scheme.

Notification of Changes

If Tandou decides to change this policy such changes will be posed on our website so customers are always aware of what information Tandou collects, how Tandou uses it and under what circumstances, if any, Tandou discloses it.

Tandou is proactive in maintaining the privacy of our customers. If the Federal Government makes amendments to the existing Privacy Act 1988 and/or introduces new legislation, Tandou will review this Privacy Policy Statement to ensure compliance.

Further information on privacy legislation and important documentation regarding personal information can be obtained from the Office of the Privacy Commissioner at www.privacy.gov.au.

Complaints Handling and Contact Details

If a person believes that their privacy may have been interfered with by Tandou or a person has a complaint with Tandou about the way in which Tandou has handled that person’s personal information, the person may contact us as set out below:

Tandou Limited

Telephone +61 3 5018 6500

Email tandou@tandou.com.au